last executing test programs: 8m13.729089044s ago: executing program 1 (id=1496): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310001100", 0x33fe0}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1, 0x7, 0x36302105, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x8}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r1, 0x4000, r0}, 0x18) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'tunl0\x00'}) 8m13.557839033s ago: executing program 1 (id=1501): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 8m13.157000283s ago: executing program 1 (id=1505): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000800)=r2, 0x4) r4 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@generic={0xd, 0x6, 0x9, 0x8c24, 0x3}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0x44, 0x15, &(0x7f0000000180)=""/21, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000001c0)=[r0, r0, r4, r0], &(0x7f0000000200)=[{0x0, 0x1, 0xf, 0x2}, {0x5, 0x1, 0x4, 0x4}, {0x1, 0x4, 0x8, 0x3}, {0x0, 0x3, 0x5, 0x6}, {0x4, 0x2, 0x0, 0x3}, {0x3, 0x3, 0x9, 0x8}, {0x0, 0x2, 0x4, 0xc}, {0x2, 0x5, 0x0, 0x7}, {0x4, 0x5, 0xf, 0x5}], 0x10, 0x200}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r0, r5, 0x24, 0x4, r0, @void, @value=r4}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x50}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 8m11.955711842s ago: executing program 1 (id=1512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400"], 0x48) r1 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) 8m11.77791676s ago: executing program 1 (id=1515): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 8m11.360419671s ago: executing program 1 (id=1519): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xe}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="9327b2635bccd3c3e409869943df2225b3f35abed524ad", 0x17}, {&(0x7f0000000580)="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", 0x56d}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a1fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038000a004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb64f69853362ac3407173ec", 0x5b}, {&(0x7f0000000000)="92", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m55.278030512s ago: executing program 32 (id=1519): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xe}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="9327b2635bccd3c3e409869943df2225b3f35abed524ad", 0x17}, {&(0x7f0000000580)="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", 0x56d}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x3) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x1c, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4c}, [@ldst={0x4}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000026006bab9a1fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038000a004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb64f69853362ac3407173ec", 0x5b}, {&(0x7f0000000000)="92", 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m47.563958394s ago: executing program 4 (id=4613): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41100}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x4840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@enum={0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2e00}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000140)=""/4096, 0x46, 0x1000, 0x1}, 0x28) 1m47.257444059s ago: executing program 4 (id=4615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x106) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x46, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000003c0)=""/23, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x8000000000000000) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) close(r0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40047438, 0x50d77f243c125666) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) close(r0) 1m46.716764917s ago: executing program 4 (id=4619): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000028e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x20000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x16, 0x7, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c8, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x4, 0x930db24fc20341ff, 0xfffffffffffffff0}, @generic={0x9, 0x3, 0x6, 0x3}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}]}, &(0x7f0000001100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x250a, 0x3}, 0x8, 0x10, &(0x7f0000001180)={0x0, 0x6, 0x0, 0xb6}, 0x10, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000011c0)=[{0x3, 0x4, 0x5, 0xa}, {0x5, 0x5, 0x7, 0x9}, {0x0, 0x4, 0xc, 0xe}], 0x10, 0x5}, 0x94) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x18, 0x4, &(0x7f0000000dc0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0x0, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}], &(0x7f0000000e00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2f, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x6, 0x480, 0xffffffff}, 0x10, 0x0, r3, 0x4, &(0x7f0000001380)=[r4, r0, r0, r5, r0, r0, r0, r0, r0, r0], &(0x7f00000013c0)=[{0x1, 0x4, 0x3, 0xc}, {0x1, 0x4, 0x2, 0x1}, {0x1, 0x5, 0x4, 0x5}, {0x4, 0x2, 0x8, 0xdaa521a20b570e8f}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000040009504020000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x2}, 0x10}, 0x94) 1m46.478031718s ago: executing program 4 (id=4622): perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000005d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffff}, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000001250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x3, 0x0, 0x0, 0x0, 0x8, 0x217c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x1, 0x0, 0xfd, 0x0, 0x401, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x7b, 0xe, 0x0, 0x10000, 0xfffd}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x0) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000080)='./file0\x00', r0, 0x4000, r2}, 0x18) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYBLOB="6d55c85771e85b8a8efe94e16ca1b9e2092cc8671df4b61d247424007b8bddc5a1159444dbed1c918994699ab1c00f3a0a4786364b7c87b077b985622a60050af8ee794828c78bdff02d4722b234722c6f7c40cca5aa768135e8f341b6149cdaf43df0a29ed17faedd73ba08522a3cad62a02799e45d8cf9656c9fb5c86826100bcbac0f1d143dbeb4e2621b896ac10d84d5a9151c3e8252fa58cb0753e839df2ada424c7aedd807a8fd3d73426831371ca798755a6d4f922a716dbf3a8e81b63a7ad5ca8702a1f14c0cf3c8eb9ed503329eda8337a1306f6c5d26", @ANYBLOB='\x00'/18, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000000000000060944b25c76e808672cc1127a8741eea00000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) perf_event_open(&(0x7f0000000d00)={0x0, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x87) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2, 0xa, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) 1m46.137843835s ago: executing program 4 (id=4628): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x800, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x1e, 0x4, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={&(0x7f0000000c00)="65b05ae1dc1217fd247f1a19f4df1f3c9f7f8886d4a10a902617a68554584d3ea1ed53ff3bd5dea8d270906993956199c316c971f24d3b54b99b9bee633a61a544bcace7d6cb2f9c53b0d3971fa08975d3fcb99c7d6b3f48b50114ad105a1c426fb2626162259bcb034b0e4ccfd622542b1a16310af34915c362472ad282e588ff18bb44e62838112c5348a011dec3d618727b649e96d025dd1207125856a419760a18bdcc8fd347a2ae9e79e2fe53a9e22fca084f886047f2fdedffdb015873e3306bc7f9cd40c98246347afe92", &(0x7f0000003840)=""/4096, &(0x7f00000002c0)="5c72d301b5ceb53d6b5933f5b96e2f79a5ef9003cba09f90549b02d58556", &(0x7f0000000d00)="5e340192f76c940f33977e0da8d04014b10977e7327aa7a10396495f88307e05f6e330b7fac72737ac68025437b782cd89bdd03e2a228f5ca09e78907eb6def4f346b85d98c35a4323e1dec55b16cd62c4f62e0ca3640e497734244f79fc418330d2ae0013284130392960bb34260d6499edf0dc43ea87681eb15c211c123877e8a1e4897e855f6834dcc7b6f1ff8bc346880b35a83592e2afeb679fef16d7bacf1e3401c12b12c3042e054b", 0x7}, 0x38) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x80, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x80, 0x7fd, 0x8000, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x10d, 0x1b, &(0x7f0000000100), 0x120) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4c, 0x0, 0x4) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003800)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d000000000000000002000000000000000000000a0200"], &(0x7f0000003740)=""/138, 0x3a, 0x8a, 0x1}, 0x28) close(r0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) 1m45.372287822s ago: executing program 4 (id=4634): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001240)={r0, 0x3, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.848507227s ago: executing program 33 (id=4634): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001240)={r0, 0x3, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000180)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.637893431s ago: executing program 5 (id=5379): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82641, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000640)={0x3, 0x80, 0x40, 0x9, 0x5, 0xa, 0x0, 0x0, 0x1003, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x200}, 0x1, 0x0, 0x6, 0x36faa2911d0fdf2, 0xfffffffffffffeff, 0x8, 0x40, 0x0, 0x8, 0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x409, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x5ae) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) 3.204701422s ago: executing program 5 (id=5383): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41100}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x4840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@enum={0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000140)=""/4096, 0x46, 0x1000, 0x1, 0x0, 0x0, @void, @value=0x1c}, 0x28) 2.781816513s ago: executing program 5 (id=5388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.521817335s ago: executing program 5 (id=5391): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x80, 0x0, 0x0, 0xa, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf884, 0x5}, 0x2, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x0, 0x8, 0x0, 0x100000000002000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)="c6b7", 0x2}], 0x1}, 0x4000080) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902d8", 0x38}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) 2.324775496s ago: executing program 0 (id=5392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x60, 0x0, 0x0, 0xfffdfffe}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1, 0x4000000000000}, 0x18bf0, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x1000000) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000003c0)}, 0x4040801) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) 2.318765715s ago: executing program 6 (id=5393): r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x38, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4a, 0x0, 0x356422d70f279a34) 2.269117438s ago: executing program 3 (id=5394): sendmsg(0xffffffffffffffff, 0x0, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x4000}, 0x21) 2.22993038s ago: executing program 2 (id=5395): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1, 0x0, 0x0, 0x2b00}, 0x0) 2.114495456s ago: executing program 6 (id=5396): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x97ffffff) 1.981003862s ago: executing program 2 (id=5397): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000028e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x16, 0x5, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c8, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x4, 0x930db24fc20341ff, 0xfffffffffffffff0}, @generic={0x9, 0x3, 0x6, 0x3}]}, 0x0, 0xe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x250a, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000011c0)=[{0x3, 0x4, 0x5, 0xa}, {0x5, 0x5, 0x7, 0x9}, {0x0, 0x4, 0xc, 0xe}], 0x10, 0x5}, 0x94) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x18, 0x4, &(0x7f0000000dc0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0x0, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}], &(0x7f0000000e00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2f, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x4, &(0x7f0000001380)=[r4, r0, r0, r5, r0, r0, r0, r0, r0, r0], &(0x7f00000013c0)=[{0x1, 0x4, 0x3, 0xc}, {0x1, 0x4, 0x2, 0x1}, {0x1, 0x5, 0x4, 0x5}, {0x4, 0x2, 0x8, 0xdaa521a20b570e8f}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000040009504020000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x2}, 0x10}, 0x94) 1.955105263s ago: executing program 2 (id=5398): socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='cpu\t>0&&\t') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000180)={0x4, 0x80, 0xff, 0x9, 0x5, 0xa, 0x0, 0x8, 0x10010, 0x4, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x7, @perf_bp={&(0x7f0000000140), 0x2}, 0x300, 0x10, 0x2, 0x6, 0x7fff, 0x8, 0x9, 0x0, 0x87, 0x0, 0x4}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r2 = syz_clone(0x206000, &(0x7f0000001980), 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000000300), 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x5, 0x0, 0x7602, 0x2, 0x8140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, r2, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) 1.910352776s ago: executing program 3 (id=5399): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8902, &(0x7f0000000040)) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0xfffffd0f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="850000"], 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff241a918217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7a12c9fcfe4c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca8939000031300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_clone(0x20001000, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4}, r5, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r6) 1.798987341s ago: executing program 0 (id=5400): unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41100}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x4840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@enum={0x4}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @volatile]}, {0x0, [0x2e, 0x2e, 0x2e, 0x61]}}, &(0x7f0000000140)=""/4096, 0x46, 0x1000, 0x1, 0x0, 0x0, @void, @value=0x20}, 0x28) 1.798702621s ago: executing program 6 (id=5401): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.784620242s ago: executing program 0 (id=5402): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000c307472d000000000000000002000000000000000051c3ef212a3ec16d9f6d2044385ea2"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xc0, 0x1a00}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63ae", 0xb}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6, 0x1, 0x4e, 0x9c, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x1f}, 0x8, 0xfff, 0x886, 0x9, 0x1ff, 0x4, 0x3, 0x0, 0x400, 0x0, 0x656a}, r4, 0xd, r0, 0x3) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 1.444098149s ago: executing program 6 (id=5403): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x4000, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f00000002c0)="88a8", 0x2}], 0x2}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x9, 0x3ff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000980)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000009c0)='tasks\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x40019, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000a3b703000000000000850000000500000018010000202070250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000800085000000050000009500000000000000", @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x0, 0x10}, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000100"/27], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f00000005c0)=r1}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000e4d9000000000000fe0e000034a15000f0ffffff81691000fcffffff9500000000000009"], &(0x7f0000000240)='GPL\x00', 0x2, 0x91, &(0x7f0000000300)=""/145, 0x41000, 0xc3, '\x00', r5, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x7, 0x7, 0x8001}, 0x10, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000640)=[r7, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x2, 0x3, 0x4}, {0x0, 0x3, 0x2, 0x3}, {0x3, 0x1, 0xd, 0x6}, {0x4, 0x4, 0x7, 0xb}, {0x4, 0x1, 0x0, 0x7}], 0x10, 0x4}, 0x94) setsockopt$sock_attach_bpf(r3, 0x29, 0x4a, 0x0, 0x356422d70f279a34) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x1, 0xe2, 0x8, 0x0, 0x7fffffffffffffff, 0x0, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x6}, 0x200, 0xfffffffffffffffc, 0xd0, 0x0, 0x5, 0x8, 0x3, 0x0, 0x5, 0x0, 0x8}, r11, 0x2, r11, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r12, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r8, &(0x7f0000000800)="c75116688fd6260af962b8d20afb997660c4a44f8920fb668c9ac51a0ef11aafc54a5d6cccd90ecf6b17d4d7ab51e9", &(0x7f0000000840)=""/195}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r11, 0x3, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000180)='\x01\x8e|\xcc\xf0\x05\xf6\xd0G\xb1-\xa1\x8ff#\x98,&\xee#\x8aAW\x83lB\x1f\x98i\x059\xd93\xaa\x01L\xee\x92.w\x04\xf9\x94Y\xf4\x06\xbdW\xb3B\x03\a\x06\xf6\xa42') ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000007c0)={'veth0_virt_wifi\x00', 0x1000}) 1.383190292s ago: executing program 5 (id=5404): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.312960745s ago: executing program 0 (id=5405): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="00505c80000000000000000000000000000000001c57bcb59b8e3278821fbcffb11c61c3928fea422a0dc35556ac1d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020010000b02d25a806f8c6394f9031a04000a740100053503000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007a000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000094d21c961146c00000000000500ffff000000009500000002000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8}, 0x94) sendmsg$inet(r4, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 1.136875044s ago: executing program 2 (id=5406): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x13, 0x8, 0x4, 0xe4, 0xa08, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000500), 0x8, 0xf2, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async, rerun: 32) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) (rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000003a060000070000000500000000100000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="04000200e2ffffff23e8f5ffffff0001100049bf0000000000000000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB], 0x10) (async, rerun: 64) close(r0) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, 0x0, &(0x7f0000000540)=r0}, 0x20) (async) write$cgroup_int(r4, &(0x7f00000002c0)=0x7, 0x12) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async, rerun: 64) r5 = socket$kcm(0x1e, 0x1, 0x0) (rerun: 64) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x19, &(0x7f0000000200)=r6, 0x21) (async) close(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000800000000000000072dfff000000000020000000000000008400000008000000eeb4fe8ba15e3999ef000000"], 0x38}, 0x41) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 830.408518ms ago: executing program 2 (id=5407): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x50}, [@ldst={0x5}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socket$kcm(0x1e, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x300}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xffffffff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 757.372533ms ago: executing program 3 (id=5408): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000028e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x16, 0x5, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4c8, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x4, 0x930db24fc20341ff, 0xfffffffffffffff0}, @generic={0x9, 0x3, 0x6, 0x3}]}, 0x0, 0xe, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x250a, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000011c0)=[{0x3, 0x4, 0x5, 0xa}, {0x5, 0x5, 0x7, 0x9}, {0x0, 0x4, 0xc, 0xe}], 0x10, 0x5}, 0x94) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x8}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={0xffffffffffffffff, 0x7, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x18, 0x4, &(0x7f0000000dc0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x0, 0x6, 0x0, 0x5, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}], &(0x7f0000000e00)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2f, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x4, &(0x7f0000001380)=[r4, r0, r0, r5, r0, r0, r0, r0, r0, r0], &(0x7f00000013c0)=[{0x1, 0x4, 0x3, 0xc}, {0x1, 0x4, 0x2, 0x1}, {0x1, 0x5, 0x4, 0x5}, {0x4, 0x2, 0x8, 0xdaa521a20b570e8f}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000040009504020000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x2}, 0x10}, 0x94) 749.252383ms ago: executing program 6 (id=5409): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x3a009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb7ae601001800000000000000240000002400000002000000000000000000f0be82e49f3593b5a522b733b100040000000300000000000000090000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) close(r0) socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r2, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001240)="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", 0x3d9}, {&(0x7f0000002b40)="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", 0x1db}], 0x2}, 0x8400) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x26}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x91d3e03a57075ae9, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0xb7, 0x5f, 0x2, 0x7, 0x1, 0x0, 0x0, 0x35a05, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1001}, 0x1075, 0x101, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb", 0x1}], 0x1}, 0x0) 626.042599ms ago: executing program 3 (id=5410): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1, 0x0, 0x0, 0x2b03}, 0x0) 564.814772ms ago: executing program 5 (id=5411): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b25, &(0x7f0000000000)={'wlan1\x00', @random="c30020001400"}) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="1e000000030000002d0d00000800000044000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32=r0, @ANYRES8=r0], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffefffff, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x8054) sendmsg$inet(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000014006b03000000d86e6c1d000284018eaa48df6e6e4de014117ea622fb17960359e3f58e76117c21f450e71b006371432bb47e51060000000000000037e786a6d0bdd7000000000000000000000000000000008967140889", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xfffffff8, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r6, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4df", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="110000000000000086947a9d", @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000069100000000000006300e0ff0000000095000000000000008c44d7fba4f9ffd101fc87f7772d38ee6aefdcb55707cc931237f83b12759ed0912a68d784413287fd21d4ea"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) 487.773876ms ago: executing program 0 (id=5412): r0 = gettid() perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba9, 0x0, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000100)}, 0x900000000000000) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4b}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 412.99309ms ago: executing program 3 (id=5413): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 331.646963ms ago: executing program 2 (id=5414): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x80, 0x0, 0x0, 0xa, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf884, 0x5}, 0x2, 0x0, 0x0, 0x7, 0x9, 0x0, 0x1, 0x0, 0x8, 0x0, 0x100000000002000}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r3, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)="c6b7", 0x2}], 0x1}, 0x4000080) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416cf99116e3a902d8", 0x38}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000004"], 0x48) 199.75454ms ago: executing program 3 (id=5415): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000c307472d000000000000000002000000000000000051c3ef212a3ec16d9f6d2044385ea2"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0xc0, 0x1a00}, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0xffffffdc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63ae", 0xb}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = getpid() perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6, 0x1, 0x4e, 0x9c, 0x0, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x1f}, 0x8, 0xfff, 0x886, 0x9, 0x1ff, 0x4, 0x3, 0x0, 0x400, 0x0, 0x656a}, r4, 0xd, r0, 0x3) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) 458.319µs ago: executing program 0 (id=5416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ip6erspan0\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x60, 0x0, 0x0, 0xfffdfffe}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x1, 0x4000000000000}, 0x18bf0, 0x9, 0x0, 0xa, 0xe4, 0xffff0000, 0xffff, 0x0, 0x102ff, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x100000000000000) sendmsg$inet(r4, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000003c0)}, 0x4040801) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random="2d311e000008"}) 0s ago: executing program 6 (id=5417): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000040) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x403ac400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ridge0: port 1(bridge_slave_0) entered blocking state [ 520.164632][T15741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.927908][T15788] netlink: 'syz.2.3672': attribute type 1 has an invalid length. [ 521.936430][T15788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3672'. [ 521.958263][T14905] wlan1: Trigger new scan to find an IBSS to join [ 522.008731][T15788] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.016265][T15788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.988001][T15818] netlink: 'syz.4.3679': attribute type 2 has an invalid length. [ 523.015279][T15818] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3679'. [ 523.499500][T15835] netlink: 'syz.2.3685': attribute type 7 has an invalid length. [ 523.510259][T15837] netlink: 'syz.3.3686': attribute type 1 has an invalid length. [ 523.523929][T15837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3686'. [ 523.575113][T15837] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.582427][T15837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.959202][T14913] wlan1: Trigger new scan to find an IBSS to join [ 523.968016][ T4239] wlan1: Creating new IBSS network, BSSID 16:d3:26:27:43:c1 [ 524.117626][ T6614] Bluetooth: hci2: command 0x0406 tx timeout [ 525.233950][T15893] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3704'. [ 525.278214][T15894] netlink: 'syz.5.3703': attribute type 1 has an invalid length. [ 525.313449][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3703'. [ 525.356832][T15894] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.364154][T15894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.974365][T14917] wlan1: Creating new IBSS network, BSSID 72:89:b8:9b:54:16 [ 526.316242][T15921] netlink: 'syz.3.3712': attribute type 10 has an invalid length. [ 526.392693][T15921] bridge0: port 3(erspan0) entered disabled state [ 526.400175][T15921] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.409276][T15921] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.497878][T15921] bridge0: port 3(erspan0) entered blocking state [ 526.505048][T15921] bridge0: port 3(erspan0) entered forwarding state [ 526.514696][T15921] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.522411][T15921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.530748][T15921] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.538684][T15921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.773010][T15921] team0: Port device bridge0 added [ 526.828332][T15943] IPv6: Can't replace route, no match found [ 526.835008][T15945] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 527.358658][T15970] IPv6: Can't replace route, no match found [ 527.384602][T15973] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3726'. [ 527.413318][T15970] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 527.739608][T15983] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3731'. [ 529.420797][T16010] IPv6: Can't replace route, no match found [ 529.668256][T16010] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 531.766212][T16077] IPv6: Can't replace route, no match found [ 531.793544][T16077] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 531.978745][T14913] wlan1: Trigger new scan to find an IBSS to join [ 532.400326][T16093] device syzkaller0 entered promiscuous mode [ 532.640809][T16093] netlink: 'syz.0.3770': attribute type 10 has an invalid length. [ 532.691027][T16093] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3770'. [ 533.342411][T16108] device syzkaller0 entered promiscuous mode [ 533.386519][T16116] IPv6: Can't replace route, no match found [ 533.402878][T16123] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 533.552851][T16130] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3784'. [ 534.722479][T16143] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3788'. [ 534.932965][T16151] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3790'. [ 534.957873][T16151] netlink: get zone limit has 4 unknown bytes [ 535.004727][T16153] netlink: 'syz.5.3793': attribute type 3 has an invalid length. [ 535.059670][T16153] netlink: 'syz.5.3793': attribute type 1 has an invalid length. [ 535.139716][T16153] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3793'. [ 535.352312][T16170] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3796'. [ 535.396044][T16170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3796'. [ 535.457484][T16170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3796'. [ 535.495810][T16170] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3796'. [ 535.639300][T16170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 535.646571][T16170] IPv6: NLM_F_CREATE should be set when creating new route [ 535.654006][T16170] IPv6: NLM_F_CREATE should be set when creating new route [ 535.661331][T16170] IPv6: NLM_F_CREATE should be set when creating new route [ 535.690254][T16177] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3797'. [ 535.968671][T14913] wlan1: Trigger new scan to find an IBSS to join [ 536.565497][T16200] netlink: 'syz.0.3807': attribute type 21 has an invalid length. [ 536.585382][T16200] netlink: 'syz.0.3807': attribute type 20 has an invalid length. [ 538.324825][T16216] __nla_validate_parse: 2 callbacks suppressed [ 538.324919][T16216] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3811'. [ 538.569131][T16216] netlink: get zone limit has 4 unknown bytes [ 538.892568][T16240] IPv6: Can't replace route, no match found [ 539.042054][T16240] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 539.424823][T16260] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3824'. [ 539.566647][T16264] syz.3.3827[16264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.566825][T16264] syz.3.3827[16264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 539.645894][T16270] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3827'. [ 539.971168][T16273] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3830'. [ 540.022821][T16273] netlink: get zone limit has 4 unknown bytes [ 540.261392][T16283] IPv6: pim6reg1: Disabled Multicast RS [ 541.084150][T16309] IPv6: Can't replace route, no match found [ 541.118792][T14917] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 541.126858][T16309] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 541.159823][T14917] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 541.304691][T16318] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3843'. [ 541.736270][T16339] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3850'. [ 541.875151][T16339] netlink: get zone limit has 4 unknown bytes [ 541.958752][T14905] wlan1: Trigger new scan to find an IBSS to join [ 542.030467][T14917] wlan1: Creating new IBSS network, BSSID 8a:25:60:15:87:bc [ 542.392259][T16357] IPv6: Can't replace route, no match found [ 542.410048][T16362] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 543.700959][T16379] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3861'. [ 543.766085][T16391] device syzkaller0 entered promiscuous mode [ 544.598943][ T6615] Bluetooth: hci4: command 0x0406 tx timeout [ 544.999142][ T144] wlan1: Trigger new scan to find an IBSS to join [ 545.006580][T16425] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3873'. [ 545.034547][T16418] -1: renamed from syzkaller0 [ 545.124376][T16429] netlink: 'syz.3.3875': attribute type 10 has an invalid length. [ 545.140060][T16429] device hsr0 entered promiscuous mode [ 545.190809][T16429] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 545.244376][T16429] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 545.277123][T16429] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 545.327359][T16429] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 546.445102][T16482] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.3891'. [ 547.566654][T16516] netlink: 'syz.5.3907': attribute type 3 has an invalid length. [ 547.582548][T16516] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3907'. [ 547.939859][T16537] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3913'. [ 548.997594][T14905] wlan1: Trigger new scan to find an IBSS to join [ 549.122830][T16572] netlink: 'syz.0.3924': attribute type 10 has an invalid length. [ 549.172918][T16572] device hsr0 entered promiscuous mode [ 549.270456][T16572] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 549.302889][T16572] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 549.329192][T16572] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 549.353359][T16572] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 549.410619][T16574] netlink: 'syz.4.3925': attribute type 13 has an invalid length. [ 549.421386][T16574] netlink: 24643 bytes leftover after parsing attributes in process `syz.4.3925'. [ 550.053324][T16596] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3930'. [ 550.812827][T16632] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3943'. [ 550.901648][T16632] -1: renamed from syzkaller0 [ 550.997865][T14910] wlan1: Creating new IBSS network, BSSID 82:76:d9:16:4e:f6 [ 551.037052][T16634] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3942'. [ 551.304026][T16648] netlink: 'syz.5.3948': attribute type 1 has an invalid length. [ 551.365240][T16648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3948'. [ 551.444695][T16648] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.451966][T16648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.677113][T16651] netlink: 'syz.0.3950': attribute type 21 has an invalid length. [ 551.691199][T16651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3950'. [ 551.741732][T16651] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3950'. [ 551.762228][T16657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 551.769769][T16657] IPv6: NLM_F_CREATE should be set when creating new route [ 551.777482][T16657] IPv6: NLM_F_CREATE should be set when creating new route [ 551.784897][T16657] IPv6: NLM_F_CREATE should be set when creating new route [ 552.219618][T16683] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3957'. [ 552.275843][T16683] -1: renamed from syzkaller0 [ 552.771751][T16694] netlink: 'syz.5.3959': attribute type 6 has an invalid length. [ 552.831460][T16694] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3959'. [ 552.887892][T16703] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.3959'. [ 553.133648][T16716] netlink: 'syz.2.3966': attribute type 1 has an invalid length. [ 553.165171][T16716] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.172442][T16716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.766086][T16728] openvswitch: netlink: Duplicate key (type 0). [ 553.791607][T16723] netlink: 'syz.5.3969': attribute type 3 has an invalid length. [ 553.940195][T16731] -1: renamed from syzkaller0 [ 554.401700][T16745] netlink: 'syz.5.3977': attribute type 21 has an invalid length. [ 554.446497][T16745] __nla_validate_parse: 5 callbacks suppressed [ 554.446535][T16745] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3977'. [ 554.921525][T16771] IPv6: Can't replace route, no match found [ 554.978388][T16771] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 554.978434][T14913] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 554.993368][T14913] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 555.262510][T16766] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.3986'. [ 556.104169][T16792] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3993'. [ 559.143748][T16818] netlink: 'syz.4.4002': attribute type 21 has an invalid length. [ 559.159227][T16822] netlink: 'syz.3.4001': attribute type 21 has an invalid length. [ 559.538554][T16833] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4005'. [ 559.585410][T16838] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4006'. [ 559.621694][T16838] -1: renamed from syzkaller0 [ 560.047576][ T6616] Bluetooth: hci0: command 0x0406 tx timeout [ 560.360916][T16854] IPv6: Can't replace route, no match found [ 560.400042][T16854] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.043294][T16876] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.4018'. [ 561.278618][T16889] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4022'. [ 561.316123][T16889] -1: renamed from syzkaller0 [ 561.363944][T16893] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4023'. [ 561.502480][T16898] IPv6: Can't replace route, no match found [ 561.521240][T16898] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.106068][T16908] delete_channel: no stack [ 562.197118][T16908] delete_channel: no stack [ 562.651615][T16939] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4037'. [ 562.682545][T16939] -1: renamed from syzkaller0 [ 562.739981][T16947] IPv6: Can't replace route, no match found [ 562.778223][T14910] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 562.800985][T16947] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.819082][T14910] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 562.857965][T16949] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4040'. [ 562.936342][T14913] wlan1: Trigger new scan to find an IBSS to join [ 563.013294][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.021080][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.682902][T16973] netlink: 'syz.3.4045': attribute type 1 has an invalid length. [ 563.759991][T16973] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.4045'. [ 563.960046][T14910] wlan1: Trigger new scan to find an IBSS to join [ 564.798578][T16996] IPv6: Can't replace route, no match found [ 564.806418][T16999] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4054'. [ 564.825971][T17001] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 565.450231][T16984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.592525][T17041] IPv6: Can't replace route, no match found [ 566.643824][T17041] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 566.765727][T17052] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4070'. [ 566.853328][T17058] netlink: 'syz.2.4073': attribute type 3 has an invalid length. [ 566.883256][T17058] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.4073'. [ 566.911565][T17060] netlink: 'syz.2.4073': attribute type 1 has an invalid length. [ 566.997692][T14910] wlan1: Trigger new scan to find an IBSS to join [ 567.004970][T14913] wlan1: Trigger new scan to find an IBSS to join [ 567.111972][T17065] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4074'. [ 567.888141][T17088] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.4080'. [ 568.764833][T17124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4090'. [ 568.927947][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 568.997442][ T4239] wlan1: Creating new IBSS network, BSSID de:32:71:08:15:95 [ 569.554761][T17155] netlink: 'syz.5.4100': attribute type 29 has an invalid length. [ 569.577749][T17155] netlink: 'syz.5.4100': attribute type 29 has an invalid length. [ 569.646716][T17160] netlink: 'syz.5.4100': attribute type 29 has an invalid length. [ 569.710463][T17155] netlink: 'syz.5.4100': attribute type 29 has an invalid length. [ 569.905705][T17170] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4105'. [ 569.991354][T17171] netlink: 'syz.2.4103': attribute type 1 has an invalid length. [ 570.022685][T17171] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4103'. [ 570.159974][T17183] IPv6: Can't replace route, no match found [ 570.207294][T13882] Bluetooth: hci3: command 0x0406 tx timeout [ 570.215887][T17183] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 571.014626][T14905] wlan1: Trigger new scan to find an IBSS to join [ 571.259751][T17215] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4119'. [ 571.432012][T17222] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4122'. [ 571.505196][T17228] -1: renamed from syzkaller0 [ 571.514876][T17226] IPv6: Can't replace route, no match found [ 571.529426][T17226] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 571.613166][T17230] netlink: 'syz.4.4126': attribute type 10 has an invalid length. [ 571.636233][T17231] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.4125'. [ 572.000410][T17236] netlink: 'syz.3.4129': attribute type 39 has an invalid length. [ 572.927623][ T144] wlan1: Creating new IBSS network, BSSID 02:4b:14:e6:df:e5 [ 572.936161][T14910] wlan1: Trigger new scan to find an IBSS to join [ 574.500078][T14910] wlan1: Creating new IBSS network, BSSID 02:f7:91:32:73:85 [ 574.638403][T17268] IPv6: Can't replace route, no match found [ 574.662134][T17268] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 574.700468][T17270] netlink: 'syz.0.4138': attribute type 21 has an invalid length. [ 574.710978][T17270] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.4138'. [ 574.731197][T17270] netlink: 4275 bytes leftover after parsing attributes in process `syz.0.4138'. [ 574.893005][T17274] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4140'. [ 574.984398][T17274] -1: renamed from syzkaller0 [ 575.615592][T17304] IPv6: Can't replace route, no match found [ 575.666519][T17308] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 575.878526][T17307] netlink: 'syz.5.4152': attribute type 39 has an invalid length. [ 576.897816][T17332] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4159'. [ 576.918927][T14905] wlan1: Trigger new scan to find an IBSS to join [ 577.168921][T17345] netlink: 'syz.0.4164': attribute type 10 has an invalid length. [ 577.189554][T17345] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4164'. [ 577.957457][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 577.965834][T14905] wlan1: Creating new IBSS network, BSSID 0a:5c:de:e6:0d:8f [ 578.445318][T17349] IPv6: Can't replace route, no match found [ 578.451841][T17350] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 578.595031][T17373] netlink: 'syz.5.4172': attribute type 1 has an invalid length. [ 578.607290][T17373] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.4172'. [ 580.361029][T17413] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4183'. [ 580.751888][T17429] netlink: 'syz.3.4185': attribute type 10 has an invalid length. [ 580.783004][T17429] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4185'. [ 580.997586][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 581.965784][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 581.983801][T17439] netlink: 'syz.4.4189': attribute type 17 has an invalid length. [ 582.003857][T17439] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4189'. [ 582.198653][T17443] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 582.393876][T17460] netlink: 'syz.4.4202': attribute type 1 has an invalid length. [ 582.417676][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4202'. [ 582.507406][T17460] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.514766][T17460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.593963][T17464] IPv6: Can't replace route, no match found [ 582.633363][T17471] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 582.951661][T17480] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4197'. [ 583.955407][T17508] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4206'. [ 584.000965][T17508] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4206'. [ 584.010272][T17503] netlink: 'syz.4.4204': attribute type 10 has an invalid length. [ 584.010366][T17503] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4204'. [ 584.943705][T14917] wlan1: Trigger new scan to find an IBSS to join [ 585.271588][T17515] netlink: 'syz.0.4207': attribute type 1 has an invalid length. [ 585.308645][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4207'. [ 585.319959][T17515] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.327492][T17515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.536951][T17540] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4214'. [ 585.556894][T17538] netlink: 'syz.3.4215': attribute type 1 has an invalid length. [ 585.589215][T17538] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.4215'. [ 585.705512][T17550] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4218'. [ 585.946692][T17560] netlink: 'syz.0.4219': attribute type 29 has an invalid length. [ 586.439118][T17560] netlink: 'syz.0.4219': attribute type 29 has an invalid length. [ 586.591358][T17560] delete_channel: no stack [ 586.736917][T17569] netlink: 'syz.0.4224': attribute type 1 has an invalid length. [ 586.798118][T17569] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.805269][T17569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.472869][T17586] __nla_validate_parse: 1 callbacks suppressed [ 587.472908][T17586] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4229'. [ 587.536608][T17592] netlink: 'syz.4.4231': attribute type 3 has an invalid length. [ 587.585479][T17592] netlink: 196096 bytes leftover after parsing attributes in process `syz.4.4231'. [ 587.842582][T17608] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4235'. [ 587.869877][T17611] IPv6: Can't replace route, no match found [ 587.884382][T17608] -1: renamed from syzkaller0 [ 587.896541][T17611] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 588.018096][T17619] netlink: 40123 bytes leftover after parsing attributes in process `syz.3.4238'. [ 588.465777][T17628] netlink: 'syz.3.4243': attribute type 1 has an invalid length. [ 588.517628][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4243'. [ 588.559449][T17628] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.567082][T17628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.756978][T17640] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4246'. [ 588.971130][T17647] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4249'. [ 588.997443][T14917] wlan1: Trigger new scan to find an IBSS to join [ 589.178400][T17647] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4249'. [ 589.282337][T17658] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4252'. [ 589.440880][T17664] IPv6: Can't replace route, no match found [ 589.490317][T17666] netlink: 'syz.2.4255': attribute type 3 has an invalid length. [ 589.513845][T17666] netlink: 196096 bytes leftover after parsing attributes in process `syz.2.4255'. [ 589.524011][T17664] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 589.558566][ T144] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 589.576470][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 589.763948][T17681] netlink: 'syz.0.4258': attribute type 10 has an invalid length. [ 589.805381][T17681] device geneve0 entered promiscuous mode [ 589.814663][T17683] netlink: 'syz.5.4260': attribute type 1 has an invalid length. [ 589.823772][T17683] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.831281][T17683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.602766][T17711] IPv6: Can't replace route, no match found [ 590.627745][T17713] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 591.592196][T17730] netlink: zone id is out of range [ 591.617328][T17730] netlink: set zone limit has 8 unknown bytes [ 591.758585][T17737] netlink: 'syz.2.4279': attribute type 10 has an invalid length. [ 591.819467][T17737] device hsr0 entered promiscuous mode [ 591.943757][T17745] netlink: 'syz.0.4278': attribute type 3 has an invalid length. [ 591.976231][T17737] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 592.031324][T17737] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 592.066175][T17737] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 592.107349][T17737] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 592.242054][T17755] netlink: 'syz.3.4284': attribute type 1 has an invalid length. [ 592.270213][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.277631][T17755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.336627][T17756] IPv6: Can't replace route, no match found [ 592.376263][T17759] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 592.999585][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 593.056728][T17788] __nla_validate_parse: 6 callbacks suppressed [ 593.056768][T17788] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4293'. [ 593.144548][T17792] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4296'. [ 593.582830][T17802] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4299'. [ 594.151841][T17815] device wlan0 left promiscuous mode [ 594.346622][T17822] device wlan0 entered promiscuous mode [ 594.779204][T17826] netlink: 'syz.3.4307': attribute type 10 has an invalid length. [ 595.744117][T17836] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 595.769376][T17841] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4311'. [ 596.216332][T17856] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4316'. [ 596.270513][T17860] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4317'. [ 596.323769][T17863] device bridge0 entered promiscuous mode [ 596.429030][T17870] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4321'. [ 596.922370][T14913] wlan1: Trigger new scan to find an IBSS to join [ 597.212205][T17888] device wlan0 left promiscuous mode [ 597.281545][T17891] device wlan0 entered promiscuous mode [ 597.326324][T17898] netlink: 'syz.2.4327': attribute type 9 has an invalid length. [ 597.374200][T17898] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4327'. [ 597.502287][T17901] IPv6: Can't replace route, no match found [ 597.559784][T17901] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 597.815529][T17907] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4334'. [ 597.957654][T17913] -1: renamed from syzkaller0 [ 598.933177][T14913] wlan1: Creating new IBSS network, BSSID 4e:36:95:69:55:79 [ 599.678314][T17963] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4351'. [ 599.700168][T17972] netlink: 'syz.2.4353': attribute type 1 has an invalid length. [ 599.739484][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4353'. [ 599.764303][T17972] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.771592][T17972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.822458][T17963] -1: renamed from syzkaller0 [ 599.957430][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 601.270821][T18018] netlink: 'syz.5.4367': attribute type 29 has an invalid length. [ 601.312402][T18018] netlink: 'syz.5.4367': attribute type 29 has an invalid length. [ 601.426736][T18018] netlink: 'syz.5.4367': attribute type 29 has an invalid length. [ 601.493307][T18019] netlink: 'syz.5.4367': attribute type 4 has an invalid length. [ 601.517748][T18019] netlink: 205184 bytes leftover after parsing attributes in process `syz.5.4367'. [ 601.882860][T18035] device syzkaller0 entered promiscuous mode [ 602.154736][T18045] netlink: 'syz.2.4377': attribute type 1 has an invalid length. [ 602.210667][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4377'. [ 602.279052][T18051] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.4376'. [ 602.292680][T18045] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.299924][T18045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.444355][T18076] netlink: 'syz.4.4385': attribute type 10 has an invalid length. [ 603.665542][T18081] netlink: 'syz.4.4385': attribute type 3 has an invalid length. [ 603.746175][T18081] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4385'. [ 603.799625][T18076] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.850122][T18076] bond0: (slave team0): Enslaving as an active interface with an up link [ 603.967374][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 604.315556][T18089] IPv6: Can't replace route, no match found [ 604.353521][T18089] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.510251][T18105] netlink: 'syz.0.4395': attribute type 1 has an invalid length. [ 604.555267][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 604.613642][T18105] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.620862][T18105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.685052][T18107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4394'. [ 605.249123][T18129] netlink: 'syz.5.4400': attribute type 10 has an invalid length. [ 605.369472][T18133] netlink: 'syz.5.4400': attribute type 3 has an invalid length. [ 605.440135][T18133] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4400'. [ 605.773349][T18129] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.822976][T18137] IPv6: Can't replace route, no match found [ 605.843383][T18139] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 605.847698][T14905] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 605.880648][T14905] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 605.967542][T14905] wlan1: Creating new IBSS network, BSSID 1e:00:c1:cb:37:08 [ 606.059025][T18145] netlink: 206888 bytes leftover after parsing attributes in process `syz.2.4406'. [ 606.286702][T18158] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4411'. [ 606.298813][T18151] validate_nla: 1 callbacks suppressed [ 606.298830][T18151] netlink: 'syz.2.4406': attribute type 9 has an invalid length. [ 606.362645][T18151] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4406'. [ 606.491469][T18163] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4412'. [ 606.700480][T18171] netlink: 'syz.2.4416': attribute type 1 has an invalid length. [ 606.739725][T18171] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.4416'. [ 606.759826][T18169] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4415'. [ 606.826620][T18169] -1: renamed from syzkaller0 [ 606.912673][T18181] IPv6: Can't replace route, no match found [ 606.950055][T18185] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 606.958040][ T4239] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 606.977816][ T4239] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 607.705194][T18201] netlink: 'syz.4.4425': attribute type 7 has an invalid length. [ 607.754285][T18201] netlink: 'syz.4.4425': attribute type 1 has an invalid length. [ 607.779174][T18191] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4422'. [ 607.803892][T18201] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.4425'. [ 608.475901][T18219] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4430'. [ 610.380081][T18260] netlink: 'syz.0.4444': attribute type 12 has an invalid length. [ 610.464790][T18260] __nla_validate_parse: 1 callbacks suppressed [ 610.464807][T18260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4444'. [ 610.604188][T18263] netlink: 'syz.0.4444': attribute type 39 has an invalid length. [ 610.842360][T18262] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4445'. [ 611.193047][T18259] delete_channel: no stack [ 611.210943][T18280] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4451'. [ 611.288048][T18280] -1: renamed from syzkaller0 [ 611.830987][T18294] IPv6: Can't replace route, no match found [ 611.837612][T18298] tun0: tun_chr_ioctl cmd 1074025677 [ 611.843178][T18298] tun0: linktype set to 768 [ 611.881641][T18299] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.891339][T14905] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 611.912340][T14905] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 612.414817][T18327] netlink: 'syz.4.4463': attribute type 1 has an invalid length. [ 612.431490][T18327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4463'. [ 612.441379][T18327] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.448655][T18327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.467391][T18323] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4462'. [ 612.771192][T18340] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4466'. [ 613.821283][T18356] IPv6: Can't replace route, no match found [ 613.856609][T18356] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 614.627872][T18399] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4481'. [ 614.660775][T18399] -1: renamed from syzkaller0 [ 614.937849][T18406] netlink: 'syz.5.4485': attribute type 17 has an invalid length. [ 615.036893][T18406] netlink: 'syz.5.4485': attribute type 16 has an invalid length. [ 615.053770][T18406] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4485'. [ 615.214393][T18411] IPv6: Can't replace route, no match found [ 615.360245][T18412] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 617.146967][T18472] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4501'. [ 617.221871][T18472] -1: renamed from syzkaller0 [ 617.282105][T18468] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4503'. [ 617.453527][T18477] bridge0: port 4(hsr_slave_1) entered blocking state [ 617.498175][T18477] bridge0: port 4(hsr_slave_1) entered disabled state [ 617.977829][T14905] wlan1: Trigger new scan to find an IBSS to join [ 618.134831][T18487] netlink: 'syz.5.4505': attribute type 21 has an invalid length. [ 619.148396][T18536] netlink: 'syz.4.4522': attribute type 6 has an invalid length. [ 619.205351][T18536] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4522'. [ 619.271456][T18540] netlink: 'syz.2.4523': attribute type 1 has an invalid length. [ 619.286984][T18540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4523'. [ 619.359534][T18540] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.366729][T18540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.159266][T18572] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4530'. [ 621.959946][T14905] wlan1: Trigger new scan to find an IBSS to join [ 622.376870][T18583] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4533'. [ 623.074032][T18598] netlink: 'syz.0.4539': attribute type 46 has an invalid length. [ 623.117651][T18598] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4539'. [ 623.318832][T18611] netlink: 'syz.4.4544': attribute type 1 has an invalid length. [ 623.381604][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4544'. [ 623.412930][T18611] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.420193][T18611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.514694][T18620] IPv6: Can't replace route, no match found [ 623.617446][T18624] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 623.657113][T18623] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4548'. [ 623.892249][T18630] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4550'. [ 623.903097][T18630] -1: renamed from syzkaller0 [ 624.486457][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.493042][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.919787][T14913] wlan1: Trigger new scan to find an IBSS to join [ 624.973753][T14910] wlan1: Creating new IBSS network, BSSID 9a:3f:cc:ab:62:97 [ 625.014849][T18648] netlink: 'syz.2.4566': attribute type 1 has an invalid length. [ 625.067420][T18648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4566'. [ 625.089919][T18648] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.097405][T18648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.357333][T18663] IPv6: Can't replace route, no match found [ 625.379478][T18663] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 625.425897][T18667] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4562'. [ 625.528312][T18673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4564'. [ 625.652931][T18675] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4567'. [ 626.145409][T18699] netlink: 'syz.3.4574': attribute type 29 has an invalid length. [ 626.239461][T18699] netlink: 'syz.3.4574': attribute type 29 has an invalid length. [ 626.266856][T18704] IPv6: Can't replace route, no match found [ 626.363658][T18706] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 626.421475][T18705] netlink: 'syz.3.4574': attribute type 29 has an invalid length. [ 626.619334][T18710] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4577'. [ 626.833228][T18718] netlink: 'syz.0.4579': attribute type 1 has an invalid length. [ 626.867122][T18718] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.874486][T18718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.220774][T18732] -1: renamed from syzkaller0 [ 627.586738][T18746] IPv6: Can't replace route, no match found [ 627.603408][T18746] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 627.653025][T18747] __nla_validate_parse: 2 callbacks suppressed [ 627.653064][T18747] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4589'. [ 627.822647][T18756] netlink: 'syz.4.4594': attribute type 3 has an invalid length. [ 627.882639][T18756] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4594'. [ 627.967461][T14910] wlan1: Trigger new scan to find an IBSS to join [ 630.568132][T18790] netlink: 'syz.2.4604': attribute type 1 has an invalid length. [ 630.600848][T18790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4604'. [ 630.630250][T18790] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.637531][T18790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.984665][T18796] tap0: tun_chr_ioctl cmd 21731 [ 631.174147][T18804] IPv6: Can't replace route, no match found [ 631.246303][T18804] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 632.366587][T18839] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4617'. [ 632.700914][T18856] IPv6: Can't replace route, no match found [ 632.749884][T18856] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 632.757728][T14917] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 632.766835][T14917] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 633.282227][T18872] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4629'. [ 633.357452][T18875] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4630'. [ 633.399625][T18878] FAULT_INJECTION: forcing a failure. [ 633.399625][T18878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.450794][T18877] -1: renamed from syzkaller0 [ 633.476725][T18878] CPU: 0 PID: 18878 Comm: syz.2.4630 Not tainted syzkaller #0 [ 633.484258][T18878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.494450][T18878] Call Trace: [ 633.497862][T18878] [ 633.500832][T18878] dump_stack_lvl+0x188/0x250 [ 633.505550][T18878] ? show_regs_print_info+0x20/0x20 [ 633.510911][T18878] ? load_image+0x400/0x400 [ 633.515454][T18878] ? __lock_acquire+0x7d10/0x7d10 [ 633.520637][T18878] ? perf_trace_lock_acquire+0xed/0x3e0 [ 633.526228][T18878] should_fail+0x38c/0x4c0 [ 633.530696][T18878] strncpy_from_user+0x32/0x360 [ 633.535594][T18878] bpf_prog_load+0x1f0/0x1510 [ 633.540351][T18878] ? map_freeze+0x350/0x350 [ 633.544897][T18878] ? __might_fault+0xb7/0x110 [ 633.549638][T18878] ? __might_fault+0xb3/0x110 [ 633.554345][T18878] ? bpf_lsm_bpf+0x5/0x10 [ 633.558716][T18878] ? security_bpf+0x7a/0xa0 [ 633.563346][T18878] __sys_bpf+0x532/0x6f0 [ 633.567630][T18878] ? bpf_link_show_fdinfo+0x380/0x380 [ 633.573051][T18878] ? vtime_user_exit+0x2c8/0x3e0 [ 633.578373][T18878] __x64_sys_bpf+0x78/0x90 [ 633.583013][T18878] do_syscall_64+0x4c/0xa0 [ 633.587555][T18878] ? clear_bhb_loop+0x30/0x80 [ 633.592464][T18878] ? clear_bhb_loop+0x30/0x80 [ 633.597187][T18878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 633.603213][T18878] RIP: 0033:0x7fe487027799 [ 633.607674][T18878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.627592][T18878] RSP: 002b:00007fe485260028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 633.636050][T18878] RAX: ffffffffffffffda RBX: 00007fe4872a1090 RCX: 00007fe487027799 [ 633.644120][T18878] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 633.652486][T18878] RBP: 00007fe485260090 R08: 0000000000000000 R09: 0000000000000000 [ 633.660579][T18878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.668595][T18878] R13: 00007fe4872a1128 R14: 00007fe4872a1090 R15: 00007ffd6d0c5388 [ 633.676723][T18878] [ 633.957524][T14910] wlan1: Trigger new scan to find an IBSS to join [ 634.304685][T18899] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4638'. [ 634.379543][T18906] IPv6: Can't replace route, no match found [ 634.397379][T18908] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 635.439784][T18934] -1: renamed from syzkaller0 [ 635.514242][T18936] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4648'. [ 635.620314][T18936] netlink: 'syz.3.4648': attribute type 10 has an invalid length. [ 635.649685][T18936] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4648'. [ 635.776865][T18940] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4650'. [ 635.839069][T18940] FAULT_INJECTION: forcing a failure. [ 635.839069][T18940] name failslab, interval 1, probability 0, space 0, times 0 [ 635.984405][T18946] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.4653'. [ 636.000797][T18940] CPU: 1 PID: 18940 Comm: syz.2.4650 Not tainted syzkaller #0 [ 636.008332][T18940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.018450][T18940] Call Trace: [ 636.021768][T18940] [ 636.024830][T18940] dump_stack_lvl+0x188/0x250 [ 636.029554][T18940] ? show_regs_print_info+0x20/0x20 [ 636.034888][T18940] ? load_image+0x400/0x400 [ 636.039440][T18940] ? __might_sleep+0xf0/0xf0 [ 636.044170][T18940] ? __lock_acquire+0x7d10/0x7d10 [ 636.049263][T18940] should_fail+0x38c/0x4c0 [ 636.053739][T18940] should_failslab+0x5/0x20 [ 636.058287][T18940] slab_pre_alloc_hook+0x51/0xc0 [ 636.063270][T18940] kmem_cache_alloc_node_trace+0x4a/0x300 [ 636.069090][T18940] ? __get_vm_area_node+0x119/0x2d0 [ 636.074952][T18940] __get_vm_area_node+0x119/0x2d0 [ 636.080036][T18940] ? lock_chain_count+0x20/0x20 [ 636.085050][T18940] __vmalloc_node_range+0xef/0x8b0 [ 636.090216][T18940] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 636.095810][T18940] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 636.102033][T18940] ? lockdep_hardirqs_on+0x94/0x140 [ 636.107290][T18940] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 636.113498][T18940] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 636.119097][T18940] __vmalloc+0x76/0x80 [ 636.123212][T18940] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 636.128819][T18940] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 636.134250][T18940] bpf_prog_alloc+0x1a/0x1e0 [ 636.138902][T18940] bpf_prog_load+0x7c6/0x1510 [ 636.143641][T18940] ? map_freeze+0x350/0x350 [ 636.148202][T18940] ? __might_fault+0xb7/0x110 [ 636.152991][T18940] ? __might_fault+0xb3/0x110 [ 636.157735][T18940] ? bpf_lsm_bpf+0x5/0x10 [ 636.162138][T18940] ? security_bpf+0x7a/0xa0 [ 636.166753][T18940] __sys_bpf+0x532/0x6f0 [ 636.171067][T18940] ? bpf_link_show_fdinfo+0x380/0x380 [ 636.176518][T18940] __x64_sys_bpf+0x78/0x90 [ 636.181070][T18940] do_syscall_64+0x4c/0xa0 [ 636.185620][T18940] ? clear_bhb_loop+0x30/0x80 [ 636.190616][T18940] ? clear_bhb_loop+0x30/0x80 [ 636.195468][T18940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 636.201401][T18940] RIP: 0033:0x7fe487027799 [ 636.205859][T18940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.226013][T18940] RSP: 002b:00007fe485281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.234642][T18940] RAX: ffffffffffffffda RBX: 00007fe4872a0fa0 RCX: 00007fe487027799 [ 636.242635][T18940] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 636.250721][T18940] RBP: 00007fe485281090 R08: 0000000000000000 R09: 0000000000000000 [ 636.258707][T18940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.266704][T18940] R13: 00007fe4872a1038 R14: 00007fe4872a0fa0 R15: 00007ffd6d0c5388 [ 636.274710][T18940] [ 636.328950][T18940] syz.2.4650: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 636.347686][T18949] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4653'. [ 636.486189][T18940] CPU: 0 PID: 18940 Comm: syz.2.4650 Not tainted syzkaller #0 [ 636.493754][T18940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.503939][T18940] Call Trace: [ 636.507289][T18940] [ 636.510341][T18940] dump_stack_lvl+0x188/0x250 [ 636.515047][T18940] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 636.521233][T18940] ? show_regs_print_info+0x20/0x20 [ 636.526459][T18940] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 636.532649][T18940] ? dump_stack+0x5/0x20 [ 636.536926][T18940] warn_alloc+0x243/0x320 [ 636.541286][T18940] ? should_failslab+0x7/0x20 [ 636.545995][T18940] ? zone_watermark_ok_safe+0x240/0x240 [ 636.551573][T18940] ? __get_vm_area_node+0x2b5/0x2d0 [ 636.556797][T18940] ? lock_chain_count+0x20/0x20 [ 636.561836][T18940] __vmalloc_node_range+0x2b1/0x8b0 [ 636.567076][T18940] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 636.573297][T18940] ? lockdep_hardirqs_on+0x94/0x140 [ 636.578807][T18940] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 636.584988][T18940] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 636.590561][T18940] __vmalloc+0x76/0x80 [ 636.594658][T18940] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 636.600223][T18940] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 636.605621][T18940] bpf_prog_alloc+0x1a/0x1e0 [ 636.610239][T18940] bpf_prog_load+0x7c6/0x1510 [ 636.614962][T18940] ? map_freeze+0x350/0x350 [ 636.619652][T18940] ? __might_fault+0xb7/0x110 [ 636.624386][T18940] ? __might_fault+0xb3/0x110 [ 636.629109][T18940] ? bpf_lsm_bpf+0x5/0x10 [ 636.633475][T18940] ? security_bpf+0x7a/0xa0 [ 636.638110][T18940] __sys_bpf+0x532/0x6f0 [ 636.642386][T18940] ? bpf_link_show_fdinfo+0x380/0x380 [ 636.647801][T18940] __x64_sys_bpf+0x78/0x90 [ 636.652243][T18940] do_syscall_64+0x4c/0xa0 [ 636.656734][T18940] ? clear_bhb_loop+0x30/0x80 [ 636.661456][T18940] ? clear_bhb_loop+0x30/0x80 [ 636.666152][T18940] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 636.672262][T18940] RIP: 0033:0x7fe487027799 [ 636.676728][T18940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.696503][T18940] RSP: 002b:00007fe485281028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.704966][T18940] RAX: ffffffffffffffda RBX: 00007fe4872a0fa0 RCX: 00007fe487027799 [ 636.712956][T18940] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 636.720950][T18940] RBP: 00007fe485281090 R08: 0000000000000000 R09: 0000000000000000 [ 636.728951][T18940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.737052][T18940] R13: 00007fe4872a1038 R14: 00007fe4872a0fa0 R15: 00007ffd6d0c5388 [ 636.745157][T18940] [ 637.013463][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 637.105891][T18961] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4656'. [ 637.159938][T18940] Mem-Info: [ 637.163291][T18940] active_anon:280 inactive_anon:6494 isolated_anon:0 [ 637.163291][T18940] active_file:23395 inactive_file:37724 isolated_file:0 [ 637.163291][T18940] unevictable:768 dirty:134 writeback:17 [ 637.163291][T18940] slab_reclaimable:20575 slab_unreclaimable:97389 [ 637.163291][T18940] mapped:29685 shmem:1642 pagetables:701 bounce:0 [ 637.163291][T18940] kernel_misc_reclaimable:0 [ 637.163291][T18940] free:1362108 free_pcp:11131 free_cma:0 [ 637.369147][T18940] Node 0 active_anon:1088kB inactive_anon:25468kB active_file:93380kB inactive_file:150896kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118740kB dirty:536kB writeback:68kB shmem:4492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11608kB pagetables:2804kB all_unreclaimable? no [ 637.401588][T18940] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 637.442016][T18940] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 637.471056][T18963] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4657'. [ 637.496198][T18940] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 637.513896][T18940] Node 0 DMA32 free:1525872kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1088kB inactive_anon:25468kB active_file:93380kB inactive_file:150896kB unevictable:1536kB writepending:556kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:43348kB local_pcp:21628kB free_cma:0kB [ 637.545211][T18940] lowmem_reserve[]: 0 0 0 0 0 [ 637.552863][T18940] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 637.580283][T18940] lowmem_reserve[]: 0 0 0 0 0 [ 637.619194][T18940] Node 1 Normal free:3917044kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:4448kB local_pcp:0kB free_cma:0kB [ 637.648388][T18940] lowmem_reserve[]: 0 0 0 0 0 [ 637.653211][T18940] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 637.673504][T18940] Node 0 DMA32: 4753*4kB (UM) 2153*8kB (UME) 1477*16kB (UME) 931*32kB (UME) 596*64kB (UME) 189*128kB (UME) 97*256kB (UME) 32*512kB (UME) 11*1024kB (UME) 3*2048kB (UME) 321*4096kB (M) = 1525436kB [ 637.696267][T18940] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 637.717505][T18940] Node 1 Normal: 135*4kB (UM) 37*8kB (UME) 29*16kB (UME) 177*32kB (UME) 57*64kB (UME) 15*128kB (U) 10*256kB (UME) 7*512kB (U) 1*1024kB (E) 1*2048kB (M) 951*4096kB (M) = 3917044kB [ 637.776778][T18940] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.818240][T18940] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.893440][T18940] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 637.925718][T18940] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 637.958730][ T144] wlan1: Trigger new scan to find an IBSS to join [ 637.997589][T18940] 62763 total pagecache pages [ 638.005927][T18940] 0 pages in swap cache [ 638.014672][T18940] Swap cache stats: add 0, delete 0, find 0/0 [ 638.023336][T18940] Free swap = 124996kB [ 638.053556][T18957] chnl_net:caif_netlink_parms(): no params data found [ 638.062005][T18940] Total swap = 124996kB [ 638.066523][T18940] 2097051 pages RAM [ 638.077672][T18940] 0 pages HighMem/MovableOnly [ 638.104949][T18940] 411490 pages reserved [ 638.112718][T18940] 0 pages cma reserved [ 638.443824][T18957] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.509073][T18957] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.611877][T18957] device bridge_slave_0 entered promiscuous mode [ 638.622572][T18957] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.630526][T18957] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.639099][T18957] device bridge_slave_1 entered promiscuous mode [ 638.781488][T18993] netlink: 'syz.2.4664': attribute type 10 has an invalid length. [ 638.817771][T18993] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4664'. [ 638.888226][T18993] device team0 entered promiscuous mode [ 638.911172][T18993] device team_slave_0 entered promiscuous mode [ 638.982592][T18993] device team_slave_1 entered promiscuous mode [ 639.042312][T18993] bridge0: port 3(team0) entered blocking state [ 639.077817][T13868] Bluetooth: hci1: command 0x0409 tx timeout [ 639.097500][T18993] bridge0: port 3(team0) entered disabled state [ 639.150650][T18993] bridge0: port 3(team0) entered blocking state [ 639.157263][T18993] bridge0: port 3(team0) entered forwarding state [ 639.171169][T18992] netlink: 'syz.0.4665': attribute type 10 has an invalid length. [ 639.191460][T18992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.223292][T18992] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 639.240775][T18957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.262239][T18957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.413265][T18957] team0: Port device team_slave_0 added [ 639.463214][T18957] team0: Port device team_slave_1 added [ 639.641015][T18957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.674589][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.752494][T18957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.830044][T18957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.862783][T18957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.960285][ T4239] wlan1: Creating new IBSS network, BSSID 4e:f4:f7:37:00:5d [ 640.039163][T19015] netlink: 'syz.0.4671': attribute type 29 has an invalid length. [ 640.093311][T18957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.127150][T19015] netlink: 'syz.0.4671': attribute type 29 has an invalid length. [ 640.173526][T19020] netlink: 'syz.3.4673': attribute type 1 has an invalid length. [ 640.189236][T19020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4673'. [ 640.221811][T19020] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.229090][T19020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.668270][T18957] device hsr_slave_0 entered promiscuous mode [ 640.763854][T18957] device hsr_slave_1 entered promiscuous mode [ 640.837467][T18957] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.845124][T18957] Cannot create hsr debugfs directory [ 640.925512][T19027] netlink: 'syz.0.4674': attribute type 3 has an invalid length. [ 640.948783][T19027] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.4674'. [ 641.008200][T14915] wlan1: Trigger new scan to find an IBSS to join [ 641.167674][T13868] Bluetooth: hci1: command 0x041b tx timeout [ 641.890793][T18957] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.273647][T18957] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.502659][T18957] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.689616][T18957] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.721223][T19057] netlink: 'syz.3.4681': attribute type 29 has an invalid length. [ 642.783314][T19057] netlink: 'syz.3.4681': attribute type 29 has an invalid length. [ 642.903737][T19056] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4681'. [ 643.008468][T14910] wlan1: Creating new IBSS network, BSSID 6e:2f:e6:80:67:de [ 643.042793][T19063] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4684'. [ 643.237666][T13868] Bluetooth: hci1: command 0x040f tx timeout [ 643.303528][T19069] netlink: 'syz.3.4686': attribute type 10 has an invalid length. [ 643.318553][T19069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 643.347648][T19069] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 643.411653][T18957] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 643.473735][T18957] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 643.568746][T18957] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 643.614233][T18957] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 643.994362][T18957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.080540][T18957] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.198132][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 644.206152][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 644.419734][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 644.477990][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 644.588693][T14910] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.596050][T14910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.704654][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 644.827772][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 644.859037][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.003254][T14910] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.010544][T14910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.197585][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.270318][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.300754][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.317890][T13884] Bluetooth: hci1: command 0x0419 tx timeout [ 645.396679][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.478205][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 645.558175][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 645.638162][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 645.685385][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 645.748210][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 645.760527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 645.770722][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 645.823644][T18957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.678344][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 646.693220][T14913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 646.721412][T19116] netlink: 'syz.2.4698': attribute type 10 has an invalid length. [ 646.748251][T19116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.805849][T19116] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 647.023759][T19119] netlink: 'syz.0.4700': attribute type 1 has an invalid length. [ 647.042212][T19119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4700'. [ 647.072367][T19119] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.079744][T19119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.144880][T18957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.828727][T14913] bridge0: port 3(erspan0) entered disabled state [ 647.885500][T14913] device erspan0 left promiscuous mode [ 647.913933][T14913] bridge0: port 3(erspan0) entered disabled state [ 648.198367][T14915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 648.219724][T14915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 651.174573][T18957] device veth0_vlan entered promiscuous mode [ 651.220184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 651.235340][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 651.362535][T18957] device veth1_vlan entered promiscuous mode [ 651.394307][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 651.434967][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 651.492627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 651.635689][T19162] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4712'. [ 651.655109][T13882] Bluetooth: hci5: command 0x0409 tx timeout [ 651.829130][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 651.843017][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 651.888764][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 651.942683][T18957] device veth0_macvtap entered promiscuous mode [ 652.107849][T18957] device veth1_macvtap entered promiscuous mode [ 652.148033][T19176] IPv6: Can't replace route, no match found [ 652.175089][T18957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.215816][T18957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.226720][T18957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 652.237292][T18957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.255317][T18957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.266340][T19177] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 652.347800][T14913] device hsr_slave_0 left promiscuous mode [ 652.355140][T14913] device hsr_slave_1 left promiscuous mode [ 652.361841][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.369486][T14913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.377952][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.385528][T14913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.393868][T14913] device bridge_slave_1 left promiscuous mode [ 652.404232][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.415509][T14913] device bridge_slave_0 left promiscuous mode [ 652.421867][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.436754][T14913] device veth1_macvtap left promiscuous mode [ 652.444231][T14913] device veth0_macvtap left promiscuous mode [ 652.452791][T14913] device veth1_vlan left promiscuous mode [ 652.460429][T14913] device veth0_vlan left promiscuous mode [ 652.716054][T14913] team0 (unregistering): Port device team_slave_1 removed [ 652.735153][T14913] team0 (unregistering): Port device team_slave_0 removed [ 652.752668][T14913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.773115][T14913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.838913][T14913] team0 (unregistering): Port device bond0 removed [ 652.865340][T14913] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 652.877015][T14913] bond0 (unregistering): Released all slaves [ 652.926727][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 652.938657][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 652.947101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 652.957576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 652.980770][T18957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.996536][T18957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.026602][T18957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.053678][T19180] netlink: 'syz.2.4718': attribute type 10 has an invalid length. [ 653.064144][T19180] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 653.092675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 653.111171][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 653.129206][T18957] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.161084][T18957] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.212677][T18957] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.243790][T18957] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.719004][T13884] Bluetooth: hci5: command 0x041b tx timeout [ 654.062725][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.073608][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.238420][T14917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 654.256260][T19155] chnl_net:caif_netlink_parms(): no params data found [ 654.631117][T14917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.654253][T14917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.834820][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 654.928409][T14905] wlan1: Trigger new scan to find an IBSS to join [ 654.960624][T19155] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.999054][T19155] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.070983][T19155] device bridge_slave_0 entered promiscuous mode [ 655.169235][T19155] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.176372][T19155] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.218603][T19155] device bridge_slave_1 entered promiscuous mode [ 655.226036][T19222] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4729'. [ 655.317735][T19231] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 655.330772][T19234] FAULT_INJECTION: forcing a failure. [ 655.330772][T19234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 655.346702][T19228] IPv6: Can't replace route, no match found [ 655.385361][T19234] CPU: 1 PID: 19234 Comm: syz.0.4732 Not tainted syzkaller #0 [ 655.393125][T19234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.403306][T19234] Call Trace: [ 655.406621][T19234] [ 655.409583][T19234] dump_stack_lvl+0x188/0x250 [ 655.414327][T19234] ? show_regs_print_info+0x20/0x20 [ 655.419700][T19234] ? load_image+0x400/0x400 [ 655.424371][T19234] ? __lock_acquire+0x7d10/0x7d10 [ 655.429459][T19234] should_fail+0x38c/0x4c0 [ 655.433936][T19234] _copy_from_user+0x2e/0x170 [ 655.438757][T19234] __copy_msghdr_from_user+0xc9/0x630 [ 655.444182][T19234] ? verify_lock_unused+0x140/0x140 [ 655.449439][T19234] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 655.454797][T19234] ___sys_sendmsg+0x19a/0x2e0 [ 655.459539][T19234] ? __sys_sendmsg+0x2a0/0x2a0 [ 655.464364][T19234] ? vfs_write+0x8b2/0xd60 [ 655.468860][T19234] __se_sys_sendmsg+0x1af/0x290 [ 655.473861][T19234] ? __x64_sys_sendmsg+0x80/0x80 [ 655.478850][T19234] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 655.484891][T19234] ? lockdep_hardirqs_on+0x94/0x140 [ 655.490137][T19234] do_syscall_64+0x4c/0xa0 [ 655.494684][T19234] ? clear_bhb_loop+0x30/0x80 [ 655.499403][T19234] ? clear_bhb_loop+0x30/0x80 [ 655.504129][T19234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 655.510065][T19234] RIP: 0033:0x7f686b856799 [ 655.514523][T19234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.534256][T19234] RSP: 002b:00007f6869ab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.535792][T19155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.542825][T19234] RAX: ffffffffffffffda RBX: 00007f686bacffa0 RCX: 00007f686b856799 [ 655.542848][T19234] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 655.542863][T19234] RBP: 00007f6869ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 655.542877][T19234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.542890][T19234] R13: 00007f686bad0038 R14: 00007f686bacffa0 R15: 00007ffc217c3108 [ 655.542935][T19234] [ 655.629579][T19155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.735153][T19155] team0: Port device team_slave_0 added [ 655.754999][T19155] team0: Port device team_slave_1 added [ 655.798135][T13868] Bluetooth: hci5: command 0x040f tx timeout [ 655.838361][T19241] -1: renamed from syzkaller0 [ 655.858465][T19248] netlink: 'syz.2.4736': attribute type 10 has an invalid length. [ 655.866881][T19248] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 655.988388][T19155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.995430][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.162047][T19155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.530198][T19155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.559446][T19155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.627009][T19155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.991326][T19155] device hsr_slave_0 entered promiscuous mode [ 657.007695][T14910] wlan1: Trigger new scan to find an IBSS to join [ 657.015204][ C0] Illegal XDP return value 16128, expect packet loss! [ 657.038042][T19155] device hsr_slave_1 entered promiscuous mode [ 657.302859][T19270] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4741'. [ 657.858928][T19155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 657.877510][T13882] Bluetooth: hci5: command 0x0419 tx timeout [ 657.896710][T19155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 657.956686][T19155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 657.965554][T14905] wlan1: Trigger new scan to find an IBSS to join [ 658.139361][T19155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 658.287011][T19294] netlink: 'syz.3.4753': attribute type 10 has an invalid length. [ 658.977976][T19309] IPv6: Can't replace route, no match found [ 659.017124][T19155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.036366][T19309] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 659.121574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.138654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.175111][T19155] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.242785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.259026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.288591][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.295915][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.458861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.505567][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.562007][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.724924][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.732412][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.968970][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 660.003095][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 660.066695][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 660.093396][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 660.152285][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 660.178505][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 660.234355][T19327] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4763'. [ 660.255385][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 660.304094][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 660.321548][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 660.370402][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 660.382746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 660.405965][T19155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 660.492333][T19333] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4765'. [ 660.660483][T19340] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4767'. [ 660.711657][T19340] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 660.750202][T19343] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4768'. [ 660.917893][T14905] wlan1: Trigger new scan to find an IBSS to join [ 660.937327][T14905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 660.996535][T14905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.013481][ T4239] wlan1: Creating new IBSS network, BSSID f6:5e:a9:69:3e:fc [ 661.036636][T19348] netlink: 'syz.5.4770': attribute type 10 has an invalid length. [ 661.055276][T19348] device hsr0 entered promiscuous mode [ 661.075319][T19348] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 661.130610][T19155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.042951][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 662.071975][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 662.122143][T19389] netlink: 'syz.5.4777': attribute type 1 has an invalid length. [ 662.141780][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4777'. [ 662.171161][T19389] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.178538][T19389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.222764][T19392] netlink: 'syz.3.4778': attribute type 1 has an invalid length. [ 662.247103][T14913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.258622][T19392] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4778'. [ 662.283127][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 662.301776][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 662.326135][T19155] device veth0_vlan entered promiscuous mode [ 662.342570][T19392] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4778'. [ 662.354537][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.368243][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 662.403008][T14913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.451908][T19155] device veth1_vlan entered promiscuous mode [ 662.499882][T14913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.565164][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 662.585374][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 662.609718][T19155] device veth0_macvtap entered promiscuous mode [ 662.638364][T14913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.712642][T19155] device veth1_macvtap entered promiscuous mode [ 662.754561][T19395] netlink: 542 bytes leftover after parsing attributes in process `syz.3.4779'. [ 662.805938][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.826961][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.847273][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.867357][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.899184][T19155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.924423][T14910] wlan1: Trigger new scan to find an IBSS to join [ 662.945334][T19398] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4780'. [ 662.988735][T14917] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 663.011733][T14917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 663.053261][T14917] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 663.088539][T14917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 663.105426][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.125257][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.157247][T19155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 663.197212][T19155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 663.247441][T19155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 663.294200][T14905] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 663.308147][T14905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 663.363442][T19155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.394589][T19155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.420201][T19155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.439887][T19155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.463733][T19406] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4784'. [ 664.028286][T14917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.036486][T14917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.268410][T14905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 664.383819][T14917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.407319][T14917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.425362][T14910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 665.260179][T14913] bridge0: port 3(erspan0) entered disabled state [ 665.351881][T14913] device erspan0 left promiscuous mode [ 665.381733][T14913] bridge0: port 3(erspan0) entered disabled state [ 665.429102][T19464] __nla_validate_parse: 1 callbacks suppressed [ 665.429143][T19464] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4798'. [ 665.670700][T19468] -1: renamed from syzkaller0 [ 666.839483][T14913] device hsr_slave_0 left promiscuous mode [ 666.853249][T14913] device hsr_slave_1 left promiscuous mode [ 666.890217][T14913] device bridge_slave_1 left promiscuous mode [ 666.914986][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.973346][T14913] device bridge_slave_0 left promiscuous mode [ 666.990949][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.999310][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 667.075024][T14913] device veth1_macvtap left promiscuous mode [ 667.089541][T14913] device veth0_macvtap left promiscuous mode [ 667.095710][ T4239] wlan1: Creating new IBSS network, BSSID 0e:b9:d8:1c:1f:07 [ 667.114830][T19516] netlink: 'syz.5.4808': attribute type 4 has an invalid length. [ 667.159216][T19516] netlink: 105084 bytes leftover after parsing attributes in process `syz.5.4808'. [ 667.522920][T14913] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 667.949375][T14913] team0 (unregistering): Port device team_slave_1 removed [ 667.972065][T14913] team0 (unregistering): Port device team_slave_0 removed [ 667.990767][T14913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.027812][T14913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.201942][T14913] bond0 (unregistering): (slave team0): Releasing backup interface [ 668.383172][T14913] bond0 (unregistering): Released all slaves [ 668.464080][T19515] netlink: 'syz.2.4809': attribute type 10 has an invalid length. [ 668.770702][T19544] netlink: 'syz.6.4816': attribute type 10 has an invalid length. [ 668.901647][T19546] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4817'. [ 669.806253][T19592] IPv6: Can't replace route, no match found [ 669.817767][T19592] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 670.351888][T19622] netlink: 'syz.0.4836': attribute type 17 has an invalid length. [ 670.399016][T19622] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4836'. [ 670.508924][T19625] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4836'. [ 671.773991][T19655] netlink: 'syz.0.4845': attribute type 1 has an invalid length. [ 671.788817][T19655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4845'. [ 671.828474][T19655] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.835735][T19655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.940615][T19660] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.4847'. [ 671.958699][T14910] wlan1: Trigger new scan to find an IBSS to join [ 671.971437][T19660] netlink: zone id is out of range [ 671.990754][T19660] netlink: zone id is out of range [ 671.996028][T19660] netlink: zone id is out of range [ 672.070098][T19660] netlink: zone id is out of range [ 672.108226][T19660] netlink: zone id is out of range [ 672.146967][T19660] netlink: zone id is out of range [ 672.194521][T19660] netlink: zone id is out of range [ 672.223332][T19660] netlink: zone id is out of range [ 672.276962][T19660] netlink: zone id is out of range [ 672.312926][T19660] netlink: zone id is out of range [ 672.724986][T19687] netlink: 'syz.6.4854': attribute type 2 has an invalid length. [ 672.812159][T19688] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4853'. [ 673.390934][T19700] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4857'. [ 674.036100][T19723] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.4863'. [ 674.282881][T19731] netlink: 'syz.6.4865': attribute type 1 has an invalid length. [ 674.322584][T19731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4865'. [ 674.390767][T19731] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.398060][T19731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.521765][T19743] netlink: 'syz.5.4868': attribute type 10 has an invalid length. [ 674.569245][T19743] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 674.876199][T19756] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4872'. [ 674.938630][T19758] IPv6: Can't replace route, no match found [ 675.122535][T19758] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 675.794906][T19771] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.4876'. [ 675.909257][T19780] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4877'. [ 675.977442][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 676.554135][T19791] FAULT_INJECTION: forcing a failure. [ 676.554135][T19791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.685554][T19791] CPU: 0 PID: 19791 Comm: syz.2.4880 Not tainted syzkaller #0 [ 676.693097][T19791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.703198][T19791] Call Trace: [ 676.706521][T19791] [ 676.709593][T19791] dump_stack_lvl+0x188/0x250 [ 676.714333][T19791] ? show_regs_print_info+0x20/0x20 [ 676.719582][T19791] ? load_image+0x400/0x400 [ 676.724220][T19791] ? __lock_acquire+0x7d10/0x7d10 [ 676.729283][T19791] ? __lock_acquire+0x13bc/0x7d10 [ 676.734369][T19791] should_fail+0x38c/0x4c0 [ 676.738842][T19791] _copy_from_user+0x2e/0x170 [ 676.743566][T19791] ___sys_recvmsg+0x173/0x5c0 [ 676.748296][T19791] ? __sys_recvmsg+0x280/0x280 [ 676.753142][T19791] __x64_sys_recvmsg+0x1f9/0x2c0 [ 676.758139][T19791] ? ___sys_recvmsg+0x5c0/0x5c0 [ 676.763056][T19791] ? syscall_enter_from_user_mode+0x2a/0x70 [ 676.769002][T19791] do_syscall_64+0x4c/0xa0 [ 676.773575][T19791] ? clear_bhb_loop+0x30/0x80 [ 676.778386][T19791] ? clear_bhb_loop+0x30/0x80 [ 676.783105][T19791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 676.789044][T19791] RIP: 0033:0x7fe487027799 [ 676.793499][T19791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.813243][T19791] RSP: 002b:00007fe485281028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 676.821707][T19791] RAX: ffffffffffffffda RBX: 00007fe4872a0fa0 RCX: 00007fe487027799 [ 676.829743][T19791] RDX: 0000000000002140 RSI: 0000200000000700 RDI: 0000000000000003 [ 676.837759][T19791] RBP: 00007fe485281090 R08: 0000000000000000 R09: 0000000000000000 [ 676.845862][T19791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.853870][T19791] R13: 00007fe4872a1038 R14: 00007fe4872a0fa0 R15: 00007ffd6d0c5388 [ 676.861881][T19791] [ 677.309088][T19813] netlink: 'syz.2.4886': attribute type 10 has an invalid length. [ 677.331497][T19813] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 677.959427][ T144] wlan1: Creating new IBSS network, BSSID e2:e4:62:3a:d7:18 [ 678.515717][T19859] netlink: 830 bytes leftover after parsing attributes in process `syz.5.4897'. [ 678.561230][T19857] FAULT_INJECTION: forcing a failure. [ 678.561230][T19857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.592664][T19857] CPU: 0 PID: 19857 Comm: syz.0.4896 Not tainted syzkaller #0 [ 678.600207][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.610421][T19857] Call Trace: [ 678.613746][T19857] [ 678.616728][T19857] dump_stack_lvl+0x188/0x250 [ 678.621650][T19857] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 678.627957][T19857] ? show_regs_print_info+0x20/0x20 [ 678.633209][T19857] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 678.639427][T19857] ? dump_stack+0x5/0x20 [ 678.643730][T19857] should_fail+0x38c/0x4c0 [ 678.648211][T19857] _copy_to_user+0x2e/0x130 [ 678.652791][T19857] simple_read_from_buffer+0xe3/0x150 [ 678.658214][T19857] proc_fail_nth_read+0x1a6/0x220 [ 678.663295][T19857] ? proc_fault_inject_write+0x310/0x310 [ 678.669002][T19857] ? vfs_read+0x2ea/0xd60 [ 678.673384][T19857] ? proc_fault_inject_write+0x310/0x310 [ 678.679065][T19857] vfs_read+0x301/0xd60 [ 678.683269][T19857] ? kernel_read+0x1e0/0x1e0 [ 678.687946][T19857] ? __fget_files+0x40f/0x480 [ 678.692716][T19857] ? mutex_lock_nested+0x17/0x20 [ 678.697788][T19857] ? __fdget_pos+0x2bf/0x370 [ 678.702424][T19857] ? ksys_read+0x71/0x260 [ 678.706837][T19857] ksys_read+0x152/0x260 [ 678.711136][T19857] ? vfs_write+0xd60/0xd60 [ 678.715684][T19857] ? lockdep_hardirqs_on+0x94/0x140 [ 678.720938][T19857] do_syscall_64+0x4c/0xa0 [ 678.725396][T19857] ? clear_bhb_loop+0x30/0x80 [ 678.730121][T19857] ? clear_bhb_loop+0x30/0x80 [ 678.734849][T19857] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 678.740792][T19857] RIP: 0033:0x7f686b816fce [ 678.745251][T19857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 678.765181][T19857] RSP: 002b:00007f6869aaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 678.773734][T19857] RAX: ffffffffffffffda RBX: 00007f6869ab06c0 RCX: 00007f686b816fce [ 678.781753][T19857] RDX: 000000000000000f RSI: 00007f6869ab00a0 RDI: 0000000000000006 [ 678.789775][T19857] RBP: 00007f6869ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 678.797929][T19857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.805974][T19857] R13: 00007f686bad0038 R14: 00007f686bacffa0 R15: 00007ffc217c3108 [ 678.814394][T19857] [ 678.919821][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 678.996199][T19869] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4894'. [ 679.553772][T19888] netlink: 'syz.0.4904': attribute type 10 has an invalid length. [ 679.594573][T19888] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 679.659360][T19892] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.4905'. [ 679.955011][T19905] netlink: 'syz.2.4908': attribute type 3 has an invalid length. [ 680.027395][T19905] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4908'. [ 680.923049][T19953] netlink: 'syz.6.4920': attribute type 1 has an invalid length. [ 680.992471][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4920'. [ 681.055583][T19953] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.062941][T19953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.087337][T19957] IPv6: Can't replace route, no match found [ 681.126644][T19963] mac80211_hwsim hwsim51 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 681.393004][T19976] netlink: 'syz.5.4926': attribute type 19 has an invalid length. [ 681.458882][T19976] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4926'. [ 681.490525][T19981] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4926'. [ 682.536702][T20004] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4932'. [ 682.924350][T20004] device hsr_slave_1 left promiscuous mode [ 683.007667][T14917] wlan1: Trigger new scan to find an IBSS to join [ 683.062241][T14913] wlan1: Creating new IBSS network, BSSID 8a:93:f1:f0:83:35 [ 683.086886][T20017] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4936'. [ 683.254070][T20036] netlink: 'syz.0.4942': attribute type 1 has an invalid length. [ 683.282588][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4942'. [ 683.314158][T20036] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.321411][T20036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.371266][T20031] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4939'. [ 683.821768][T20052] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4946'. [ 683.834708][T20058] -1: renamed from syzkaller0 [ 684.444305][T20083] netlink: 'syz.0.4953': attribute type 3 has an invalid length. [ 684.497704][T20083] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4953'. [ 684.560558][T20093] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4956'. [ 684.653841][T20095] netlink: 'syz.2.4957': attribute type 10 has an invalid length. [ 684.671829][T20096] netlink: 'syz.5.4956': attribute type 29 has an invalid length. [ 684.750900][T20106] netlink: 'syz.6.4959': attribute type 1 has an invalid length. [ 684.759679][T20106] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.766995][T20106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.812076][T20105] IPv6: Can't replace route, no match found [ 684.837251][T20105] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 684.846793][T14910] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 684.888020][T14910] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 684.999526][T14910] wlan1: Trigger new scan to find an IBSS to join [ 685.223928][T20120] netlink: 'syz.2.4964': attribute type 10 has an invalid length. [ 685.316598][T20120] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 685.364219][T20120] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 685.387069][T20120] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 685.400508][T20120] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 685.879659][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.886450][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.966547][T20148] netlink: 'syz.2.4973': attribute type 33 has an invalid length. [ 686.111084][T20151] __nla_validate_parse: 6 callbacks suppressed [ 686.111124][T20151] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4975'. [ 686.155933][T20153] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4976'. [ 686.661105][T20153] device hsr_slave_1 left promiscuous mode [ 687.183178][T20178] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.4983'. [ 687.869342][T20199] netlink: 'syz.3.4989': attribute type 10 has an invalid length. [ 687.895467][T20199] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 688.024138][T20208] netlink: 'syz.2.4992': attribute type 19 has an invalid length. [ 688.047374][T20208] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4992'. [ 688.115250][T20213] netlink: 830 bytes leftover after parsing attributes in process `syz.6.4994'. [ 688.284487][T20222] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4996'. [ 688.494772][T20231] device syzkaller0 entered promiscuous mode [ 688.803698][T20247] netlink: 'syz.3.5005': attribute type 10 has an invalid length. [ 688.837079][T20247] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 688.924439][T14913] wlan1: Trigger new scan to find an IBSS to join [ 688.991120][T14915] wlan1: Creating new IBSS network, BSSID 62:55:4d:16:d7:22 [ 689.174665][T20262] netlink: 'syz.3.5009': attribute type 19 has an invalid length. [ 689.217263][T20262] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5009'. [ 689.362479][T20270] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5010'. [ 689.908190][T20300] netlink: 'syz.6.5019': attribute type 10 has an invalid length. [ 689.973268][T20300] device hsr0 entered promiscuous mode [ 690.021947][T20300] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 690.125344][T20313] netlink: 'syz.2.5021': attribute type 1 has an invalid length. [ 690.147301][T20313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5021'. [ 690.237942][T20313] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.245222][T20313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.373543][T20331] netlink: 'syz.5.5024': attribute type 19 has an invalid length. [ 690.395921][T20331] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5024'. [ 690.482772][T20315] device syzkaller0 entered promiscuous mode [ 690.529404][T20334] IPv6: Can't replace route, no match found [ 690.582679][T20336] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 691.399903][T20373] netlink: 'syz.3.5036': attribute type 10 has an invalid length. [ 691.415996][T20373] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 691.706439][T20383] __nla_validate_parse: 1 callbacks suppressed [ 691.706480][T20383] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5041'. [ 692.549126][T20427] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5055'. [ 692.647500][T20426] netlink: 611 bytes leftover after parsing attributes in process `syz.6.5056'. [ 692.998727][T14913] wlan1: Trigger new scan to find an IBSS to join [ 693.370922][T20459] netlink: 'syz.3.5063': attribute type 10 has an invalid length. [ 693.480421][T20459] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 693.814911][T20480] netlink: 'syz.2.5069': attribute type 10 has an invalid length. [ 693.833090][T20477] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5070'. [ 693.854473][T20480] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.5069'. [ 693.900248][T20480] net_ratelimit: 217 callbacks suppressed [ 693.900265][T20480] openvswitch: netlink: Flow key attr not present in new flow. [ 693.990288][T20486] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5073'. [ 694.503179][T20499] netlink: 'syz.3.5078': attribute type 19 has an invalid length. [ 694.558139][T20499] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5078'. [ 695.301259][T20506] netlink: 'syz.3.5080': attribute type 21 has an invalid length. [ 695.340308][T20506] netlink: 'syz.3.5080': attribute type 6 has an invalid length. [ 695.369466][T20506] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5080'. [ 695.414461][T20507] netlink: 'syz.3.5080': attribute type 10 has an invalid length. [ 695.446610][T20507] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5080'. [ 695.826648][T20528] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5086'. [ 695.961249][T14915] wlan1: Trigger new scan to find an IBSS to join [ 696.050418][T20539] netlink: 'syz.3.5090': attribute type 19 has an invalid length. [ 696.238830][T20547] netlink: 'syz.5.5092': attribute type 21 has an invalid length. [ 696.918355][T14913] wlan1: Trigger new scan to find an IBSS to join [ 697.081827][T20582] IPv6: Can't replace route, no match found [ 697.126753][T20582] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 697.595764][T20598] netlink: 'syz.2.5105': attribute type 1 has an invalid length. [ 697.637672][T20598] __nla_validate_parse: 1 callbacks suppressed [ 697.637689][T20598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5105'. [ 697.728549][T20598] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.735897][T20598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.770230][T20605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5106'. [ 697.791036][T20599] netlink: 'syz.0.5103': attribute type 10 has an invalid length. [ 697.834619][T20599] bond0: (slave bond_slave_0): Releasing backup interface [ 698.172549][T20605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5106'. [ 698.353297][T20610] netlink: 'syz.6.5107': attribute type 19 has an invalid length. [ 698.405006][T20610] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5107'. [ 698.581827][T20612] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5106'. [ 699.008384][T14915] wlan1: Creating new IBSS network, BSSID da:bb:46:fa:89:31 [ 699.069454][T20626] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.5109'. [ 699.957909][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 700.393048][T20675] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5119'. [ 700.919265][T20688] netlink: 'syz.0.5122': attribute type 19 has an invalid length. [ 700.986722][T20688] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5122'. [ 700.997313][T14915] wlan1: Trigger new scan to find an IBSS to join [ 701.980367][T14913] wlan1: Creating new IBSS network, BSSID 7e:3e:2f:74:c8:66 [ 701.992694][T14915] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 702.042065][T14915] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 702.050478][T20707] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.5126'. [ 702.767416][T20744] IPv6: Can't replace route, no match found [ 703.153697][T20744] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 703.701524][T20773] netlink: 'syz.2.5135': attribute type 17 has an invalid length. [ 703.720816][T20773] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5135'. [ 703.766484][T20773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 703.954625][T20790] netlink: 830 bytes leftover after parsing attributes in process `syz.6.5139'. [ 705.287665][T20834] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.5149'. [ 705.365389][T20834] -1: renamed from syzkaller0 [ 705.415536][T20830] netlink: 'syz.5.5148': attribute type 10 has an invalid length. [ 705.487534][T20830] netlink: 601 bytes leftover after parsing attributes in process `syz.5.5148'. [ 705.575100][T20841] netlink: 'syz.3.5151': attribute type 19 has an invalid length. [ 705.593126][T20841] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5151'. [ 705.836352][T20850] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5153'. [ 706.040287][T20855] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5154'. [ 706.174321][T20869] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5157'. [ 706.263002][T20871] -1: renamed from syzkaller0 [ 706.912515][T20898] netlink: 'syz.2.5167': attribute type 19 has an invalid length. [ 707.060662][ T144] wlan1: Trigger new scan to find an IBSS to join [ 707.071702][T20898] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5167'. [ 707.215551][T20897] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5169'. [ 707.266145][T20899] netlink: 'syz.0.5165': attribute type 10 has an invalid length. [ 707.691369][T20918] -1: renamed from syzkaller0 [ 707.992657][T20932] -1: renamed from syzkaller0 [ 708.752814][T20943] netlink: 'syz.2.5182': attribute type 10 has an invalid length. [ 708.812429][T20943] bridge0: port 3(team0) entered disabled state [ 708.819699][T20943] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.827822][T20943] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.877034][T20943] device bridge0 left promiscuous mode [ 708.950962][T20943] bridge0: port 3(team0) entered blocking state [ 708.957704][T20943] bridge0: port 3(team0) entered forwarding state [ 708.965451][T20943] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.972874][T20943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.980864][T20943] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.988326][T20943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.096643][T20943] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 709.181396][T20963] __nla_validate_parse: 6 callbacks suppressed [ 709.181415][T20963] netlink: 180 bytes leftover after parsing attributes in process `syz.5.5188'. [ 709.413566][T20967] netlink: 'syz.2.5189': attribute type 1 has an invalid length. [ 709.462252][T20967] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5189'. [ 709.757043][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5194'. [ 709.978564][T14915] wlan1: Trigger new scan to find an IBSS to join [ 710.071886][T20993] netlink: 'syz.0.5199': attribute type 11 has an invalid length. [ 710.142973][T20994] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5199'. [ 710.209010][T20993] netlink: 'syz.0.5199': attribute type 2 has an invalid length. [ 710.222189][T20994] netlink: zone id is out of range [ 710.238031][T20994] netlink: zone id is out of range [ 710.258858][T20993] netlink: 198236 bytes leftover after parsing attributes in process `syz.0.5199'. [ 710.283308][T20994] netlink: zone id is out of range [ 710.309960][T20994] netlink: zone id is out of range [ 710.338942][T20994] netlink: zone id is out of range [ 710.359107][T20994] netlink: zone id is out of range [ 710.376619][T20994] netlink: zone id is out of range [ 710.391707][T20994] netlink: zone id is out of range [ 710.399631][T20994] netlink: zone id is out of range [ 710.404945][T20994] netlink: zone id is out of range [ 710.875791][T21010] netlink: 'syz.6.5201': attribute type 3 has an invalid length. [ 710.978810][T21010] netlink: 'syz.6.5201': attribute type 1 has an invalid length. [ 711.029818][T21010] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5201'. [ 711.205630][T21029] -1: renamed from syzkaller0 [ 711.957625][T14910] wlan1: Creating new IBSS network, BSSID b6:78:10:ff:c1:9d [ 711.971047][T21043] netlink: 'syz.2.5212': attribute type 10 has an invalid length. [ 711.998529][T21043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 712.015450][T21043] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 712.298709][T21057] FAULT_INJECTION: forcing a failure. [ 712.298709][T21057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.345122][T21057] CPU: 0 PID: 21057 Comm: syz.6.5218 Not tainted syzkaller #0 [ 712.352664][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.363060][T21057] Call Trace: [ 712.366485][T21057] [ 712.369660][T21057] dump_stack_lvl+0x188/0x250 [ 712.374502][T21057] ? show_regs_print_info+0x20/0x20 [ 712.379950][T21057] ? load_image+0x400/0x400 [ 712.384517][T21057] ? __lock_acquire+0x7d10/0x7d10 [ 712.389597][T21057] should_fail+0x38c/0x4c0 [ 712.394076][T21057] _copy_to_user+0x2e/0x130 [ 712.398659][T21057] simple_read_from_buffer+0xe3/0x150 [ 712.404081][T21057] proc_fail_nth_read+0x1a6/0x220 [ 712.409204][T21057] ? proc_fault_inject_write+0x310/0x310 [ 712.414886][T21057] ? fsnotify_perm+0x254/0x560 [ 712.419784][T21057] ? proc_fault_inject_write+0x310/0x310 [ 712.425643][T21057] vfs_read+0x301/0xd60 [ 712.429849][T21057] ? kernel_read+0x1e0/0x1e0 [ 712.434591][T21057] ? __fget_files+0x40f/0x480 [ 712.439308][T21057] ? mutex_lock_nested+0x17/0x20 [ 712.444270][T21057] ? __fdget_pos+0x2bf/0x370 [ 712.448888][T21057] ? ksys_read+0x71/0x260 [ 712.453396][T21057] ksys_read+0x152/0x260 [ 712.457663][T21057] ? vfs_write+0xd60/0xd60 [ 712.462242][T21057] ? lockdep_hardirqs_on+0x94/0x140 [ 712.467484][T21057] do_syscall_64+0x4c/0xa0 [ 712.472029][T21057] ? clear_bhb_loop+0x30/0x80 [ 712.476818][T21057] ? clear_bhb_loop+0x30/0x80 [ 712.481522][T21057] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 712.487441][T21057] RIP: 0033:0x7f229bd87fce [ 712.491876][T21057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 712.511583][T21057] RSP: 002b:00007f229a020fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.520032][T21057] RAX: ffffffffffffffda RBX: 00007f229a0216c0 RCX: 00007f229bd87fce [ 712.528030][T21057] RDX: 000000000000000f RSI: 00007f229a0210a0 RDI: 0000000000000005 [ 712.536108][T21057] RBP: 00007f229a021090 R08: 0000000000000000 R09: 0000000000000000 [ 712.544104][T21057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.552190][T21057] R13: 00007f229c041038 R14: 00007f229c040fa0 R15: 00007fff457f9688 [ 712.560408][T21057] [ 712.796689][T21072] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5221'. [ 712.866198][T21072] -1: renamed from syzkaller0 [ 713.628422][T21107] netlink: 164 bytes leftover after parsing attributes in process `syz.5.5231'. [ 713.780423][T21108] FAULT_INJECTION: forcing a failure. [ 713.780423][T21108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.869199][T21108] CPU: 1 PID: 21108 Comm: syz.0.5232 Not tainted syzkaller #0 [ 713.876843][T21108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.887304][T21108] Call Trace: [ 713.890712][T21108] [ 713.893676][T21108] dump_stack_lvl+0x188/0x250 [ 713.898400][T21108] ? show_regs_print_info+0x20/0x20 [ 713.903653][T21108] ? load_image+0x400/0x400 [ 713.908199][T21108] ? __lock_acquire+0x7d10/0x7d10 [ 713.913274][T21108] should_fail+0x38c/0x4c0 [ 713.917774][T21108] _copy_from_user+0x2e/0x170 [ 713.922761][T21108] __copy_msghdr_from_user+0xc9/0x630 [ 713.928346][T21108] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 713.934110][T21108] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 713.939478][T21108] ___sys_sendmsg+0x19a/0x2e0 [ 713.944345][T21108] ? __sys_sendmsg+0x2a0/0x2a0 [ 713.949178][T21108] ? trace_event_raw_event_lock+0x270/0x270 [ 713.955103][T21108] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 713.961191][T21108] __se_sys_sendmsg+0x1af/0x290 [ 713.966122][T21108] ? __x64_sys_sendmsg+0x80/0x80 [ 713.971165][T21108] ? syscall_enter_from_user_mode+0x2a/0x70 [ 713.977130][T21108] do_syscall_64+0x4c/0xa0 [ 713.981709][T21108] ? clear_bhb_loop+0x30/0x80 [ 713.986680][T21108] ? clear_bhb_loop+0x30/0x80 [ 713.991490][T21108] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 713.997437][T21108] RIP: 0033:0x7f686b856799 [ 714.001896][T21108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.021536][T21108] RSP: 002b:00007f6869ab0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.029992][T21108] RAX: ffffffffffffffda RBX: 00007f686bacffa0 RCX: 00007f686b856799 [ 714.037997][T21108] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 714.046003][T21108] RBP: 00007f6869ab0090 R08: 0000000000000000 R09: 0000000000000000 [ 714.054007][T21108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.062322][T21108] R13: 00007f686bad0038 R14: 00007f686bacffa0 R15: 00007ffc217c3108 [ 714.070365][T21108] [ 714.289053][T21117] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5236'. [ 714.390305][T21127] netlink: 203516 bytes leftover after parsing attributes in process `syz.6.5240'. [ 714.735031][T21136] IPv6: Can't replace route, no match found [ 714.746708][T21136] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 714.951713][T21146] netlink: 'syz.6.5246': attribute type 10 has an invalid length. [ 714.966077][T21146] netlink: 'syz.6.5246': attribute type 19 has an invalid length. [ 714.975826][T21146] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5246'. [ 715.224103][T21154] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5249'. [ 715.351538][T21160] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.5252'. [ 715.374103][T21160] -1: renamed from syzkaller0 [ 715.666698][T21175] IPv6: Can't replace route, no match found [ 715.695247][T21175] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 715.738661][T21180] netlink: 'syz.2.5259': attribute type 10 has an invalid length. [ 715.776850][T21180] netlink: 'syz.2.5259': attribute type 19 has an invalid length. [ 715.796379][T21180] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5259'. [ 715.850132][T21182] netlink: 'syz.6.5258': attribute type 10 has an invalid length. [ 715.899289][T21182] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 716.060668][T21201] netlink: 'syz.3.5263': attribute type 1 has an invalid length. [ 716.078670][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5263'. [ 716.099141][T21201] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.106468][T21201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 716.355811][T21206] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5265'. [ 716.695797][T21218] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5270'. [ 716.741997][T21218] -1: renamed from syzkaller0 [ 716.964294][T21226] netlink: 'syz.3.5272': attribute type 21 has an invalid length. [ 716.982831][T21226] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.5272'. [ 717.007691][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 717.555885][T21244] -1: renamed from syzkaller0 [ 717.778791][T21253] netlink: 'syz.2.5281': attribute type 29 has an invalid length. [ 717.873280][T21257] sctp: [Deprecated]: syz.6.5282 (pid 21257) Use of struct sctp_assoc_value in delayed_ack socket option. [ 717.873280][T21257] Use struct sctp_sack_info instead [ 717.957838][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 718.297107][T21258] netlink: 'syz.6.5282': attribute type 21 has an invalid length. [ 718.547940][T21258] netlink: 'syz.6.5282': attribute type 21 has an invalid length. [ 720.997431][ T4239] wlan1: Trigger new scan to find an IBSS to join [ 721.899064][ T4239] wlan1: Creating new IBSS network, BSSID 46:dc:aa:33:ad:d3 [ 721.957744][T14915] wlan1: Trigger new scan to find an IBSS to join [ 722.319991][T21301] __nla_validate_parse: 3 callbacks suppressed [ 722.320011][T21301] netlink: 176 bytes leftover after parsing attributes in process `syz.6.5297'. [ 722.365119][T21299] netlink: 'syz.5.5296': attribute type 10 has an invalid length. [ 722.379133][T21299] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 722.555489][T21309] netlink: 'syz.6.5299': attribute type 1 has an invalid length. [ 722.570622][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5299'. [ 722.591444][T21309] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.598690][T21309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.616845][T21311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5300'. [ 722.628684][T21311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5300'. [ 723.204247][T21328] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5305'. [ 723.269414][T21328] tc_dump_action: action bad kind [ 723.479389][T21329] netlink: 'syz.0.5305': attribute type 2 has an invalid length. [ 723.570117][T21333] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.5306'. [ 723.702409][T21329] netlink: 'syz.0.5305': attribute type 8 has an invalid length. [ 723.787878][T21329] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5305'. [ 723.958377][T14917] wlan1: Creating new IBSS network, BSSID 82:af:c8:e1:c1:4d [ 723.976487][T21340] netlink: 'syz.3.5309': attribute type 19 has an invalid length. [ 724.077439][T21340] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5309'. [ 724.212237][T21347] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5311'. [ 724.834372][T21370] netlink: 'syz.2.5319': attribute type 1 has an invalid length. [ 724.857353][T21370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5319'. [ 724.866543][T21370] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.873926][T21370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.681972][T21383] netlink: 'syz.3.5321': attribute type 3 has an invalid length. [ 725.942613][T21382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.339641][T21400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.426688][T21400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.754676][T21400] bond0 (unregistering): Released all slaves [ 727.110605][T21416] netlink: 'syz.5.5331': attribute type 9 has an invalid length. [ 728.228425][T21448] netlink: 'syz.5.5340': attribute type 19 has an invalid length. [ 728.288839][T21448] __nla_validate_parse: 7 callbacks suppressed [ 728.288860][T21448] netlink: 156 bytes leftover after parsing attributes in process `syz.5.5340'. [ 728.407342][T21452] device bridge_slave_1 left promiscuous mode [ 728.413698][T21452] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.573045][T21452] device bridge_slave_0 left promiscuous mode [ 728.587593][T21452] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.757370][T21464] netlink: 'syz.5.5344': attribute type 1 has an invalid length. [ 728.777721][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5344'. [ 728.827303][T21464] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.834630][T21464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 728.858933][T21454] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5341'. [ 730.333049][T21507] IPv6: Can't replace route, no match found [ 730.427615][T21507] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.612347][T21513] netlink: 'syz.5.5355': attribute type 10 has an invalid length. [ 730.622682][T21514] netlink: 'syz.6.5354': attribute type 1 has an invalid length. [ 730.697871][T21514] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.5354'. [ 731.071521][T21524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 731.079391][T21524] IPv6: NLM_F_CREATE should be set when creating new route [ 731.086951][T21524] IPv6: NLM_F_CREATE should be set when creating new route [ 731.094363][T21524] IPv6: NLM_F_CREATE should be set when creating new route [ 731.146113][T21532] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.5358'. [ 731.167033][T21526] netlink: 'syz.3.5359': attribute type 1 has an invalid length. [ 731.188167][T21526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5359'. [ 731.208539][T21526] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.215756][T21526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.262437][T21528] netlink: 830 bytes leftover after parsing attributes in process `syz.5.5360'. [ 731.350106][T21536] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.5362'. [ 731.374551][T21536] bridge_slave_1: default FDB implementation only supports local addresses [ 731.395991][T21536] -1: renamed from syzkaller0 [ 731.449888][T21540] netlink: 'syz.5.5364': attribute type 2 has an invalid length. [ 731.466242][T21540] netlink: 'syz.5.5364': attribute type 8 has an invalid length. [ 731.483516][T21540] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5364'. [ 731.537065][T21542] netlink: 'syz.5.5364': attribute type 2 has an invalid length. [ 731.548070][T21542] netlink: 'syz.5.5364': attribute type 8 has an invalid length. [ 731.561515][T21542] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5364'. [ 732.138285][T21556] -1: renamed from syzkaller0 [ 732.559365][T21569] netlink: 'syz.5.5373': attribute type 10 has an invalid length. [ 732.997483][T14917] wlan1: Trigger new scan to find an IBSS to join [ 735.163702][T21569] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.192763][T21569] device bridge_slave_1 left promiscuous mode [ 735.202563][T21569] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.226816][T21569] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 735.237913][T21572] __nla_validate_parse: 1 callbacks suppressed [ 735.237930][T21572] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5374'. [ 735.269004][T21577] netlink: 'syz.6.5375': attribute type 19 has an invalid length. [ 735.287427][T21577] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5375'. [ 735.471298][T21587] IPv6: Can't replace route, no match found [ 735.518676][T21587] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 736.258249][T21607] netlink: 'syz.3.5387': attribute type 19 has an invalid length. [ 736.296372][T21607] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5387'. [ 736.376369][T21610] netlink: 'syz.2.5386': attribute type 3 has an invalid length. [ 736.437146][T21610] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5386'. [ 736.586547][T21617] netlink: 'syz.6.5389': attribute type 3 has an invalid length. [ 736.598471][T21617] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5389'. [ 736.664145][T21616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.690081][T21621] netlink: 'syz.5.5391': attribute type 10 has an invalid length. [ 736.712819][T21621] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 736.742878][T21608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.841486][T21628] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5392'. [ 736.893235][T21628] -1: renamed from syzkaller0 [ 737.967295][T14913] wlan1: Trigger new scan to find an IBSS to join [ 738.146159][T21658] netlink: 'syz.5.5404': attribute type 3 has an invalid length. [ 738.203938][T21658] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.5404'. [ 738.225191][T21669] netlink: 'syz.0.5405': attribute type 1 has an invalid length. [ 738.247718][T21669] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.5405'. [ 738.328046][T21671] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5407'. [ 738.385907][T21657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.791435][T21682] IPv6: Can't replace route, no match found [ 738.881723][T21687] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 738.888175][T14913] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 738.900406][T14913] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 738.908822][T21691] netlink: 'syz.2.5414': attribute type 10 has an invalid length. [ 738.916912][T14913] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 738.926484][T21691] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 738.942510][T14913] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 738.985294][ T144] ------------[ cut here ]------------ [ 739.047179][ T144] WARNING: CPU: 1 PID: 144 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 739.094012][ T144] Modules linked in: [ 739.102830][ T144] CPU: 1 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 739.131562][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.178711][ T144] Workqueue: cfg80211 cfg80211_event_work [ 739.205220][ T144] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 739.215626][T21699] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.5416'. [ 739.230374][T21699] -1: renamed from syzkaller0 [ 739.236791][ T144] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f [ 739.288639][ T144] RSP: 0018:ffffc9000172faa0 EFLAGS: 00010293 [ 739.294798][ T144] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff88801beb9dc0 [ 739.313445][ T144] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 739.350265][ T144] RBP: ffffc9000172fb70 R08: ffffffff901d412f R09: 1ffffffff203a825 [ 739.358416][ T144] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff88807c71b670 [ 739.366433][ T144] R13: 1ffff920002e5f5c R14: 000000000000001f R15: ffff8880795f8c90 [ 739.378563][ T144] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 739.389077][ T144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.395727][ T144] CR2: 00007f229be14e80 CR3: 0000000060db8000 CR4: 00000000003506e0 [ 739.428693][ T144] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 739.436902][ T144] DR3: 0000200000000300 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 739.507910][ T144] Call Trace: [ 739.511266][ T144] [ 739.514320][ T144] ? trace_rdev_return_void+0x1c0/0x1c0 [ 739.540903][ T144] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 739.567499][ T144] cfg80211_process_rdev_events+0x9d/0x110 [ 739.573854][ T144] cfg80211_event_work+0x2b/0x40 [ 739.584270][ T144] process_one_work+0x85f/0x1010 [ 739.590034][ T144] ? worker_detach_from_pool+0x240/0x240 [ 739.596063][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 739.606732][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 739.614679][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 739.625863][ T144] ? wq_worker_running+0x97/0x170 [ 739.631683][ T144] worker_thread+0xaa6/0x1290 [ 739.636848][ T144] kthread+0x436/0x520 [ 739.650012][ T144] ? rcu_lock_release+0x20/0x20 [ 739.655309][ T144] ? kthread_blkcg+0xd0/0xd0 [ 739.670109][ T144] ret_from_fork+0x1f/0x30 [ 739.683465][ T144] [ 739.690318][ T144] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 739.697675][ T144] CPU: 0 PID: 144 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 739.705172][ T144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 739.715274][ T144] Workqueue: cfg80211 cfg80211_event_work [ 739.721112][ T144] Call Trace: [ 739.724447][ T144] [ 739.727510][ T144] dump_stack_lvl+0x188/0x250 [ 739.732250][ T144] ? show_regs_print_info+0x20/0x20 [ 739.737550][ T144] ? load_image+0x400/0x400 [ 739.742289][ T144] panic+0x2e5/0x810 [ 739.746263][ T144] ? bpf_jit_dump+0xd0/0xd0 [ 739.750824][ T144] ? ret_from_fork+0x1f/0x30 [ 739.755475][ T144] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 739.761379][ T144] __warn+0x248/0x2b0 [ 739.765424][ T144] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 739.771254][ T144] report_bug+0x1b7/0x2e0 [ 739.775645][ T144] handle_bug+0x3a/0x70 [ 739.779844][ T144] exc_invalid_op+0x16/0x40 [ 739.784385][ T144] asm_exc_invalid_op+0x16/0x20 [ 739.789277][ T144] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 739.795476][ T144] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a1 b7 43 f8 0f 0b eb bb e8 98 b7 43 f8 <0f> 0b eb b2 e8 8f b7 43 f8 0f 0b e9 77 fd ff ff e8 83 b7 43 f8 0f [ 739.815702][ T144] RSP: 0018:ffffc9000172faa0 EFLAGS: 00010293 [ 739.821829][ T144] RAX: ffffffff89356978 RBX: dffffc0000000000 RCX: ffff88801beb9dc0 [ 739.829852][ T144] RDX: 0000000000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 739.837972][ T144] RBP: ffffc9000172fb70 R08: ffffffff901d412f R09: 1ffffffff203a825 [ 739.845995][ T144] R10: dffffc0000000000 R11: fffffbfff203a826 R12: ffff88807c71b670 [ 739.854012][ T144] R13: 1ffff920002e5f5c R14: 000000000000001f R15: ffff8880795f8c90 [ 739.862049][ T144] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 739.867689][ T144] ? trace_rdev_return_void+0x1c0/0x1c0 [ 739.873297][ T144] cfg80211_process_wdev_events+0x3ad/0x4f0 [ 739.879587][ T144] cfg80211_process_rdev_events+0x9d/0x110 [ 739.885473][ T144] cfg80211_event_work+0x2b/0x40 [ 739.890548][ T144] process_one_work+0x85f/0x1010 [ 739.895648][ T144] ? worker_detach_from_pool+0x240/0x240 [ 739.901327][ T144] ? lockdep_hardirqs_off+0x70/0x100 [ 739.906753][ T144] ? _raw_spin_lock_irq+0xb7/0xf0 [ 739.911832][ T144] ? _raw_spin_lock_irqsave+0x100/0x100 [ 739.917513][ T144] ? wq_worker_running+0x97/0x170 [ 739.922587][ T144] worker_thread+0xaa6/0x1290 [ 739.927680][ T144] kthread+0x436/0x520 [ 739.931786][ T144] ? rcu_lock_release+0x20/0x20 [ 739.936679][ T144] ? kthread_blkcg+0xd0/0xd0 [ 739.941305][ T144] ret_from_fork+0x1f/0x30 [ 739.945883][ T144] [ 739.949263][ T144] Kernel Offset: disabled [ 739.953812][ T144] Rebooting in 86400 seconds..