last executing test programs: 21.327432603s ago: executing program 3 (id=3193): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0xf7, &(0x7f0000001e40)=""/4093}, 0x21) socket$kcm(0x11, 0xa, 0x300) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x9, 0x10, 0xfc, 0x0, 0x0, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6531aa1a, 0x5}, 0x0, 0xc8, 0x9, 0x8, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) close(r1) recvmsg$unix(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) r3 = syz_clone(0x20080080, &(0x7f00000003c0)="477decbcc24f8623a0c972650ee1e513031d234482f8cda8648aa13fcf2558cc37339fc14a5357f84011861fbbc846bbce3d687c0d80606be6e262e231eaf73ef5eb82fb6f66e361c31d5f35c76d95db60a1bbf422fb42a120f24a1336584d3b4577c0bd2e8e35b50efad2df16e1eef5e8762236dee6fe0dff5d792db508cd9a83bfcc00f10028333f217ef29684427f920850204788de0eed0c836354740d4e02b7a322a8668b801ccc2a17979f509458fbc2512fd4e0abbdddeb8910c608c55315e9c9e3fd436b69b548848a22", 0xce, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)="4aee8a03640b6986e245bb") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89f5, &(0x7f00000002c0)={'bond0\x00', @broadcast}) r5 = perf_event_open$cgroup(&(0x7f0000000580)={0x0, 0x80, 0x7, 0x4, 0x54, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xc, 0x1, @perf_config_ext={0x0, 0x7}, 0x106200, 0x9, 0x6, 0x9, 0x1, 0x0, 0x6, 0x0, 0xa, 0x0, 0x306}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xfb, 0xc8, 0x80, 0xf, 0x0, 0x0, 0x80108, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4fd3cf6c, 0x4, @perf_bp={&(0x7f0000000080), 0xa}, 0x18020, 0x6, 0x4, 0x1, 0x3, 0x248, 0x2, 0x0, 0x5, 0x0, 0x8}, r3, 0x3, r5, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x62}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 20.803481939s ago: executing program 3 (id=3198): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1d002, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@rc={0xa, @any, 0xff}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 19.919419399s ago: executing program 3 (id=3203): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xa0020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xf122, 0xac5d, 0x0, 0x0, 0x0, 0x20, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x1c, 0x2, 0x0, 0x40, 0x0, 0x5c31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000740)="f8ad48cc02cb29dcc8007f5b08004e412daa8f4e", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.043123449s ago: executing program 3 (id=3210): socketpair(0x1e, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001540)={&(0x7f0000000040), 0x6e, &(0x7f00000014c0)=[{&(0x7f00000000c0)=""/241, 0xf1}, {&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000002c0)=""/247, 0xf7}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/210, 0xd2}], 0x6}, 0x60030022) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002780)=@bpf_lsm={0x1d, 0xd, &(0x7f0000001580)=@raw=[@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000001600)='GPL\x00', 0x800, 0x1000, &(0x7f0000001640)=""/4096, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000002640)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000002680)={0x3, 0xe, 0xf481, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000026c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000002700)=[{0x4, 0x5, 0x0, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x0, 0x3, 0xd}, {0x0, 0x5, 0x7, 0x8}, {0x1, 0x4, 0xb, 0x6}, {0x2, 0x4, 0x5, 0x5}, {0x4, 0x4, 0x6, 0x4}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000002840)=r2, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002880)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f00000028c0), 0x2, 0x0) mkdir(&(0x7f0000002900)='./file0\x00', 0x2) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002940)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000002bc0), &(0x7f0000002c00)='%pi6 \x00'}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002d00), &(0x7f0000002d40)=r2}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002dc0)={0x0, 0x4}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002e80)=@bpf_ext={0x1c, 0x1b, &(0x7f00000029c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb67, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x0, 0xa, 0x0, 0xfffffffffffffffe, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @ldst={0x1, 0x2, 0x6, 0x1, 0xa, 0x8, 0xffffffffffffffff}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @generic={0x5c, 0x7, 0x3, 0x6, 0x1ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002ac0)='GPL\x00', 0xfffffffe, 0x6d, &(0x7f0000002b00)=""/109, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002b80)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xbeb5, r2, 0x4, &(0x7f0000002e00)=[r6, r7, r8, r9], &(0x7f0000002e40)=[{0x1, 0x1, 0xf, 0xa}, {0x3, 0x1, 0x6, 0xa}, {0x1, 0x5, 0x5, 0xb}, {0x5, 0x3, 0xd, 0x9}], 0x10, 0x6}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003100)={0x6, 0xc, &(0x7f0000002f40)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x560}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x0, 0x7, 0x0, 0x50, 0xffffffffffffffff}], &(0x7f0000002fc0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003040)={0x0, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003080)=[r5, r8, r7, r7, r7, r6, r8], &(0x7f00000030c0)=[{0x0, 0x4, 0xb, 0x7}], 0x10, 0x3ff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004580)={r10, 0xe0, &(0x7f0000004480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000004280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000042c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004340)=[0x0], 0x0, 0xe1, &(0x7f0000004380)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000043c0), &(0x7f0000004400), 0x8, 0x30, 0x8, 0x8, &(0x7f0000004440)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000046c0)={0x6, 0xd, &(0x7f00000031c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xd8a}, [@ldst={0x3, 0x2, 0x4, 0x1, 0x7, 0xfffffffffffffff4, 0x10}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x3}]}, &(0x7f0000003240)='syzkaller\x00', 0x6172, 0x1000, &(0x7f0000003280)=""/4096, 0x41100, 0x7b, '\x00', r12, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000045c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000004600)={0x0, 0x10, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000004640)=[r6, r8, r6, r6, r6], &(0x7f0000004680)=[{0x5, 0x2, 0x1, 0x7}, {0x2, 0x4, 0xf, 0xc}, {0x4, 0x2, 0x6, 0x5}], 0x10, 0x3ff}, 0x94) r14 = perf_event_open(&(0x7f0000004780)={0x5, 0x80, 0xc4, 0x4, 0xfc, 0x81, 0x0, 0x1, 0x100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xd, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x7}, 0x12422, 0x4ab0, 0x1, 0x7, 0xfff, 0x1, 0x8a9, 0x0, 0x1, 0x0, 0xd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ID(r14, 0x80082407, &(0x7f0000004800)) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x100) socket$kcm(0x29, 0x7, 0x0) r15 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000059c0)={r9, 0x58, &(0x7f0000005940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r17 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000005a00)=r13, 0x4) r18 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005b80)={0x6, 0x11, &(0x7f0000004840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x69}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000004900)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000004940)=""/4096, 0x41000, 0x8, '\x00', r16, 0x25, r17, 0x8, &(0x7f0000005a40)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000005a80)=[r7], &(0x7f0000005ac0)=[{0x2, 0x2, 0x8}, {0x0, 0x2, 0x9, 0x3}, {0x4, 0x5, 0x9}, {0x0, 0x1, 0x7, 0xc}, {0x4, 0x5, 0x9, 0x8}, {0x2, 0x4, 0x9, 0x4}, {0x5, 0x3, 0x1, 0x3}, {0x5, 0x1, 0xa, 0xa}, {0x2, 0x3, 0x9, 0x5}], 0x10, 0x7}, 0x94) r19 = openat$tun(0xffffffffffffff9c, &(0x7f0000005c40), 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r19, 0x8924, &(0x7f0000005c80)={'rose0\x00', @local}) sendmsg$inet(r15, &(0x7f0000006000)={&(0x7f0000005cc0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000005f80)=[{&(0x7f0000005d00)="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", 0xfd}, {&(0x7f0000005e00)="d04403fc56e0c9bd39a583d5801ec3f47daac791aca7f79be02b5b9c0cc142932fa8fd338d1b4cb82ba167632d00dcd72e12b635f71aba4b027b3abedf4ed3f5113254ebca8b15ff328189b18ce71df7c0676249e3cf3f51bdf563b0e8eef585e687c7a5faf251c31dea6fdbf15607d84b65ea568d08176d8bdceecb8ea239518d3f6f9f7c32a97c93958bbb7a9ff54636e2abeda7", 0x95}, {&(0x7f0000005ec0)="5fa7cef22c4e65d194a15148f07557322457e5ff45da57b1fb93827ad4da19a1f745b1c91d7604ec63aca3feab3a42a96f2ddd4adf30500a6891fc319ca6bcdf7413ae5db9d92aed6047cc71a5349f97c26c80818f767a9e238deeff31d00a2c0838fe43a4f24c353da4ef5af979cc51a55cf3834f7dbd4805b653ad5476775ff565f050a406784db3d33ca3d771b7ecfbb79d8e4c1e32383bb8bbc678c191b9bd6e1fb2109a9faad876116b8b57f2565949", 0xb2}], 0x3, &(0x7f0000005fc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x536}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000006140)={@map=r9, 0x31, 0x0, 0x5, &(0x7f0000006040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000006080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000060c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000006100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000006180)={@map=r6, r18, 0xc, 0x20, 0x0, @void, @void, @void, @value=r11, r20}, 0x20) recvmsg$unix(r0, &(0x7f0000006840)={&(0x7f00000061c0)=@abs, 0x6e, &(0x7f0000006700)=[{&(0x7f0000006240)=""/160, 0xa0}, {&(0x7f0000006300)=""/86, 0x56}, {&(0x7f0000006380)}, {&(0x7f00000063c0)=""/137, 0x89}, {&(0x7f0000006480)=""/16, 0x10}, {&(0x7f00000064c0)=""/78, 0x4e}, {&(0x7f0000006540)=""/42, 0x2a}, {&(0x7f0000006580)=""/207, 0xcf}, {&(0x7f0000006680)=""/91, 0x5b}], 0x9, &(0x7f00000067c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x40) 18.622694218s ago: executing program 3 (id=3213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$kcm(0x29, 0x5, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x18}, 0x1f00) setsockopt$sock_attach_bpf(r1, 0x10f, 0x88, 0x0, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r1}) close(0xffffffffffffffff) close(0x3) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x1) (async) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x1a, 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000000000002f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x4000) 17.517695413s ago: executing program 3 (id=3218): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f00000002c0), 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x8) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_ext={0x1c, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xded, 0x0, 0x0, 0x0, 0xdc6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7f, 0x1000, &(0x7f00000015c0)=""/4096, 0x41100, 0xc, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000025c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002600)={0x3, 0x10, 0xe9e, 0x32de}, 0x10, 0x2bda5, r7, 0x9, &(0x7f00000027c0)=[r2, 0xffffffffffffffff, r1, r6, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1], &(0x7f0000002800)=[{0x2, 0x1, 0x4, 0x3}, {0x3, 0x2, 0x8, 0xa}, {0x1, 0x5, 0x3, 0x7}, {0x2, 0x2, 0x6, 0x6}, {0x1, 0x2, 0x10, 0xc}, {0x4, 0x2, 0x10, 0x9}, {0x4, 0x4, 0xa, 0xc}, {0x3, 0x3, 0xd, 0x3}, {0x0, 0x1, 0x2, 0x2}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0xc0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x20000015) 4.858529488s ago: executing program 4 (id=3268): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x2}, 0x480, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000000000000000400"/38], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="29010002004d0200b69e2d53b85034ffa8b72c290150bcef7c8aa5999eaafae2023261a6a17e38445d9ae5180e52c7a296fa85b0d195cb60f82272dd4852bc3008e7057ca8ac8869baeee504e24a650e34592849d562d5f4ec0ece76ce0218356a048f135770c758b23279caff928b1a0879058c0a0fd59af84daeff413096be2b886e4a6bbc3f9d9477e4ea1fc07e12b21b32b45079e28bad943a8fe2f92eb7275c8b699a29b4ee0e98ef1dfb26a615e2a4ccaaff3275a8283a7ae6271448c6841da6fd96d84917f89a080b091a0d6b882d28593898070a45b2ec4248d730dd4ec835f54df082804d798815bf9c77b253ad51545e"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x9c, &(0x7f0000000000)=""/156}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105c000000000063010d00000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.305042196s ago: executing program 4 (id=3271): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x13, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000300)={0x0, 0x80, 0xf, 0x8, 0x1, 0x5, 0x0, 0x8, 0x70200, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x800, 0x0, @perf_config_ext={0x7, 0x7}, 0x10260a, 0x2, 0x6, 0x1, 0x8000, 0x5, 0x5, 0x0, 0x4, 0x0, 0x6}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x13bb711e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x800) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r9) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x7, 0x0, 0x42) sendmsg$kcm(r10, &(0x7f0000003b00)={&(0x7f0000000680)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000003740)=[{&(0x7f0000000780)="efb9dae7ddae518b1721cbf2f6a5cf81e3ee2be38806b9ea52d5a147f5cfde66b8070a2c65a49b1c36d609bf84d04adefbb5685c1b561f720301130984f3907a7a05f21fad5d1d3465f6e44508a64837fd33aef6e06483b2863022efe4083c012213afbd0d868a6334042d5ff75ac4d828fe86740bae89fca612a5f7a85bb0783318e5e80a76547873ff3be882ed703522dff07f6061", 0x96}, {&(0x7f0000000840)="3c11b0fe79b28c0cf9530eb4861be374e3dd0d06fb00ba5db3c0ee2284500178bf824e4327a7adb66d15a89a474570a14ea46001dbdb8c49b752c4c71999eef4aeba52120b9d9c291454c3fd1dbdc7b0d6c4fc7c5e8fa42abdca808b20500a5b1ec372489188b08aaf", 0x69}, {&(0x7f00000008c0)="eb098d8b9973bf9b60d41498448a035a707e720188adf4afc608", 0x1a}, {&(0x7f0000000980)="99cae2ed18237220a95f1717a9524ec920e5526a7b07cef245a1168d8306dc489dd014cf12d80f764ccfe40efee6bc55df9f7003e73ac2adc4a8ba752d5b948cd36fb8175568df4d3283c090b5539ddbc8262a435ac6e758697a838391c09260fd6484b34582736ed4cefc420c74778a6a5081c09204eff2f92d1e96978e07d1b19e283f6901cd9f1d99ecc8397d577b235664265a0d19368ddede53fdf0a129f3c9bfc106b5f08b14700b392c44cae75e2c35fd41f60e19c3ee7d9cd7e2b7842fa275fdd0712669dfef302509dcf5f08d", 0xd1}, {&(0x7f0000001540)="7d3cb60205aa64de0d938f017b1ab098b80dafb08862deef62272a4c1b98f463b8b66e6345199a0d4d30534654640c003f95be3cb30bb589470297ac1641f9c46fbd6dba5b427d6a9183cf46918bd6d939a42e2a1047a14714ab7a4916aea66b52e691a62de56a9ca5ee9f963dbc4dc18fff5b8d9fba4d8af71049c06f5c757102a83e809528539ff66d5aa7082ecac660919df017ee4ace618d76fbbd19baa3264984877859c18cbc87796aaa17ae9ef5f7fbd33802d366ce94c1b5c89102acf1f032ef8e02a128c95b91073931dcef898e1246958539a32b25ef289dfe7749beadc79683bcccbcb25f5db0d069a28a75b5f6490246dceed1f9c1a7048f030bd639ae371ade69e3b215d649fe427d28c3f12094100ba564996a4750ef9e9e009930cd32ffcb89859d199540f5b5df3ad45a0513c347f4759997e8a60b1c7ea5ef3444798fc61753257116ec6f135eb78c1f9332b7d8a10d0ebb4099c61cac27e395c2f19d59d92af89f5a78c3319aaff8dd800565c8463fb13d322a9a972dcc34918709824e815668e6e1e28a51498e9574c8e7dfac3ffdf145367b8c5a9846ce2f84e2922d7bced43ed613cbd1e9cd7c36bfd0565c68c07278dd58091a1b95d9b7a4c07cf37700c16220952480a95815d13d64724f92567b6737592d647437b571e67bc01908ca64be86ec8d22b2bdcc321c9b647ffed83029eac7005129358e64a8f07620dc737cd8cb72462ccf6c0da3d8cbd106a6a2610990f9a06369d735dc28ad72ef5fa3553b933a19af5fa5b58abbe1a20b05b6ca6701f36d2ab22131e274c90141e3cb57501b1749811a4e17159e2468c0eb20301b62a4e37cf3dbf3432298dc1bb6aea19dbcbcb477b4643493454a547c493c5122eb7510b89553666740c51effd6946f0584878fa6986d62f3ce3b1538d8c9580092f7248415b84b022f242a5d16d081c18bc8076334d2eafc59942a347590794f87edc2713c3bb40edcecb6c0f90daf120f1a1556dcab943445447bc97d6e110a228ff19af2ab005451d28cc6ee89c3d60e3f87f72bd5c95362fe6a0be76958dab9430648c6d80650b994f5260cbb5fa99394deaff01e2c8a38e0f24a87aa073e8d930448d9c15d3f9367cd722e6ffef210ca2b7d52f3654822bd32ac928bc84464313891f91d527d203f9e6ec7b7162717d15d0fb427d7272c760fdd2fb5c518f81fa74d8cf088c54db802d2a39d35066561e760a4b7cd14d732a482805019e8edac5a52784e9502c54516de01e655e663e12af0f269ad6c7a040c1274702b58ab8fa40d4c87a2a76c5d012c8bfe3b6fed020b823ba2d8de34e7fccc6a258bc25b52e4b38a1767aceef6ed035e6d2fd3c74a1f5d213418341341b5fc00aa4ae13da9b24323103c1c3ec792fc20e654f2edade03a298720c93b317fcbc3e0cffa519b9a203ef9044d36f42ce5d9bca72fee8515ef16420ec6210ff05de77e333c029caffa44c9d6d14ab4d36a4b480c28d3b214ada0ee929aa405b760c9aad6354c3d2e9fb508644cc4e3d63b76f6494f31f153ea4ec5506f1885be9d46f7e001ef18238745438c7f17a397eb51ac8e908b3e4c76ba9a9460911ebea87504a6c60005c45038da93f5c14a210325d58bac23075bb9f82ed851e368501b94cc4d56dad00bdd12234c21357b45f0deccc0466ff511be5c649d40cbd51dec4cbb1a9e14d07eff5e2fe5fa771102b37b0bc2477e0fca9917bfabadf642723640af901a49d803b4b0889b59fa32418b9070b0cf69cd504ab085030a5753ff6bc579e6e7ea1131f6f374894fed668e969c44a15bc259ffcef328f55de26029a275520b2f1cb1f7512bca51ebb3d7d0e96a9691425618f38ba5d9fe1b15c57e51d95c532fb7c54d0658a142e36d31cca5ea8d81e575d4355a747f5cc74b2eeebda4cfd10392383a1ac3551509030dabca58a6a17495cdc714a671cec55f0aed1e9658ea1c248f87253817da27c85f91ed1873f6b6912b8217439d22b6b3f4f6b48eee1aefde5b9854d74babf99082d618d2abf4652837e0c005e94b7898445975a5a3e4b96617429dafe42aeaf8cda7c08a82c17ffffb3123b62b43bc2d1c93820394f4aff4d96242e7adc171f30c20741c9596f3fb74c9f51e5ef4165e0745b6fcbbc85c5f0ddb9cd1522d6f68597f8b6a01e9d3e9f6946d98cb53be36e933f8bb2706fcaea70c8ae65bd4e454d064870fa426d37a3b0e188643ff652c69d3d094b578cfec085b169be1f63ce3a8c29f372e4f41dc9800768e786a7e14ecfc8f86ba87d38110f4735378cd92bc7813c77a4cfebf89a827505cd21c3619f46b92498be3a41145c80cdd7c42197a33743866a380becf383d2813cab17e2d7fbf5a98efa942f4c0cb3720a8eae69a8a2f6dabd83d4be13246e71927bac37e4e1f1d10b3ace37d4cbe25049168631b2f30aa21343470f8b28dfc374445bb08b6761cc53049c185c44b69fe4a2105074f1fb8588e4117b74f935a70c0fea5d94328b5416aec70c30751db196a7f2a92a4f72382bc02385170cc37016f92f8458546cc46849ffda468f5f29d7dc6cbcf399cae047e6f850c784124499109cb26c707a436a0bf6fac7df0bfa1229df9976ef564404584e19c3c530c9c9eec4e8fe31388191d1539520e8ef3eb18c857e5a38398d428154a2c80dee89c48d6aff3e51a891a857c1b7180fa521baebdcf0deaded529dbce39bd04d06de5dc9857dff8844d95bad238841c3f96ca56ae1faff925aae719d41f162a1a3fb67c6f35158848d43d7cdcd0831b4c0a3d2f31bed12a1978c4b12842b145606596d356c86d094ec6030c5058ff7fd7c613116b0e1a9aa38e90bbe7daec07dc8f072001d5f9fd03aea7727e1f734fa36ba51bb98e28b05cfa6135cf14a8a4c856c564e3186feb199dc76776684f930d7b1c2b598bc6ed46d04f07049ef9d58bac1ee13af4e762bca043f82e635e6eba28d10b03fcd7473b2439cc93bbe375720e1d9639fc01dc24f11f09a1e3ef78d9255fc90e54a70f6e7e8902f1fe30e77b27bf3ed6ff41189c3ec0da25c3f2380ac543702d2b80576c2a2e4058f657809981961a13ea39e1ba728ba1aaba42191b6b4edc187b00a198bb7ce4fbaed08492cd0f34d5c30bac89ac646fec552f0b9e6db8830f2cae2950c2213b3c6579ab6ba9dd59664ab23cbd6203a756398779513ee1d9ecd1fbe242b56984ca1f913da8eb91c590998edaf43b7d39fedc9ab83ffc37f2079b5f296bae87e5be5f52b937bd9260df37dd47ce6cae0d194c6167c9cde82dc7fe479f963bd1fbd76e1bdd8f45bf61e762413c090b0198c98963453e89f740e64143071b152e8410e5b2f2c82ae9d0b1dc40fffd7d8f263d57c335518b789dc0cba0f800a7ae2241f354bbb0da94f2c253daeedcb4032800956725d919a58609a539ddc7a0bc2f60313b335d54574c3b53f288fba3caeeb00474473f3aa33414ab582e45fbb80f8247f69625b80a3b2aa85f1429b1d8911e4ebd5f777de5d88cba668f455dd579ba19d60ef33ab68f330211c8b26b489d57ade673fe87589b2974349012e63dd2e1133d57e6371a7931cbc97f30d76f3cbc4f3bd0d372423fe43f93b484db5552591506b4f7f679a7281c24a7fda82b64b6427a9fc474edc41eb061f6c0921dd64fca92c1cc60a03ff63407966699472154d7eef2a3a3572b7001fce5cb9ac7e873b6913fd446aaf915e03f46b5c387aca48334565d6e45a25ed98d9cfa5eb25e3ae5fb8c8c16f05bb52fb6ba96c70e248b90876237cc06ee7d884021be2cbc07c7f96af3d2f7fadf7af108f67e0a99ea93be9ff65c2e605a48139b2eac35705eaa947ae7565dd0dc3015877d1f65045af372c0cfbb85811890d2b8cd92b2b4ca904e35398736bcbcd7cdd303cd0537fa3dac52e1d337abe3bab4597ef2e1aca094af2d7ff494a26b856256ef039d87e88c242c59c3351333f5316d623aacbb6aeb8dd3ce9de2a61703f0ec1c60e94b41a88821a522b07a88d3d646746a1fe467c92fede649a1ce540ed0ed1f59c33a740fd744e300ad398c10f117494bd01d1241e51496de3468e7c5fedcf02048d4c6c40e6ed13c0b38b2947509abf53da8460cf63d6b14efce24da3c215b08a96ccbab9b4cc5597444b75afdcf4cf567c3e693a66e17a7f62eed50bfc44a2dc0c586912a3ea97cca38e121bdf8240bac8eaacf46b0682045fe1237891399ab3b5baeb66ec9cb72cffa91a8d10e8824cd88464d472d70aa5077436c6ac0948295dbb45ff7740e522cbcc66111ab9aa48a35982c79dfaf352b83e637ad3c5522bcd05ca508f76dba98c9b616de919bebbcad0a3083ba5211cd703edb54459613133ed9b8a8ed4a4c83ba33d26a7f31793563055b7e9615dfd83fae8ae49ef9e0b2bd3c15afa2eb6da13cf7c84361ff0597961b884d2e2a1b1a276b58da714721ba0cda617db5e70820744c2759b261cc759b2ddbcbc366c7b5b360cfb81d075420a15e88869601e002b4ecd53c33e1ee267fbc963d5d1925f9b33aec629335e63d8917bd819811baff229eef4da48fe5f4a8383c226a13ef27c34dc16104aee79359332d049d0ed666e85debc4250ef85e9a9693b2fa56e2632bafc05e8ba45032f213d7d5a9643cb13ef5ccad8c7fc03e9da2aec9ea46064d0c37b86a0729a53d75c957cc6f3cdd9685ccfad3dbe98a921b7af120ef4dca8a75f9cc9e5bb001f016a07cf05376d893e600109322d849c8dece27ede17581093f9200a56d4c37b130a0b1ad5f6a4c8abbfa62e36390da8c5351eb432f96800f0cc25a1e33659d8d7f2240b5a7f1602e4d1d9cc53cacf3dc25f768344b53caaf38773c1475134a17b743b5fd71e516423e8636152d872738886b8d756cdfa3ae56c2bdc35b8ca5289a8f93da215dc65e86c32c03acdf06044fcbfdd218774622e7e89ccb3ec4d8b9bb6d46abf3a61e28d957c2cb0df9eb90d9652a6a70b2fda48bc2990d1f2eb764294532e07753ca261a85ad8fab810c141985b945ec515b6b9e8eb491f8b93f86c42ecded7267113e2e2ef4b08f13d634e8440f08349081dca8bc550e6c8724e640d1e8bbeb621cc51c1dcbda277f7e893663e8aa60fdc64fd7536bd028a46d247d3dc69cfc33a13ed0a1a3ac4011d76d495c1a915c9595cf71f2a89e39854daae8f95ae2b1e92e49c623a0ebba1e214a97b0a5fa07b8bfd16c2971e25c50c031b6dea0567f98d684e30be1bb45ef48ad1c13c24c1251bd56f0c86bd40e0d3ae4749e1b3061d980e0a51e061fc360233b4423ddc2053c78eecade9d9d4acd9912deb048b2ba2198ba6f0f414f2c0a3a73e697390911bb5cd288a810e0d3611a8cee61ecc06c50b4b29061fecdef0e543720c08390f99c4d7d6106e841c591be962bd6075256a6517e098ddc5821ddaee8be01513700628fd48cef8ff95e77a630671549ac160af6693994817a1c65e5bf7dd484e211cdc54775dc7b567f77b2709c0d38920e9dae0444a300f74fe9e20ac72c06b1e30380ae75880babd6e64f4c36a02889cd3a2c1b9b6cc58387c3176925d9194a307b74a34392c2fc9cbb0e37eb14a0f871df4ca5d27dbc93baa5189e00decc81cb00a21517e3b14f087da0794ecec022b65edc785153acce65e99a8d3660e24ac7e1e98da2003d398460eda35e84d884b4656bc60b66a4d9493eaabf0a47e5940584d1d132ab23b6627722f2b79c94aaee28fe9a58bebe3e67fa99a3f77cd7589f10fe0a754e245a599437efc7b49aa4edc0fbd3418d", 0x1000}, {&(0x7f0000002540)="cb960d6129a920c99cc93866a6591a1df996695505ac45de1f8a682c4fbb9cf349077f959280ba5f14af812bd3a1a1a9d4ca0e05afb4fb36dbf4e0cd226c27d88b8bcbf6555225e46a094d93f934f9b08f6fa73994197919f442afdc6a389bbeac1b379145a85d194f16d4d8f17a320aacaa583a0e9405ac4d4190c10f6dea7c1a45459bd4be01f6372f23f83d4de43727ca95dbc77ac9b56d3f72b6bb90f160dfeaead668601db74c2d4d6bf9f2e553b394828691439333f52bafb143ecf758a6ab8553037fe03d7337d8ef7d48002a0970609daa9d642ddb09b4dc146769a6ab243f0679e8a6fbac7fee62c393cc4ca1df0e4213ad383220f0a4297b6de7bb7dd07b12a476a0e165aec5b2df2a5562bade74bea9db634161573848a7f58624586d7d008f0ebe003af113113d2f8efd0dd6f6e18152ec0a13c640e22aa190affd0ceacf883fae98835955e7b56332b99621b7a2fea8a9cc35e813db6f5156d65f772da88acc1adca8c9cf9e6c63961265dc824cdaf2be6810b85068596c9797ef6b272dbef0a5d27294b66c3d66ed622f8be152d466cd9fa53c74c7f9359dce1a3291c1e1785dcc361bb4fac26666d8b02b218bfff22d57e368c9ba307d79a96b1cb95ca0db730fa7996f42743f88b367dd979af4fcf1bf89190955ab1003a542a7703f692b6865cff021988d636fe74724730dc69b9f04d725d0420f91f9b5e62f156f245d741a1bad92a567b5f148a9212e00eb282a064d2cba2c56b973930c79e8bba43ee1e813328ae46b5e58fd474b24199439fde6ffd44ad1cf7b978897b1ce72b8daf2fc091e3b8e0785fa25e6edd39f692d2d6e94569ae2f14983fd4fa383e04b1e7146956d4eb934896e4f6dc8cc3355cfaa396611f61e590956e019e47214cd9452d21791e4240afa156c61fe71d7e1ba2781c75262d8d9643e79eefa8237a5f94b37a8f2d06dfcf2e62c3dc26b26db5b91520fe5f81f335d2512f3e7bd67335c0b7d6eb840bb3563882653c357c7f1a587c150375b7eaf5ebca3f8ac796b59f5f328efad1247a390482a70d78237ba32e1d5a541a6dc287fc44fd131fadc6ee452eb322590ca34f4e4ac4a69b6a6b2b7906a46ca5fd6915e0d98f32e753180cb659e3d251b377556e37d036d179258096bbcf2c70f9e4bd504032286519d013a35a965ee370d659cc73868a6f3e11ff00c12ecae48b6fcee4078f562007815090f931d5a087a0d46ab3ddbc4622cbcaf60d39dceb5f6afbbaec6bdebc85c4113d0e52b7a22334ee80764b70fc6f467b99f659858740fc59aaa13794ccdf9179053aada1c3a173c0b1dd49ba59d80df4ec58020bbce3fbe52c945a36b6bf6f2f5383a1bde846482ca6f8aef7634975af2c41b36bf219a27ccfb78927bf115b89778fa5606a498e49cc0eb2fdafe4dd22794986564740b7d405f635d029964b018ff17f15a3c69428f57747af3bcf9ce9c3b3653fcdfc147ae9d50c803c5568126c73804b50cd3151a1275758ac9692e718befb7477bc74878fc252474ac81bec16e3aad13609c02bbbc4b2796941738a13f0dce3630469f5f52ae687d15183e940b28c07f53af6cee36e99a2363eba03f0f5cbfd7875f3381dab8b7c47f066a9d97730627b3215407b8f611e2045d953ffacfba754cf2afe5709e1685827ece59b6a984d4e67b94c0c090014ceb372744fee70175ff2c61c0096c781e86e99f51945bee6e7503c92da2370e709ec0c59d2f9f4b12fdde6dd9aa886f618b012cacc5dcad1ae32b953d395c770352d2d0df183f4db8df7efc2216aee6b112a4471d5f3c8b35d170fe646d9c25c92874c0426a0ffde9796fc668a24a5c375af056da19aaef94b71424d0d5f1131fcbb7fb09e817705f34bc32d2bd0a21eef6225e219a7a9cc98f1e5791a36cfda7ac67b3a096147c54ef881bc60a8e7d227202fb8b8c72325f00643b840b9c171e24c8cfcffe51f32055e50e7a862a180f55e3b606dd4d81da0ffcb516fede25ce57d80fd65a893a15c6fef6590bdb7c627f0698cbe960bdf183b18e771ed8450966a26fdb6ca357cd8ae26ad539b5f201c4014136d81c420aef0d730dfde530db4b4398ff24312aa46524be78f45f22d6cce0d495825a196d454bc6743d61983556f2bbcc125e34222aa9c63f50b2a945fd6a63248af35c87d01c891af7b1548432f1f20d9e7ff75a7490c3c8a9110891bf1b6af87c86ed814dfb3935f291c190cfb4e31bf64f69102fdfe12048676c0435844e73043e1e14f71959f2bdece5203cc849f3baffde11d50c5fb6f5006f970c5d7fb3b8876eb8bd3218723b85813a1c419f37c2e06e12204813d9d4d4a0dc74a6ef9707020700f36bff20effbb4e178845541f69594fca15774b13c2252d24f169a7e10079d9ab1c8b9b3a53371117ab8a7d7d8b796ed382210e12586565a22a5367a032d23ab7cf7d0a0bed3d955ed6540519297f4c969238e4dc5b5aab0e1b5e030722b59ddc5ba2c776e06422734621fce653dd06560f531371353e71ab4244c727596321b9ebf6986d051ff957c24af620c8c685cb431dc93876fcfdb6dd24386698ced6d5d3ebe65ffb782a75184b99997c798eb60bbd5e4be62f34c92fc60a8f7a46a4d3cc51c1b7cbf6bbfd7066466b351f6fe92f33c6fa1a49ef7c483e6a82f4634b081d370cd531bc9980ccc9fe9c2b570e728839ababd97bcdb2b721bb8e2b27526274518e8cae8f46c936fb0d7ae78613cbc263dbc2b10eaaa03d7a5efbc925e231bf9e9171e3acaff3903b630938c5b8c23cc8fc3412355e4147644344a0b17975274a61c7d3ca47b23f27534ccf64d78908b7156cad6e22e39a36c1e9e147203c51e3a8c2beb830189f18c3abaad401fdcbc133753eb69c12dcc2d082e222e5316ef6c4f10585d4dbc23ffb916cd64bdfe0894a33cc353c496be5b877e4e965869273eda78b84a1a1e06d167b8933052911bb7b2c5218e4f87261a3cf3b035de36263012465698493e4ec872072cc694f702056cce2604682a3b2aee590fd9c61a1c0e3320f628d1e8b691842727a0a941459b1ade5cac89b476c41b70b037bee361b98d4c7e288c8f0e8d11074cc3a5050965604f37ed29f0e2e3b416cd8c59551619fba9103127734dca60ef9ba334307ab0de188dd1d65cb8b76eb8014519bf3c3fca49c35d7125b3ae0715b81d37e0654d7af01e19192113897d37d3f641e490ab60527fb75bb28fe562b33311145b3ad077af7ebed31723709c425748f1e89670b96ac4fde37ad5a406c0c510677627d091d567b37ff3f39e03e63979e0b4cfa952761519402ad710ee1f7218ff7bf774048f22682cd0fe3644921271f60dbe9326b80748c2b2a7f57f79c41596d3675d43662d714c6e8bc03e093a4865536089d5becdbb818dd99d367bc26c8df8f6b095a3efd196a42c3dfa101594fde8ffab9bd26103fe0e6d0f5ce3089b987ab84678ef3fcaba89f0b785b6729aff6a2225e220bbf7c530554996050ccc1f4d9285baa04807f5ab5af5faa6234c2508a04704f9e226dea3fba2792429e96d9d5af6fc61069e88e3406c90b98adf457df84d1863e48aad89d1eb38f5990fb367224dd7713d2abb32587fa2f512572c0d4452efb1797df8d7cd5403299ee36cbe7759b1dcc0a8115abf0aee11d85c62dc1c434ece7ae2d77168286afa34b20a6b26257429594352e496f5ae039176dd1eb584a0f01324f21e5c39f0f1d3314db320f5e61222c9768fdfb024a2a8172c853fb76e9cc37b2e706d44d60c6df7466de803c5981191523fe9601c85111ad5b437d1284dee0aef9c7593f58d416826199fb270bc60b08a2428aa030c19e6d2beaacb8ccf888809085263beb17c0691026f8ff309242421005a44a3a6dfd3e63c5bc6a6b0c91af0ac3cde1d2247cd8d6ba4ba2660a56bda546717122a5ce8cccf56e7427a8a922e96715274dc7c2fe44fe3599d50500e7b8f6c85010582f265c9801ef6e7a3649e08fcb96e3d994787a7be226b7d8350d9b18e3c0d056fb7a3a8fd42a2743a31cdc508c61fa72f103dc82997346ce89303eafbe55f3ef076979a178778f4e1b4f6e2c9f9a9e214a5d118ef2c331eaee63b168ff97b4739c51ae323da60ab0f05444c33e670e9b2108d5455d18cd54f436e210e712b10864eac15173b7adbb251bb294fd87f8f9d1196cd293c604bb61bdaeed2ba2607ff3875e4adc66b78052362321aa823c722afba3a1ced31b940d4f694c9916df8fae15af28c454dc0c4a5b1fa9d91bf65126cccddecf06996825fbe1cea36ef32b744b58d163f8c8763a37a4763c4fa1bc5f4628515cfd78245441b1f4ef608e6767c990774c5795847153fd0d9038b0ed2a13ff74f3bbe3fef980ff8fdf7609289bf4f27eec21c4da361f3d553086136eedc55fd9efaa4a813c2150e319880a986758d351542fa19f7951cd5d533daf84da4deb9e7eef9b51e9ce74f616befbc3941b3156bdfdead9ca7be096b92231a2ba683913dd5b720532160035622f8494615ecaa97a4a007b726b5d74a796b60c291bad23b8c64d31e0536521ffedb10057b304c51c92c7370a8393728c3acfa394ceb96da93d88d427cb342e23e4accdf4e34f9f18a89f5346e4464d9a09ddaf0404f42f652de5f5217e49b5bba16d080e72103af153d58a072fb34b0e0c4309bdd5e553f87fbed37eec8a2f167d0130197b30c50a19e5f0b4e4d6e820da885ed077f099667ce9e7c691599147ca96ae2b8de9abdf5ec875adf454cd61a19a75f172af3e21522c1b97db55bec6632bd1ebaababe4e1752e3b42598760a575fdd96bc4708fb3924b287325895ad7395debb36e5ed7ded69c1abca4e408cfa98804c0e87138d65c61fd76584c46789892d1ce4e81d4e04af15221e768ca75c9275984de1642cc10889bba11b0bca9b75cd6592cd25ab480458815e7ff4cc9e0f0b6d6931f7984e8db5aabbfc830a40ae5bf54300e703a3fe89386c8e7295328fddc6da28acb7e5fd939a39053d605b024299c56677d702d90b10e403473da49b3e217b54a3f0f61f3737b60ceeed7e8c36910c20b1babff01119a20e24b152ff3c2bbd2cffa815bde3402e316ffef05a26747f90b4ee42793432e64b32bd3e1bbd7ae96ca8b278b6ee718fc2f82c64dd0ec15a440326f9c866534c5191fe781f8b2813fc17bbc63ba725761a87d698cec7a73723836090bda606743fe8ce6e50bff2aabbd9a961ec5352ab5a2db6961334753e8d733542400c3f04bab55a7ae866e26cbec7b78895db4683018014b1f4f9de6baf4583de6081eb790e7e497a20500b41314c1536a9fe26f65486b3b851a3169ecfefe5732848218b52a5b53be368b43e56de4285b9309f38a1f09219c6f13c8173a2e6c851700ef7adacd416572b5e36f92f3e2444c95e7615f324eeb4e2e126306136b83d19cacb289919ad1211054a79c9ff439427dc4dc032196e10e42f7b5c35a8477904d7967bdb79ccaf6e3b78af05d2c437aaa28c9bf6d41a462a3f8b245dfc87f2ce0e24dad0f47f7e8ad4b6be4c72e5cd4752dd6b780f0fb8390658d9063191c6e09c0c5e3b526ee79f4f97c089f04a788437601587b3550c7c4ddc568b3861e78a57b768cbdf410c14b7146caec5616de7d784b38128765cd411ad2b0cef0a6c59f0eef90be7649f8ba615749a7ea880e7b4441eabe1df58eb96f13ebf297ef845c86536e1815c48adb1ada25d55bb92ffada65fca2f3e58f04dac4ba4d2e1aaeb4f05c5594d349f5f3f1de5a073ff520d2", 0x1000}, {&(0x7f0000003540)="84849e3ccce1b6ca467328cc617ce7ad28133ea125c232dc8bfc47de7d5b75e22d9c809075406318d7dedcccc945ab05564994be7be481", 0x37}, {&(0x7f0000003580)="5db034decc3dc267c1f3933a1e08608abdf589eb5c3d99b7f586795842f15541bcf3a741b13c84f70a60f970568790c72f6d6e961022cdafe3be3e62358811bef85070edd7c4d2bac856c1ed04cbedc798ebb7a72a2c2c5df127755aa750903ff50691a2aaf8520ac4fdd7efb2793989dc7b1243926b20937f184f80db4d6c31ab191c00b66dfa4b62c36b2d9a8d53b3c4e975bf43cdd1a328f4b9642cae81115d25af11292ed77a480bddc3f20e7af95b7c204686baa4517954", 0xba}, {&(0x7f0000003640)="4032d78cce16e4095da1b422e6dbade53797ed4714d862f884cf278a9ef1dff5771db1120a3cc6c553e9ae2e700b12c13134bd80c9f63286d036ebd20cd45bad47403371e5c05364b427f2b9a787931fafedc6d15e9faeb9997e28da76d702cc11eaa5d652dcea4a8f8c84052399dc5f565dd812599f59ca42d756191bb4a00cf67bc909ad324b9931b8aebe25b5f4258f0c894f45c9d8aa8e619db1ac0d4bde62f7304243138166976ed0bf942028a08719106bd5e8de4fba4049f3724842d479a7965d52a9e9", 0xc7}], 0x9, &(0x7f0000003800)=[{0xb0, 0x3a, 0x9, "b5d9e2e46b93e9c457bce8353992fb3b085f7718bf03216becd17eccdf35a08a03a0259de623e73b937d248edf6490d8d9f56c7f9842091fba6e89809531d89c2bdd0675c8d4eaaddd4833f78d2120fbc358194db6a1c4b6430d05cae80f0d366e918f34dd68ad38098be538968ceded7ba35c2f28c41b7bd7e69815fb765ae126d61ca9f98770e7ac9966ee27eee2e7a3703fe63e1e1c64a6588dcc13851371"}, {0xf8, 0x111, 0x5, "cbb9eb52a4b68fb4153cf7df57e78f5b18b8e4d55795d2f2dd51ef7b4c6d3a0a377666496a39832496156df5239144e62c533eecb426cb2e70be004e635739ed6219f6c9d50313169a1bd4b24aa9ece29fca6541d704cce8b90bc7c23fd95571b36523fd5fd911a2b0a7b7265c3f8545c1b323012be6f3b089a3441cf449e14779cf5d1f2aa61ba54b1eeff1e7e413832f9dc868410cea1c87d79f2cc1226e3b4ad7edc7dcf1b92c93736f1337ad180ae2c04a40e60971829ce71e5acab86fa73ab34cfa6c32e580babe0b57b1b916cc7df4b290e86a0ec22a16d37a3e7032a7aed847d30229"}, {0x70, 0x88, 0x1, "7f9d861436f7c00568c3b666a9bb56864e05eac4981dadff94168122d13b313ea7fceda9d36dadc23be572e2b264bbeb095ff818473d5526579278e234f4f4cd2ae6632d1ac8d832dd309496cf9a6847b33e3ee3c30702b579ff"}, {0xa0, 0x26, 0x326, "ef95452e4a84361781eac47681658f49974271ac4ca5a3e94d3f0954d7084dd12323ab53436ef97417211115dc896909e801e86d8aff8ffaf5055e39e55a2c5658a9455ec593b5d4179a33ba42d19f4b4d883e766891ca9b10ff0759d88e6900401b53457cef69e89b5bea40c5b78aee741ae8ed846fd20a1da1e1f39345363a5a5c584369c15f7a41c258dd"}, {0x40, 0x118, 0x4, "06fe81a94d345b889ff7510dbfa610f950da521f657b1cedc95b503614f7fa07ae3d33717f2f5bdac617763e89"}], 0x2f8}, 0x8040) r11 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x0, @perf_bp={0x0, 0x6}, 0x110104, 0x32, 0x0, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ec", 0x1}, {0x0}], 0x308}, 0x0) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000703600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000045000000950000000000000032254e1ff7bda23cda5ac026f3f0dcb35574008deb444db2abb37292d237707e09dcf32ed6f1091ef842f27e2d6b5e0c998a140ec6768079c835377417af9ab39313261d211dfd93b0715529381163aa32628817056434599d28f76e7335a41cbef698db90a3aa1db6c26aa1d1cd7adc81a2366ccf904498d721f68aaa09"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f00000004c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x0, 0x0, 0x2, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x8f, &(0x7f0000000240)=""/143, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) 3.708850156s ago: executing program 1 (id=3273): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', r2, 0x4000, r0}, 0x18) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0)={0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000100)=@generic={0x11, "ce7ef4ea1355d8f545aee42b5acbdc9524fe2ec176c1153c01d99771bfd897cecb8cbe523162dabf06f016c2c808a8237222627b000414a4241b312255f0702bf805b88ee4caf25bead968f8082b7f76b2960271fd44f39f8506397716f7ceca7765fe48d9d52ad2458ef04c80b4875d69b6e2a62f2ca2799e1eb76bfa8c"}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c236205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000a00)="84000000008000f5ffffffffff0e1d8e1e9b5e7c336ffd4504025b3c75366355c99f1fd0b8eb920600000045fdff462115ca4e6e882594285527d6a8a3f47e1a8cc91ab69076c7", 0x47}], 0x4}, 0x200400c4) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x64b}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1952], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x37, &(0x7f00000009c0), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x6, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x848, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x4, @perf_config_ext={0x4, 0x3}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f0000000080)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a3, &(0x7f0000000080)) 3.567116776s ago: executing program 0 (id=3274): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x4000000000000}, 0x4821, 0x3, 0x0, 0x0, 0xb774, 0x0, 0x2000, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r8, 0x3}, 0xc) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbefdac85f4879fab8a94f30ecc6c6", 0xe5}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.470332332s ago: executing program 2 (id=3275): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800010000000000000016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce3b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800010000000000000016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce3b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xf4, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r0, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000009"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000040000000600000009"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x6, r5, 0x4}, 0x38) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8932, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8932, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x36, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff800}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x6, 0x25, &(0x7f0000000340)=""/37, 0x1e00, 0x4, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x10, 0xfff, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[r0, r4, r5, r1, r1, r1], &(0x7f0000000880)=[{0x1, 0x2, 0xf, 0xa}, {0x0, 0x5, 0x2, 0x6}], 0x10, 0x2}, 0x94) 3.441947625s ago: executing program 1 (id=3276): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x100080, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x6, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x8000000001) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) perf_event_open(&(0x7f0000000400)={0x6, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000600), 0x12) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x20, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x80000000, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.07118804s ago: executing program 4 (id=3277): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) (async) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) (async) close(r1) socket$kcm(0xa, 0x1, 0x0) (async) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000001740)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, 0x0}, 0x20000001) (async) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000001740)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, 0x0}, 0x20000001) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f00000000c0)=r1}, 0x20) r4 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x80044942, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000006dec92d2ab7e102919c7b7ed6553cb6a000000001700"/36, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000006dec92d2ab7e102919c7b7ed6553cb6a000000001700"/36, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x1018, &(0x7f0000004b00)=""/4120, 0x41100, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000008510"], 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000008510"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000c0000008500000067ad2f57acc664267b10f59100000000", @ANYRES32, @ANYBLOB="0000000000000000851000000000000085100000faffffff9500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) (async) r9 = openat$cgroup_procs(r8, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000180), 0x12) r10 = openat$cgroup_int(r8, &(0x7f0000000080)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f00000003c0)=0x1002, 0x12) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0xa, 0x3, 0x73) (async) r11 = socket$kcm(0xa, 0x3, 0x73) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x4) 3.06851015s ago: executing program 2 (id=3278): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000580)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="00b8f7a638fdc80c9d7001590300000000000900000000000000ff801800000000000000000000a3c900000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x41000}, 0x94) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, 0x0, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) r5 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) 2.873841023s ago: executing program 0 (id=3279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600f0ff6b0000007d9800000000000056880000000000008500000005000f00b70000000000000295"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @random="ff00"}) 2.722008363s ago: executing program 2 (id=3280): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000002000000"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000070000004000000040000000410000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x0, r2, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x9, 0x8}], 0x10, 0x7}, 0x94) 2.631432329s ago: executing program 1 (id=3281): recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000000)=@hci, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000700)=""/193, 0xc1}, {&(0x7f0000000180)=""/124, 0x7c}, {&(0x7f0000000800)=""/202, 0xca}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000500)=""/155, 0x9b}], 0x8, &(0x7f00000000c0)=""/105, 0x69}, 0x40002000) 2.587025423s ago: executing program 0 (id=3282): perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff2a1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x2, &(0x7f0000000000)=@raw=[@generic={0x5, 0x8, 0x0, 0x9, 0x3b7e000}, @jmp={0x5, 0x1, 0x1, 0x5, 0x0, 0x100, 0xfffffffffffffff0}], &(0x7f00000002c0)='syzkaller\x00', 0x80000001, 0x1000, &(0x7f0000000e40)=""/4096, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001e80)={0x5, 0xf, 0x8, 0xfffffff7}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001ec0)=[{0x3, 0x5, 0x7, 0x5}, {0x4, 0x4, 0x7, 0xb}, {0x3, 0x1, 0x4, 0x2}, {0x1, 0x4, 0x7, 0x6}, {0x5, 0x2, 0x5, 0x1}, {0x3, 0x1, 0xc, 0x9}, {0x1, 0x4, 0x1, 0x2}], 0x10, 0x101}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002000)={r1, 0x1}, 0xc) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000004300)=""/4045, 0xfcd}, {&(0x7f00000007c0)=""/208, 0xd0}, {0x0, 0x20}, {&(0x7f00000005c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/198, 0xc6}], 0x6}, 0x40012100) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff78) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db9638edbc"}) (async) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x10000000, 0x0, 0x4}, {0x2, 0xfffffffc, 0x0, 0x1}]}, 0x94) (async) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4) (async) write$cgroup_devices(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1e030800dd5eaf3ef55044"], 0xffdd) (async) perf_event_open(&(0x7f00000001c0)={0x7, 0x80, 0x9, 0x8, 0x0, 0xf, 0x0, 0x6, 0x4000, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x80000001, 0x2}, 0xa400, 0x80000001, 0x1, 0x9, 0xfffffffffffffff8, 0x3fc4, 0x7, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, r2, 0x8) 2.446947412s ago: executing program 4 (id=3283): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x7}, 0x10000, 0x0, 0x0, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, r1}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}], 0xc0}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[{0x10, 0x10a, 0x9}, {0x10, 0x84, 0x1}], 0x20}, 0x4000095) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x1e, 0x8, 0xe, 0x7, 0x0, 0x5, 0x20200, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000005c0), 0x5}, 0x8420, 0x4, 0xffffffaf, 0x8, 0xfc, 0x6, 0x3, 0x0, 0x1f8d, 0x0, 0x2}, r5, 0xa, r0, 0x2) 2.323057881s ago: executing program 1 (id=3284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={r2, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000001858ed3102ed9b3cab8000fcd2452366f537b4ad27a81c0000180100000800000001000000000000"], &(0x7f0000000cc0)=""/111, 0x38, 0x6f}, 0x28) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000dc0)={0xffffffffffffffff, 0x7f, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x18, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000ac0)='GPL\x00', 0x80000001, 0x99, &(0x7f0000000b00)=""/153, 0x40f00, 0x48, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x1, 0x8, 0x3, 0x751}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000e00)=[r2, r2, r2, r5, r2, r0], &(0x7f0000000e40)=[{0x2, 0x4, 0xa}, {0x0, 0x4, 0x3, 0x3}, {0x3, 0x3, 0x4, 0x7}, {0x5, 0x4, 0xc, 0x1}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f00000005c0)=""/24, 0x18, 0x0, &(0x7f0000000600)=""/216, 0xd8}}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001800000000000003000000025110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001858000008000000000000000000000018660000010000000000000000800000b530fefff0ffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b0000008500000006000000bf91000000000000b7020000010000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x3ff, 0x8b, &(0x7f0000000140)=""/139, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x1, 0x4a, 0x3}, 0x10, 0x23971, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x16, 0x0, 0xfffffffa, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x11, &(0x7f0000000640)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0x4, 0x2, 0x8, 0xd03, 0x7fffffff}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xd, 0x0, 0x400}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000007c0)=[{0x4, 0x4, 0x3, 0x6}, {0x5, 0x4, 0xf, 0x5}, {0x2, 0x1, 0x9, 0x6}, {0x0, 0x1, 0x0, 0xc}, {0x4, 0x3, 0x5, 0x7}], 0x10, 0x9c1c}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="639101c855b98600000000040000", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000400)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x40) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xe, &(0x7f0000000380)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x94}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @exit], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x81, &(0x7f0000000440)=""/129, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xf, 0x1, 0x5}, 0x10, r7, r1, 0x2, &(0x7f00000007c0)=[r2], &(0x7f0000000800)=[{0x1, 0x1, 0xc, 0x3}, {0x3, 0x3, 0xa, 0xb}], 0x10, 0x30}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f0000000040)=0x20000, &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000100000000000007112fcff000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.156164142s ago: executing program 0 (id=3285): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae0000089500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000700)}, 0x10) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r2) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/203, 0xcb}, {&(0x7f00000003c0)=""/120, 0x78}], 0x2}, 0x0) r3 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x80044944, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe5d8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x0, 0xc, 0xb, 0x18406e88a3ee9a99, 0xffffffffffffffff, 0x8}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x66a543a30c39cdf, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0x7, 0x8, 0x3}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x1, 0x3, 0x7, 0x3}, {0x1, 0x5, 0xe}], 0x10, 0xeaf1}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000011000000", @ANYRES32, @ANYBLOB="0000100000000000f14e80030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x2e, 0x0, &(0x7f0000000040)="566a8692b7316c06e224da18eb9fa816d00d6869b2a0fd92f5ac0276c9d1ff553c5a90356852b55364ed092dd1b6", 0x0, 0x1ff, 0x0, 0x7a, 0x0, &(0x7f00000000c0)="fc1b563bb8aae5bbb59b569ef513573454830b07af59b77cf114034d4bb1b516c7b6506b8395b41e0b70599055e23706df2c0aa446c1338f89862a8e83c3cf1d179a7f11cdc589090a7161fee106e914755586f73381baeaa00d2ebc57348cc087f22f30dc1c37b59b773265cdc63f4bbe5896dd6c4436bbfc97", 0x0, 0x2, 0x0, 0x3}, 0x50) 1.60570744s ago: executing program 2 (id=3286): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="fc", 0x1}], 0x1}, 0x20040d4) sendmsg$kcm(r0, &(0x7f00000062c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1}, 0x4004045) close(r0) 1.280756492s ago: executing program 2 (id=3287): r0 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(r0, 0x0, 0x0) close(r0) (async) r1 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f00000002c0), 0x4) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x8) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0xb101, 0x0) socket$kcm(0x2a, 0x2, 0x0) (async, rerun: 64) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x8, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000008520000002000000c775f4ffffffffff99a3c718dfa31fe34561ece24d039e9a38a6bf5159647d8e2ddb9ba5f8a48f0e152caf7c60c17a01b4b6e0445d58d0ab1b69050c0d4469f9d8b2bc29ba4e1e048d864dff2e0df4a0e9d426eb8d6818acd078"], &(0x7f0000001800)='GPL\x00', 0x9, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000017c0)={0x2, 0xb, 0x1000, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001800), &(0x7f0000001840)=[{0x5, 0x5, 0xd, 0x4}], 0x10, 0x2}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x10000, 0x8}, 0xc) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4}, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x800, 0x0, 0x0, 0x9, 0x4000000000000000, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) close(r8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@map=r4, 0x20, 0x1, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]}, 0x40) 1.171069379s ago: executing program 4 (id=3288): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r0, &(0x7f0000000380)}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x6400480c) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r8) perf_event_open$cgroup(&(0x7f0000000780)={0x3, 0x80, 0x4, 0xaa, 0x9, 0x40, 0x0, 0xa, 0x200, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x7fff, 0x6, 0x2, 0x5, 0x7, 0x6, 0x0, 0x1427, 0x0, 0x35e}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) 1.095921684s ago: executing program 2 (id=3289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x5, 0x3, &(0x7f0000001380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x101400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001340)={'wlan1\x00', 0x1}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r3, r0, 0x7}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000010000511d25a80648c63940d0324fc60040035400c0084e956b900203715be370c040180100045000000", 0x2e}, {&(0x7f00000001c0)="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", 0x5ff}], 0x2}, 0x8000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e3deb150a6a97a73b168ccd8f7872"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000100)=r4, 0x120) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000cc0)=@ll={0x11, 0x10, r6, 0x1, 0x35, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000d40)="a8b9ff55eef846385959823a05a12d6e27eb1b74529e1cb334d7fd7ab88206a810f7834b4769907116b9ee81cbd0e4b2f284596efcb21bac38024e5c65d4b62863ce13d8d832e2895e36e571e1401ce67646ae849f9cf64b374906b8a1864c596a893ebd4e166d76cf74b7329cf1ca54cb9ce7b9ea188083fbf4303202ac4974bbc870e1", 0x84}, {&(0x7f0000000e00)="649f516b1acfc2e967abbe0149f1dff22af0305409fb386d278127cd312726ad9f0dba95fbbed769deea53d83ea5", 0x2e}, {&(0x7f0000000e40)="7013f4b67915947b33e57b0bc6f5f6fb4f8854cd7d68c096f543c0469bab7bf0335e0137eecc6c22a5b178f159b97b511a0580e378ea1c", 0x37}, {&(0x7f0000000e80)="5570c1c7e00d0dbc03a360900fac19e22d2a6fadfcde7b98fb0a46bfa5409691ff48ee812525c3ba841a0d0583e3dd36ae22cacd1d8d0697f7176b7216b6666ce03763f059ff3ce37293", 0x4a}, {&(0x7f0000000f00)="2d9539da5f7a143384bfb80d264f76461023105daf95e57d37ed6f8c43f21b26d6ebb8be515d378347d5f07efa1d87339d90669b77f9b4f7b11ad5a52b80e588ef79ce33f90075cab19c6a4e5f84c71321d571f9f9e724b7f21577702a65", 0x5e}], 0x5}, 0x4000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r3, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r10) ioctl$SIOCSIFHWADDR(r10, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ac0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x9, 0x25, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x91}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, @generic={0x4, 0x4, 0x4, 0x7, 0x9}, @map_val={0x18, 0x1, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x3}, @generic={0x6, 0x0, 0x1, 0x1, 0xc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1000}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000940)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, @cgroup_sock=0xd, r10, 0x8, &(0x7f0000000a40)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0xa, 0x7, 0xfffffff3}, 0x10, 0xffffffffffffffff, r11, 0x0, &(0x7f0000000bc0)=[r3, r3, r3, r3, r3, r3, r3, r12], 0x0, 0x10, 0x8}, 0x94) 1.067800766s ago: executing program 1 (id=3290): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x3e}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000578dd1ef5d6f9e854ecda8fe09f96b5400000000000000f4ffff"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000640)="c4d80fec6b82a47d7f604e3811f5", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r2, 0xe0, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000980)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d00)={{r1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xb, 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0210000b98158d66a2d16be93cda4e1fd36f5db1faffffff"], &(0x7f00000004c0)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x1f, r0, 0x8, &(0x7f0000000500)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x10, 0x5, 0x2}, 0x10, r5, r3, 0x5, &(0x7f0000001d40)=[r6, r1, 0xffffffffffffffff, r1, r1, r1, r1, r1, r1], &(0x7f0000001d80)=[{0x3, 0x1, 0x7, 0xa}, {0x3, 0x5, 0xd, 0xc}, {0x1, 0x1, 0xa, 0x9}, {0x4, 0x4, 0xc, 0x6}, {0x4, 0x2, 0x2, 0x3}], 0x10, 0x8}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close(0x3) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r8, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=' ', 0x1}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r1}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/686, @ANYBLOB="204e6d72bd7f9c61fc8eddc6cbc4627aa46b30b3a3a7033616369897153151f7ad5b62c19aaf2ec144417df49b623ec696c3ce51cf09142c446addb8e350fa283e64781b44a90621d8c4de3cd21f45afc0b6f827f7d89348f682ba44b172d4cd965545fd4f495c1016fe9321c48f5e12f4f8322ea13fc2127343ea639770be66694ae073dfb8eadbe3c846fa9c46f800427ac13aa9ed7f6ddf75b249879a586766cf6875cc2334db3fce379e52de3f35718f343b031364d5ce543810f29142"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000340)={0x4}, 0x10, r5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r10, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="22a6d4ec57c4a438895982476fb26dd5c7c7253f6c76762947d75610bee116094684a7841306eb4bfb52e8f6d6d65a8c12d89045ff1e2b11d9cc72c5baf51833f9cd770a0e867c3b76c82131c60228bb257675e34d63ed9660f6a93d3d46f569dee22bb06da58d0e4404d9c2d4d0f770cc41e442ef5ad9a06ec95c143420d070eb0d3694edb899607fe91896eb6a1e3ac021b50a31a2fba55601a390b907c3e8ec6bf995eb6bfebc81b71e8803acf1da9f1c6c261998a8019c852b9f64f2f2444286c77dcb", 0xc5}, {&(0x7f00000004c0)="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", 0x10e}, {&(0x7f0000000280)="45aa8a91b4edaaa2a60463432fc46487368733c31fefd053529d9b897cedfd904a3e438d1d815c5fb14473ed40e76bec73c1ac51ce6e5b726f125bc30f444766ead388da55f36a51c1b211a0ec3b397228167181a9edbd585dd68ac14f44de171c1d075859bd3fd72a8b1e5ca69ef6ef43165235b8e7533dcb147fc3bc3026b9663442ac302276048af4a231b97b82426e29cc00c79527ae79", 0x99}, {&(0x7f0000000380)="f7c46622d27de670418e4c9483bafed7714d632b3eea46c8341f49b469b216bd3ab3abe744291cc91f7a0bd05e348469b5991e38420023bc6ea66492d0e54eba45e06aac5897627d58e30629b4e631f43f28abe0f565c6542ac38cfdc2ff2ec7a0da4175db9f35e6c801d39f58b833ea5131160fdb3504643222b707b6db2433b31bd29b1c2340cd249fd9e8e93e08b9c33c0eb29b7be03e337382ffef6a4b37d62c5365815f2daa0d50257afb73be4c9eae61b38c036c30dbf27896f026a404e52fc100eff30e697969f76471", 0xcd}], 0x4, 0x0, 0x0, 0x39c}, 0x10) 1.063356177s ago: executing program 0 (id=3291): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000180)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="cb6c", 0x2}], 0x1}, 0x40000) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 115.006492ms ago: executing program 4 (id=3292): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r0, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x23, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x7}, @typedef={0x8, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000580)=""/109, 0x3a, 0x6d, 0x1, 0x6}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x1, 0x0}, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x20) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x37a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0xffff, 0x8, 0x5, 0x1230, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0xa}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{0x0}, {&(0x7f00000003c0)="5c6817db84aafc4ba93b3b7b773c1f5c014e2a4405abce2e2192542afa9748dcd0a777a42e01d2f6290d970e2f9a1d422ca71d4207e563f192538f527923b0f362103e5bbeda2dca0d9d2b5e5238329691753f1860286f1aaa0786be123a788ba8d0e1205af7751df76effba5cb644966e7b7566d2960bab4c5b", 0x7a}, {&(0x7f0000000740)="9eb8a2c0e241fb0402ac85631cf8ff8e5a36a410dc8d04ecbcf2464879d3bd8110c8472dd79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed4ca90be62fc749", 0x45}], 0x3, &(0x7f0000000d80)=[{0x10, 0x29, 0x4}], 0x10}, 0x8080) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300"], 0xfe1b) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x9, 0x0, 0x0, 0x9, 0x41, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92", 0xd1}], 0x1}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e14060200000000", 0x20}, {0x0}], 0x2}, 0x40) syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@jmp={0x5, 0x1, 0x1, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xb5, &(0x7f0000000180)=""/181, 0x41100, 0x44, '\x00', r1, 0x1b, r2, 0x8, &(0x7f0000000640)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x0, 0x3, 0x4}, 0x10, r3, 0x0, 0x9, &(0x7f0000000800)=[r4, 0xffffffffffffffff, r6, r7], &(0x7f0000000840)=[{0x1, 0x5, 0x7, 0xa}, {0x3, 0x5, 0xe, 0xb}, {0x5, 0x3, 0x9}, {0x5, 0x1, 0xb, 0x1}, {0x2, 0x2, 0x0, 0x3}, {0x2, 0x5, 0x8, 0x5}, {0x4, 0x5, 0xd, 0x4}, {0x2, 0x3, 0x3, 0x3}, {0x3, 0x5, 0x5, 0xb}], 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x13, 0x80000001, 0x1, 0x7, 0x208, r5, 0x8, '\x00', 0x0, r2, 0x4, 0x4}, 0x50) 49.091886ms ago: executing program 0 (id=3293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@o_path={&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) socketpair(0x22, 0x3, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000200)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r7, 0x400454ce, 0x30a) socket$kcm(0x29, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x12, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x81, 0xc, 0x0, 0xb0, 0x0, 0x0, 0x20010, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x2048, 0xca, 0x0, 0x7, 0x800, 0x9, 0x6, 0x0, 0x0, 0x0, 0x4a07ba30}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socket$kcm(0x2, 0x5, 0x84) 0s ago: executing program 1 (id=3294): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0xff, 0x89, 0xe3, 0x0, 0x80000000002, 0x4100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x7, 0x200}, 0x8012, 0xc764, 0xa, 0x0, 0x7, 0xffffffff, 0x10, 0x0, 0x13, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) recvmsg$unix(r1, &(0x7f00000019c0)={&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f00000004c0)=""/111, 0x6f}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/167, 0xa7}, {&(0x7f0000001740)=""/230, 0xe6}, {&(0x7f0000001840)}, {&(0x7f0000001880)=""/147, 0x93}], 0x8}, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8}, {}, {0x2}, {0x6, 0x0, 0xfe, 0x10000000}]}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb440008", 0x15}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000300)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000140)="8e7d9b8a610db26e5c3603c69809bf7596f83d45bcae99af92b2a64a7f1d5abfba469c4d47ac74f180d8f678357128eb1cbbaea39f1a6a46d02bc214634053f3d0898d599ca590625e16a58f65cf46c75b0b6c8d841140623983e3b88907aa2a6c69398294d8f0182d70efd1661db3de94e7173889f1a7a86760", 0x7a}, {&(0x7f00000001c0)="2c87711624aff28c819da813f26fec649b28cf2c45f3263f2b76be05480d50f3290391174a8aa09e8ccc3e8f715d40d6dd3435a946d7a53931999c", 0x3b}, {&(0x7f0000000200)="783fa1daca8dcc9cc016f51724ffde894fcfc86fa4fbc23b66e260ab2fb297dff55634deb90613a5bc67ad1efa6ed16840ff0a979ab406b145c90d486ecbf03727e42b205be2acb814a42fea70675d31e8db3f0e268d71b51dc749f2da79eb2f0669fcc4f803c8bc2da73e9fbc", 0x6d}], 0x3, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee00}}}], 0x20, 0x14048801}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) kernel console output (not intermixed with test programs): ing attributes in process `syz.4.1665'. [ 406.226614][T10627] netlink: 'syz.3.1668': attribute type 10 has an invalid length. [ 406.265583][T10627] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1668'. [ 406.303723][T10617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.352516][T10632] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.1670'. [ 406.942523][T10654] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1675'. [ 407.923197][T10674] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1682'. [ 407.979983][T10674] device hsr_slave_0 left promiscuous mode [ 408.109722][T10674] device hsr_slave_1 left promiscuous mode [ 409.654517][T10704] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1687'. [ 409.730881][T10710] netlink: 'syz.2.1689': attribute type 21 has an invalid length. [ 409.756454][T10710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1689'. [ 410.147068][T10733] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1696'. [ 410.191443][T10733] netlink: 'syz.3.1696': attribute type 10 has an invalid length. [ 410.765579][T10753] netlink: 'syz.0.1699': attribute type 10 has an invalid length. [ 411.004855][T10763] netlink: 'syz.4.1703': attribute type 29 has an invalid length. [ 411.036686][T10763] netlink: 'syz.4.1703': attribute type 29 has an invalid length. [ 411.053730][T10764] netlink: 'syz.2.1704': attribute type 2 has an invalid length. [ 411.071707][T10757] netlink: 'syz.4.1703': attribute type 29 has an invalid length. [ 411.120121][T10765] netlink: 'syz.2.1704': attribute type 33 has an invalid length. [ 411.176213][T10765] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1704'. [ 411.251157][T10764] device 0 entered promiscuous mode [ 411.277333][T10757] netlink: 'syz.4.1703': attribute type 29 has an invalid length. [ 411.454666][T10766] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1702'. [ 411.695547][T10785] netlink: 'syz.0.1709': attribute type 29 has an invalid length. [ 411.746890][T10786] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1708'. [ 411.792617][T10778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.199480][T10796] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1713'. [ 412.218419][T10798] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1711'. [ 412.558409][T10805] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1716'. [ 412.591928][T10807] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1717'. [ 412.636453][T10807] openvswitch: netlink: Flow key attr not present in new flow. [ 413.154018][T10813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.162178][T10813] IPv6: NLM_F_CREATE should be set when creating new route [ 413.170699][T10813] IPv6: NLM_F_CREATE should be set when creating new route [ 413.178664][T10813] IPv6: NLM_F_CREATE should be set when creating new route [ 413.347601][T10827] device syzkaller0 entered promiscuous mode [ 416.199241][T10844] validate_nla: 11 callbacks suppressed [ 416.199262][T10844] netlink: 'syz.0.1727': attribute type 21 has an invalid length. [ 416.213001][T10844] netlink: 'syz.0.1727': attribute type 20 has an invalid length. [ 416.234146][T10855] netlink: 'syz.4.1730': attribute type 17 has an invalid length. [ 416.248216][T10855] __nla_validate_parse: 3 callbacks suppressed [ 416.248235][T10855] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1730'. [ 416.268784][T10855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.568779][T10859] netlink: 'syz.3.1731': attribute type 10 has an invalid length. [ 416.872932][T10875] netlink: 'syz.0.1736': attribute type 3 has an invalid length. [ 416.902331][T10875] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1736'. [ 416.914736][T10875] netlink: 'syz.0.1736': attribute type 21 has an invalid length. [ 417.425941][T10892] netlink: 'syz.2.1742': attribute type 2 has an invalid length. [ 417.631676][T10893] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1742'. [ 417.736288][T10893] netlink: zone id is out of range [ 417.745504][T10893] netlink: zone id is out of range [ 417.748385][T10892] device 1 entered promiscuous mode [ 417.776392][T10893] netlink: zone id is out of range [ 417.785796][T10893] netlink: zone id is out of range [ 417.794134][T10893] netlink: zone id is out of range [ 417.805564][T10893] netlink: zone id is out of range [ 417.814496][T10893] netlink: zone id is out of range [ 417.822099][T10893] netlink: zone id is out of range [ 417.834822][T10893] netlink: zone id is out of range [ 417.841529][T10893] netlink: zone id is out of range [ 421.443090][T10941] netlink: 'syz.0.1754': attribute type 3 has an invalid length. [ 421.469378][T10941] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1754'. [ 421.595474][ T4271] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 421.625489][T10950] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1755'. [ 422.075581][T10970] bond0: (slave bridge0): Error: Slave device does not support XDP [ 422.869949][T10977] netlink: 'syz.1.1766': attribute type 1 has an invalid length. [ 422.956255][T10977] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1766'. [ 423.078673][T10980] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1767'. [ 423.365661][T10985] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1769'. [ 424.687815][T11014] netlink: 'syz.2.1775': attribute type 2 has an invalid length. [ 425.269465][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1783'. [ 425.837177][T11053] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1785'. [ 426.077406][T11066] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1789'. [ 426.122660][T11069] netlink: 'syz.1.1790': attribute type 29 has an invalid length. [ 426.188348][T11069] netlink: 'syz.1.1790': attribute type 29 has an invalid length. [ 426.211462][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'. [ 426.239334][T11073] tipc: Started in network mode [ 426.244995][T11073] tipc: Node identity 9215a268, cluster identity 4711 [ 426.273189][T11073] tipc: Node number set to 2450891368 [ 426.395242][T11084] netlink: 'syz.3.1795': attribute type 46 has an invalid length. [ 426.435968][T11084] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1795'. [ 426.633446][T11097] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1799'. [ 426.676231][T11095] netlink: 'syz.1.1796': attribute type 27 has an invalid length. [ 426.684150][T11095] netlink: 'syz.1.1796': attribute type 3 has an invalid length. [ 426.715913][T11095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1796'. [ 427.149039][T11113] netlink: 'syz.4.1804': attribute type 21 has an invalid length. [ 427.462714][T11125] netlink: 'syz.3.1807': attribute type 21 has an invalid length. [ 427.523353][T11125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1807'. [ 428.039656][T11147] netlink: 'syz.0.1813': attribute type 19 has an invalid length. [ 428.111414][T11147] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1813'. [ 428.205103][T11146] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1811'. [ 428.795207][T11171] netlink: 'syz.2.1815': attribute type 3 has an invalid length. [ 428.813647][T11171] netlink: 'syz.2.1815': attribute type 1 has an invalid length. [ 428.822292][T11171] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1815'. [ 429.302055][T11183] syz.0.1819[11183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.302272][T11183] syz.0.1819[11183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 429.726766][T11193] netlink: 'syz.4.1821': attribute type 21 has an invalid length. [ 429.788099][T11193] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1821'. [ 429.858216][T11193] netlink: 'syz.4.1821': attribute type 4 has an invalid length. [ 429.870455][T11193] netlink: 'syz.4.1821': attribute type 5 has an invalid length. [ 429.908598][T11193] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1821'. [ 431.234899][T11246] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1838'. [ 431.817845][T11265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1845'. [ 432.585974][ T4271] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 432.926005][T11285] validate_nla: 1 callbacks suppressed [ 432.926126][T11285] netlink: 'syz.1.1846': attribute type 39 has an invalid length. [ 433.557204][T11303] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1855'. [ 433.581304][T11297] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1854'. [ 433.673871][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 434.033606][T11313] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1857'. [ 434.191779][T11313] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 434.218876][T11313] CPU: 1 PID: 11313 Comm: syz.3.1857 Not tainted syzkaller #0 [ 434.226491][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 434.236656][T11313] Call Trace: [ 434.240071][T11313] [ 434.243052][T11313] dump_stack_lvl+0x188/0x24e [ 434.247881][T11313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 434.254113][T11313] ? show_regs_print_info+0x12/0x12 [ 434.259375][T11313] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 434.265609][T11313] sysfs_warn_dup+0x8a/0xa0 [ 434.270173][T11313] sysfs_do_create_link_sd+0xc0/0x110 [ 434.275645][T11313] device_add+0x7ed/0xfb0 [ 434.280050][T11313] wiphy_register+0x1d9f/0x2ac0 [ 434.285069][T11313] ? cfg80211_event_work+0x40/0x40 [ 434.290246][T11313] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 434.296385][T11313] ieee80211_register_hw+0x2d00/0x39f0 [ 434.302036][T11313] ? lockdep_hardirqs_on+0x94/0x140 [ 434.307298][T11313] ? ieee80211_register_hw+0xf11/0x39f0 [ 434.312909][T11313] ? ieee80211_register_hw+0xf11/0x39f0 [ 434.318613][T11313] ? ieee80211_tasklet_handler+0x20/0x20 [ 434.324313][T11313] ? memset+0x1e/0x40 [ 434.328344][T11313] ? __hrtimer_init+0x186/0x270 [ 434.333265][T11313] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 434.339168][T11313] hwsim_new_radio_nl+0xafa/0xce0 [ 434.344274][T11313] genl_family_rcv_msg_doit+0x22a/0x330 [ 434.349884][T11313] ? end_current_label_crit_section+0x170/0x170 [ 434.356197][T11313] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 434.362151][T11313] ? bpf_lsm_capable+0x5/0x10 [ 434.366916][T11313] ? security_capable+0x85/0xb0 [ 434.371835][T11313] genl_rcv_msg+0x604/0x790 [ 434.376502][T11313] ? genl_bind+0x360/0x360 [ 434.380959][T11313] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 434.387365][T11313] netlink_rcv_skb+0x1fb/0x450 [ 434.392195][T11313] ? genl_bind+0x360/0x360 [ 434.396665][T11313] ? netlink_ack+0x1170/0x1170 [ 434.401499][T11313] ? lockdep_hardirqs_on+0x94/0x140 [ 434.406790][T11313] ? down_read+0x1a8/0x2d0 [ 434.411406][T11313] genl_rcv+0x24/0x40 [ 434.415457][T11313] netlink_unicast+0x74d/0x8d0 [ 434.420298][T11313] netlink_sendmsg+0x8ad/0xbd0 [ 434.425135][T11313] ? netlink_getsockopt+0x550/0x550 [ 434.430400][T11313] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 434.435775][T11313] ? security_socket_sendmsg+0x7c/0xa0 [ 434.441386][T11313] ? netlink_getsockopt+0x550/0x550 [ 434.446727][T11313] ____sys_sendmsg+0x5be/0x970 [ 434.451556][T11313] ? __sys_sendmsg_sock+0x30/0x30 [ 434.456642][T11313] ? __import_iovec+0x315/0x500 [ 434.461562][T11313] ? import_iovec+0x6f/0xa0 [ 434.466115][T11313] ___sys_sendmsg+0x2a2/0x360 [ 434.470854][T11313] ? try_to_wake_up+0x6ae/0x1080 [ 434.475869][T11313] ? __sys_sendmsg+0x290/0x290 [ 434.480803][T11313] ? ktime_get_real_ts64+0x440/0x440 [ 434.486166][T11313] __se_sys_sendmsg+0x1bb/0x2a0 [ 434.491079][T11313] ? __x64_sys_sendmsg+0x80/0x80 [ 434.496084][T11313] ? lockdep_hardirqs_on+0x94/0x140 [ 434.501334][T11313] do_syscall_64+0x4c/0xa0 [ 434.505937][T11313] ? clear_bhb_loop+0x60/0xb0 [ 434.510654][T11313] ? clear_bhb_loop+0x60/0xb0 [ 434.515379][T11313] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.521325][T11313] RIP: 0033:0x7ff8dbf9c819 [ 434.525783][T11313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.545537][T11313] RSP: 002b:00007ff8dcd79028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.554031][T11313] RAX: ffffffffffffffda RBX: 00007ff8dc215fa0 RCX: 00007ff8dbf9c819 [ 434.562058][T11313] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 434.570077][T11313] RBP: 00007ff8dc032c91 R08: 0000000000000000 R09: 0000000000000000 [ 434.578101][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.586118][T11313] R13: 00007ff8dc216038 R14: 00007ff8dc215fa0 R15: 00007fff119f62a8 [ 434.594583][T11313] [ 435.288838][T11332] netlink: 'syz.0.1862': attribute type 3 has an invalid length. [ 435.340512][T11332] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 435.387263][T11332] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.1862'. [ 436.021513][T11347] sock: sock_timestamping_bind_phc: sock not bind to device [ 436.249264][T11351] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1868'. [ 436.303601][T11351] device hsr_slave_0 left promiscuous mode [ 436.372819][T11351] device hsr_slave_1 left promiscuous mode [ 436.921206][T11352] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1868'. [ 437.439211][T11378] netlink: 'syz.4.1874': attribute type 28 has an invalid length. [ 437.543168][T11378] netlink: 'syz.4.1874': attribute type 29 has an invalid length. [ 437.690324][T11390] netlink: 'syz.4.1874': attribute type 10 has an invalid length. [ 437.831822][T11378] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1874'. [ 437.881348][T11390] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1874'. [ 438.485530][T11405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1882'. [ 438.601703][T11405] netlink: 'syz.1.1882': attribute type 12 has an invalid length. [ 438.637220][T11405] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1882'. [ 438.684709][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.692334][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.007306][T11424] netlink: 'syz.2.1887': attribute type 21 has an invalid length. [ 439.457483][T11437] netlink: 'syz.2.1890': attribute type 10 has an invalid length. [ 439.598428][T11441] pimreg0: tun_chr_ioctl cmd 35111 [ 439.706064][T11446] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1892'. [ 439.726744][T11448] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 439.808820][T11448] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1889'. [ 440.188360][T11453] netlink: 'syz.2.1893': attribute type 21 has an invalid length. [ 440.272526][T11453] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1893'. [ 440.389741][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.396249][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.156163][T11488] netlink: 'syz.4.1902': attribute type 10 has an invalid length. [ 444.224083][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.304728][T11488] device bridge_slave_1 left promiscuous mode [ 444.340227][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.020469][T11515] netlink: 'syz.2.1908': attribute type 28 has an invalid length. [ 445.086136][T11515] netlink: 'syz.2.1908': attribute type 29 has an invalid length. [ 445.115881][T11515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1908'. [ 445.191532][T11515] netlink: 'syz.2.1908': attribute type 10 has an invalid length. [ 445.204007][T11515] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1908'. [ 447.087899][T11554] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1920'. [ 448.127522][T11569] device bridge_slave_1 left promiscuous mode [ 448.144800][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.212547][T11569] device bridge_slave_0 left promiscuous mode [ 448.231953][T11569] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.397657][T11569] bond0: (slave bridge0): Releasing backup interface [ 448.417081][T11582] netlink: 'syz.0.1928': attribute type 28 has an invalid length. [ 448.425510][T11582] netlink: 'syz.0.1928': attribute type 29 has an invalid length. [ 448.440125][T11582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1928'. [ 449.137570][T11584] netlink: 'syz.3.1929': attribute type 40 has an invalid length. [ 449.146590][T11582] netlink: 'syz.0.1928': attribute type 10 has an invalid length. [ 449.184485][T11582] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1928'. [ 450.678017][T11603] netlink: 42495 bytes leftover after parsing attributes in process `syz.3.1932'. [ 450.708598][T11603] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1932'. [ 450.718608][T11603] tc_dump_action: action bad kind [ 450.853328][T11611] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1934'. [ 451.071573][T11621] netlink: 'syz.0.1937': attribute type 21 has an invalid length. [ 451.518939][T11635] netlink: 'syz.0.1942': attribute type 28 has an invalid length. [ 451.577576][T11635] netlink: 'syz.0.1942': attribute type 29 has an invalid length. [ 451.616322][T11635] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1942'. [ 451.631563][T11637] netlink: 'syz.4.1940': attribute type 1 has an invalid length. [ 451.651793][T11637] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1940'. [ 452.237663][T11650] net_ratelimit: 3583 callbacks suppressed [ 452.237704][T11650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.254134][T11675] netlink: 'syz.2.1950': attribute type 21 has an invalid length. [ 453.274514][T11675] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1950'. [ 453.303845][T11675] netlink: 'syz.2.1950': attribute type 4 has an invalid length. [ 453.323528][T11675] netlink: 'syz.2.1950': attribute type 5 has an invalid length. [ 453.343343][T11675] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1950'. [ 453.460327][T11678] delete_channel: no stack [ 456.323168][T11724] netlink: 'syz.2.1963': attribute type 4 has an invalid length. [ 456.479891][T11724] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1963'. [ 456.540350][T11752] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1971'. [ 456.806111][T11759] netlink: 'syz.0.1970': attribute type 21 has an invalid length. [ 456.859857][T11759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1970'. [ 457.063900][T11758] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1970'. [ 458.617975][T11799] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1983'. [ 458.651978][T11801] netlink: 'syz.1.1984': attribute type 3 has an invalid length. [ 458.740115][T11799] netlink: 'syz.2.1983': attribute type 2 has an invalid length. [ 458.740148][T11803] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.1983'. [ 458.763359][T11801] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1984'. [ 458.768003][T11799] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.1983'. [ 459.370991][T11815] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1986'. [ 459.757143][T11828] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1990'. [ 460.097768][T11838] netlink: 'syz.2.1996': attribute type 6 has an invalid length. [ 460.230534][T11840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.272904][T11840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.313628][T11840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.328982][T11840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.513689][T11875] __nla_validate_parse: 3 callbacks suppressed [ 461.513753][T11875] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2004'. [ 461.672548][T11880] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2006'. [ 462.569838][T11903] device syzkaller0 entered promiscuous mode [ 463.399277][T11923] device syzkaller0 entered promiscuous mode [ 467.229314][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2029'. [ 469.106226][T11963] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2028'. [ 469.140797][T11967] netlink: 'syz.4.2028': attribute type 1 has an invalid length. [ 469.434728][T11988] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2034'. [ 469.465850][T11992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2035'. [ 469.626512][T11992] netlink: 'syz.3.2035': attribute type 2 has an invalid length. [ 469.661850][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 469.827557][T12006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2039'. [ 469.996076][T12014] netlink: 'syz.4.2042': attribute type 2 has an invalid length. [ 470.015901][T12015] netlink: 'syz.3.2041': attribute type 2 has an invalid length. [ 470.052493][T12015] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 470.092518][T12015] netlink: 'syz.3.2041': attribute type 8 has an invalid length. [ 470.129661][T12015] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2041'. [ 470.195049][T12014] device 0 entered promiscuous mode [ 470.617084][T12026] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 470.624920][T12026] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2043'. [ 471.379155][T12057] tap0: tun_chr_ioctl cmd 1074025677 [ 471.396071][T12057] tap0: linktype set to 773 [ 471.520435][T12064] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2054'. [ 471.533063][T12062] netlink: 'syz.2.2053': attribute type 10 has an invalid length. [ 471.675951][T12064] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 471.880882][T12069] syz.1.2056[12069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.881007][T12069] syz.1.2056[12069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.242439][T12091] netlink: 'syz.4.2064': attribute type 27 has an invalid length. [ 473.434306][T12077] netlink: 'syz.2.2058': attribute type 29 has an invalid length. [ 473.586036][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 473.635136][T12091] bond0: (slave bond_slave_0): Releasing backup interface [ 474.101390][T12106] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 474.133010][T12106] syzkaller0: linktype set to 778 [ 474.594413][T12139] sctp: [Deprecated]: syz.1.2075 (pid 12139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.594413][T12139] Use struct sctp_sack_info instead [ 476.334792][T12185] validate_nla: 1 callbacks suppressed [ 476.334817][T12185] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 476.371981][T12185] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2086'. [ 476.398805][T12185] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.2086'. [ 477.209484][T12257] netlink: 'syz.2.2089': attribute type 10 has an invalid length. [ 477.888697][T12270] netlink: 'syz.1.2092': attribute type 39 has an invalid length. [ 480.561762][T12275] IPv6: Can't replace route, no match found [ 481.111237][T12294] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2100'. [ 481.120998][T12290] netlink: 'syz.3.2098': attribute type 5 has an invalid length. [ 481.858224][T12320] netlink: 'syz.3.2107': attribute type 16 has an invalid length. [ 481.888366][T12323] sock: sock_timestamping_bind_phc: sock not bind to device [ 481.901079][T12327] netlink: 'syz.3.2107': attribute type 10 has an invalid length. [ 481.916427][T12320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2107'. [ 482.128984][T12331] netlink: 'syz.2.2111': attribute type 11 has an invalid length. [ 483.438871][T12370] netlink: 'syz.0.2119': attribute type 4 has an invalid length. [ 484.162849][T12384] netlink: 'syz.2.2124': attribute type 1 has an invalid length. [ 484.176567][T12366] delete_channel: no stack [ 484.223623][T12384] netlink: 'syz.2.2124': attribute type 3 has an invalid length. [ 484.242210][T12384] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2124'. [ 484.559472][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 485.277995][T12427] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 485.341920][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2137'. [ 486.257810][T12449] netlink: 'syz.3.2143': attribute type 2 has an invalid length. [ 486.266526][T12449] netlink: 'syz.3.2143': attribute type 8 has an invalid length. [ 486.274787][T12449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2143'. [ 486.439419][T12456] netlink: 'syz.1.2145': attribute type 10 has an invalid length. [ 486.492692][T12456] bond0: (slave wlan1): Releasing backup interface [ 486.538744][T12456] team0: Port device wlan1 added [ 486.851345][T12469] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2149'. [ 488.040546][T12499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2157'. [ 488.745746][T12511] netlink: 'syz.1.2162': attribute type 39 has an invalid length. [ 489.803009][T12545] netlink: 'syz.2.2167': attribute type 6 has an invalid length. [ 489.832000][T12545] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2167'. [ 490.295064][T12554] netlink: 'syz.4.2172': attribute type 10 has an invalid length. [ 491.593735][T12595] netlink: 'syz.0.2184': attribute type 4 has an invalid length. [ 491.619079][T12595] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2184'. [ 492.905592][T12633] device syzkaller0 entered promiscuous mode [ 493.054710][T12641] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 493.263957][T12646] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2197'. [ 493.715057][T12657] : port 1(ip6gretap0) entered blocking state [ 493.761604][T12657] : port 1(ip6gretap0) entered disabled state [ 493.819717][T12657] device ip6gretap0 entered promiscuous mode [ 493.919294][T12667] netlink: 'syz.0.2204': attribute type 27 has an invalid length. [ 493.954953][T12667] netlink: 'syz.0.2204': attribute type 3 has an invalid length. [ 494.026575][T12667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2204'. [ 494.251324][T12675] device syzkaller0 entered promiscuous mode [ 494.475919][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 495.290839][T12713] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2216'. [ 495.585939][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 495.679055][T12723] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.2216'. [ 495.690946][T12723] netlink: zone id is out of range [ 495.696735][T12723] netlink: zone id is out of range [ 495.702415][T12723] netlink: zone id is out of range [ 495.710244][T12723] netlink: zone id is out of range [ 495.716424][T12723] netlink: zone id is out of range [ 495.721937][T12723] netlink: get zone limit has 8 unknown bytes [ 495.905826][T12728] delete_channel: no stack [ 495.911333][T12728] delete_channel: no stack [ 495.920739][T12728] delete_channel: no stack [ 495.926277][T12728] delete_channel: no stack [ 495.931250][T12728] delete_channel: no stack [ 495.936617][T12728] delete_channel: no stack [ 495.941596][T12728] delete_channel: no stack [ 495.947213][T12728] delete_channel: no stack [ 495.952226][T12728] delete_channel: no stack [ 495.960858][T12728] delete_channel: no stack [ 495.965667][T12728] delete_channel: no stack [ 495.971050][T12728] delete_channel: no stack [ 495.976192][T12728] delete_channel: no stack [ 495.981078][T12728] delete_channel: no stack [ 495.986559][T12728] delete_channel: no stack [ 495.992636][T12728] delete_channel: no stack [ 495.999428][T12728] delete_channel: no stack [ 496.004289][T12728] delete_channel: no stack [ 496.009524][T12728] delete_channel: no stack [ 496.014426][T12728] delete_channel: no stack [ 496.027763][T12728] delete_channel: no stack [ 496.032555][T12728] delete_channel: no stack [ 496.045363][T12728] delete_channel: no stack [ 496.051703][T12728] delete_channel: no stack [ 496.056867][T12728] delete_channel: no stack [ 496.063039][T12728] delete_channel: no stack [ 496.068278][T12728] delete_channel: no stack [ 496.073047][T12728] delete_channel: no stack [ 496.079584][T12728] delete_channel: no stack [ 496.084427][T12728] delete_channel: no stack [ 496.089729][T12728] delete_channel: no stack [ 496.106357][T12728] delete_channel: no stack [ 496.111045][T12728] delete_channel: no stack [ 496.116575][T12728] delete_channel: no stack [ 496.121194][T12728] delete_channel: no stack [ 496.126382][T12728] delete_channel: no stack [ 496.131122][T12728] delete_channel: no stack [ 496.136309][T12728] delete_channel: no stack [ 496.141169][T12728] delete_channel: no stack [ 496.158326][T12728] delete_channel: no stack [ 496.162968][T12728] delete_channel: no stack [ 496.171450][T12728] delete_channel: no stack [ 496.176340][T12728] delete_channel: no stack [ 496.181149][T12728] delete_channel: no stack [ 496.185916][T12728] delete_channel: no stack [ 496.190509][T12728] delete_channel: no stack [ 496.195395][T12728] delete_channel: no stack [ 496.200129][T12728] delete_channel: no stack [ 496.204726][T12728] delete_channel: no stack [ 496.210737][T12728] delete_channel: no stack [ 496.215371][T12728] delete_channel: no stack [ 496.220243][T12728] delete_channel: no stack [ 496.224925][T12728] delete_channel: no stack [ 496.229562][T12728] delete_channel: no stack [ 496.234422][T12728] delete_channel: no stack [ 496.239157][T12728] delete_channel: no stack [ 496.243804][T12728] delete_channel: no stack [ 496.250762][T12728] delete_channel: no stack [ 496.255477][T12728] delete_channel: no stack [ 496.260335][T12728] delete_channel: no stack [ 496.265078][T12728] delete_channel: no stack [ 496.269708][T12728] delete_channel: no stack [ 496.274518][T12728] delete_channel: no stack [ 496.280188][T12728] delete_channel: no stack [ 496.285004][T12728] delete_channel: no stack [ 497.970699][T12703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2213'. [ 497.980218][T12703] tc_dump_action: action bad kind [ 497.991690][T12713] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.2216'. [ 498.275089][T12743] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2223'. [ 499.064387][T12743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.098435][T12743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.125463][T12743] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 499.148232][T12743] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.171339][T12743] bond0 (unregistering): Released all slaves [ 499.182022][T12762] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.217402][T12762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.273919][T12771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2227'. [ 499.729843][T12779] sctp: [Deprecated]: syz.0.2232 (pid 12779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.729843][T12779] Use struct sctp_sack_info instead [ 499.900955][T12783] netlink: 'syz.0.2232': attribute type 33 has an invalid length. [ 499.917873][T12783] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2232'. [ 499.967660][T12790] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2235'. [ 500.189949][T12796] netlink: 'syz.1.2236': attribute type 4 has an invalid length. [ 500.243912][T12796] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2236'. [ 500.307965][T12800] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2239'. [ 500.328092][T12800] bridge_slave_1: default FDB implementation only supports local addresses [ 500.672360][T12815] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2244'. [ 500.743236][T12818] netlink: 'syz.2.2244': attribute type 21 has an invalid length. [ 500.786215][T12818] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2244'. [ 500.834407][T12818] netlink: 'syz.2.2244': attribute type 5 has an invalid length. [ 500.894990][T12818] netlink: 'syz.2.2244': attribute type 6 has an invalid length. [ 500.977766][T12818] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2244'. [ 501.459360][T12819] netlink: 'syz.4.2242': attribute type 10 has an invalid length. [ 501.829365][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.836341][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.273603][T12867] netlink: 'syz.2.2255': attribute type 25 has an invalid length. [ 503.293593][T12872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2258'. [ 503.323563][T12873] netlink: 'syz.0.2258': attribute type 10 has an invalid length. [ 503.478750][T12869] device syzkaller0 entered promiscuous mode [ 504.986200][T12921] sctp: [Deprecated]: syz.0.2269 (pid 12921) Use of int in max_burst socket option deprecated. [ 504.986200][T12921] Use struct sctp_assoc_value instead [ 507.407819][T12918] netlink: 'syz.0.2269': attribute type 10 has an invalid length. [ 508.077006][T12948] sctp: [Deprecated]: syz.2.2276 (pid 12948) Use of struct sctp_assoc_value in delayed_ack socket option. [ 508.077006][T12948] Use struct sctp_sack_info instead [ 508.189708][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2274'. [ 508.439884][T12949] netlink: 'syz.2.2276': attribute type 33 has an invalid length. [ 508.467948][T12949] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2276'. [ 510.827374][T12981] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2284'. [ 511.597545][T13006] netlink: 'syz.4.2295': attribute type 3 has an invalid length. [ 511.607463][T13006] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2295'. [ 511.734635][T13007] device wlan1 entered promiscuous mode [ 511.847674][T13010] netlink: 'syz.2.2294': attribute type 1 has an invalid length. [ 513.279068][T13028] device vcan0 entered promiscuous mode [ 513.285009][T13028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.395968][T13040] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2304'. [ 515.486560][T13083] netlink: 'syz.3.2314': attribute type 1 has an invalid length. [ 515.559733][T13083] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2314'. [ 515.635516][T13094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2318'. [ 515.730950][T13096] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2316'. [ 515.768325][T13096] device hsr_slave_0 left promiscuous mode [ 516.077764][T13109] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2319'. [ 516.096228][T13100] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2319'. [ 519.753902][T13149] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.2334'. [ 519.832105][T13149] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.2334'. [ 519.889279][T13154] netlink: 'syz.4.2334': attribute type 10 has an invalid length. [ 519.947844][T13154] device hsr0 entered promiscuous mode [ 520.006332][T13154] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 520.054666][T13156] netlink: 'syz.3.2333': attribute type 13 has an invalid length. [ 520.120408][T13156] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2333'. [ 520.136975][T13156] syz_tun: refused to change device tx_queue_len [ 520.143803][T13156] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 520.177227][T13158] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2334'. [ 522.249338][T13212] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2350'. [ 522.355069][T13213] netlink: 'syz.2.2349': attribute type 9 has an invalid length. [ 522.387589][T13213] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2349'. [ 522.432899][T13219] netlink: 'syz.0.2351': attribute type 2 has an invalid length. [ 522.465851][T13219] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2351'. [ 522.472801][T13218] device syzkaller0 entered promiscuous mode [ 522.487534][T13220] netlink: 'syz.0.2351': attribute type 2 has an invalid length. [ 522.507887][T13220] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2351'. [ 522.719564][T13227] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.2353'. [ 522.974489][T13236] delete_channel: no stack [ 522.979607][T13236] delete_channel: no stack [ 525.205822][T13236] netlink: 'syz.1.2355': attribute type 3 has an invalid length. [ 525.213837][T13236] netlink: 7874 bytes leftover after parsing attributes in process `syz.1.2355'. [ 525.224168][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 525.789271][T13265] netlink: 'syz.4.2363': attribute type 29 has an invalid length. [ 525.803531][T13273] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2367'. [ 525.813500][T13265] netlink: 'syz.4.2363': attribute type 29 has an invalid length. [ 525.826690][T13273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 526.169024][T13283] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2368'. [ 526.346018][T13287] netlink: 'syz.2.2370': attribute type 7 has an invalid length. [ 526.698333][T13296] netlink: 'syz.0.2372': attribute type 10 has an invalid length. [ 526.812879][T13296] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.820167][T13296] bridge0: port 2(bridge_slave_1) entered listening state [ 526.827656][T13296] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.834856][T13296] bridge0: port 1(bridge_slave_0) entered listening state [ 526.880282][T13296] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 526.902653][T13295] tipc: Started in network mode [ 526.918456][T13295] tipc: Node identity 9215a268, cluster identity 4711 [ 526.941790][T13295] tipc: Node number set to 2450891368 [ 527.070930][T13297] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 527.408482][T13316] netlink: 'syz.2.2378': attribute type 2 has an invalid length. [ 527.512305][T13316] netlink: 175020 bytes leftover after parsing attributes in process `syz.2.2378'. [ 527.540296][T13297] team0: Device hsr_slave_0 failed to register rx_handler [ 527.595345][T13323] netlink: 'syz.2.2378': attribute type 2 has an invalid length. [ 527.635419][T13316] netlink: 'syz.2.2378': attribute type 2 has an invalid length. [ 527.672922][T13314] netlink: 'syz.0.2377': attribute type 10 has an invalid length. [ 527.676841][T13323] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 527.698550][T13316] netlink: 'syz.2.2378': attribute type 1 has an invalid length. [ 528.055521][T13335] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2381'. [ 528.152427][T13340] netlink: 'syz.2.2383': attribute type 6 has an invalid length. [ 528.162294][T13340] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2383'. [ 528.186031][T13319] device pim6reg1 entered promiscuous mode [ 531.752422][T13357] netlink: 'syz.0.2387': attribute type 12 has an invalid length. [ 531.761538][T13357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2387'. [ 532.162916][T13391] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2394'. [ 532.187671][T13392] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2394'. [ 532.478159][T13404] netlink: 'syz.4.2401': attribute type 17 has an invalid length. [ 532.509877][T13404] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2401'. [ 532.580453][T13404] netlink: 'syz.4.2401': attribute type 9 has an invalid length. [ 532.606582][T13404] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2401'. [ 532.922939][T13421] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2403'. [ 533.381633][T13434] netlink: 'syz.2.2406': attribute type 13 has an invalid length. [ 533.411456][T13434] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2406'. [ 533.502574][T13438] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.2409'. [ 533.678735][T13445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2410'. [ 533.835383][T13454] netlink: 'syz.0.2411': attribute type 16 has an invalid length. [ 533.857388][T13454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2411'. [ 535.992767][T13502] netlink: 'syz.4.2428': attribute type 29 has an invalid length. [ 536.026614][T13496] netlink: 'syz.3.2425': attribute type 11 has an invalid length. [ 536.039278][T13496] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2425'. [ 536.050565][T13502] netlink: 'syz.4.2428': attribute type 29 has an invalid length. [ 536.062152][T13503] netlink: 'syz.4.2428': attribute type 29 has an invalid length. [ 536.452890][T13522] netlink: 'syz.2.2433': attribute type 2 has an invalid length. [ 536.487855][T13522] netlink: 'syz.2.2433': attribute type 8 has an invalid length. [ 536.518243][T13522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2433'. [ 536.537297][T13526] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2432'. [ 536.640982][T13526] device batadv_slave_1 entered promiscuous mode [ 536.695643][T13524] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2434'. [ 538.320098][T13552] netlink: 'syz.2.2441': attribute type 3 has an invalid length. [ 538.328626][T13552] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 538.337402][T13552] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.2441'. [ 538.358876][T13552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2441'. [ 540.104884][T13545] device syzkaller0 entered promiscuous mode [ 540.122615][T13552] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2441'. [ 542.147938][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 542.156991][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 543.287957][T13558] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2442'. [ 543.298252][T13574] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2446'. [ 543.452158][T13585] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2449'. [ 543.828045][T13598] netlink: 'syz.1.2453': attribute type 29 has an invalid length. [ 543.884536][T13600] netlink: 'syz.1.2453': attribute type 21 has an invalid length. [ 543.902821][T13600] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2453'. [ 544.101624][T13598] netlink: 'syz.1.2453': attribute type 29 has an invalid length. [ 544.202508][T13600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2453'. [ 544.950192][T13620] netlink: 'syz.0.2459': attribute type 4 has an invalid length. [ 544.986212][T13620] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2459'. [ 545.089365][T13620] wlan1: mtu less than device minimum [ 545.248917][T13638] netlink: 'syz.3.2465': attribute type 29 has an invalid length. [ 545.280279][T13638] netlink: 'syz.3.2465': attribute type 29 has an invalid length. [ 545.359527][T13638] netlink: 'syz.3.2465': attribute type 29 has an invalid length. [ 545.375038][T13638] netlink: 'syz.3.2465': attribute type 29 has an invalid length. [ 545.399449][T13638] netlink: 'syz.3.2465': attribute type 29 has an invalid length. [ 545.838322][T13660] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.2470'. [ 545.927005][T13661] netlink: 463 bytes leftover after parsing attributes in process `syz.2.2470'. [ 546.639847][T13687] netlink: 'syz.3.2477': attribute type 3 has an invalid length. [ 546.654885][T13679] mac80211_hwsim hwsim8 ªªªªªª: renamed from wlan0 [ 546.716615][T13687] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2477'. [ 546.796814][T13695] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2478'. [ 548.065879][T13726] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2484'. [ 549.275370][ T4271] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 549.314378][T13757] validate_nla: 2 callbacks suppressed [ 549.314421][T13757] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 549.571992][T13780] netlink: 'syz.1.2496': attribute type 3 has an invalid length. [ 549.615765][T13780] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2496'. [ 551.048564][T13806] netlink: 'syz.4.2503': attribute type 2 has an invalid length. [ 551.063487][T13806] netlink: 'syz.4.2503': attribute type 1 has an invalid length. [ 555.045062][T13879] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.2523'. [ 555.111413][T13879] netlink: 'syz.3.2523': attribute type 13 has an invalid length. [ 555.147918][T13879] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2523'. [ 555.180547][T13879] syz_tun: refused to change device tx_queue_len [ 555.225894][T13879] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 555.276630][T13880] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2523'. [ 555.359823][T13886] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2524'. [ 555.388025][T13888] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2525'. [ 555.407778][T13884] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2524'. [ 555.782141][T13901] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2528'. [ 556.699945][T13921] netlink: 'syz.1.2533': attribute type 21 has an invalid length. [ 557.490696][T13957] device macsec0 left promiscuous mode [ 557.507015][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.514512][ C1] bridge0: topology change detected, propagating [ 557.523269][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.530811][ C1] bridge0: topology change detected, propagating [ 557.621454][T13957] netlink: 'syz.4.2542': attribute type 29 has an invalid length. [ 557.676188][T13957] netlink: 'syz.4.2542': attribute type 29 has an invalid length. [ 557.764514][T13959] netlink: 'syz.0.2541': attribute type 2 has an invalid length. [ 557.788406][T13959] netlink: 'syz.0.2541': attribute type 8 has an invalid length. [ 557.822525][T13959] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2541'. [ 558.156962][T13970] netlink: 'syz.4.2544': attribute type 30 has an invalid length. [ 558.413859][T13979] netlink: 'syz.4.2547': attribute type 1 has an invalid length. [ 558.729545][T13984] netlink: 'syz.3.2549': attribute type 10 has an invalid length. [ 559.394319][T13995] netlink: 'syz.1.2552': attribute type 21 has an invalid length. [ 559.523760][T13997] bond0: (slave bond_slave_0): Releasing backup interface [ 559.635585][T14001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2553'. [ 560.242745][T14019] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2556'. [ 560.731121][T14031] validate_nla: 4 callbacks suppressed [ 560.731141][T14031] netlink: 'syz.3.2561': attribute type 29 has an invalid length. [ 561.010861][T14031] netlink: 'syz.3.2561': attribute type 29 has an invalid length. [ 561.042825][T14034] netlink: 'syz.3.2561': attribute type 29 has an invalid length. [ 561.792979][T14059] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2569'. [ 562.060610][T14071] netlink: 'syz.4.2572': attribute type 27 has an invalid length. [ 562.098866][T14071] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2572'. [ 562.796214][T14089] netlink: 'syz.3.2576': attribute type 41 has an invalid length. [ 563.270737][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.277165][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.358252][T14115] netlink: 'syz.2.2583': attribute type 3 has an invalid length. [ 563.387597][T14115] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2583'. [ 563.414652][T14115] netlink: 'syz.2.2583': attribute type 19 has an invalid length. [ 563.445852][T14115] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2583'. [ 563.511047][T14124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2584'. [ 563.560301][T14125] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2586'. [ 563.899119][T14136] netlink: 'syz.0.2591': attribute type 13 has an invalid length. [ 563.928447][T14136] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2591'. [ 564.092779][T14136] syz_tun: refused to change device tx_queue_len [ 564.130617][T14136] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 567.383598][T14194] IPv6: Can't replace route, no match found [ 567.398063][T14198] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 568.375950][T14239] netlink: 'syz.0.2615': attribute type 2 has an invalid length. [ 568.394108][T14243] netlink: 'syz.1.2616': attribute type 21 has an invalid length. [ 568.416417][T14243] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.2616'. [ 568.447302][T14239] device 0 entered promiscuous mode [ 569.085743][T14261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2620'. [ 570.974323][T14296] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.2631'. [ 571.373507][T14307] device syzkaller0 entered promiscuous mode [ 571.417831][T14309] device virt_wifi0 entered promiscuous mode [ 572.557840][T14338] syz.0.2642[14338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 572.557986][T14338] syz.0.2642[14338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.417152][T14425] netlink: 'syz.2.2668': attribute type 3 has an invalid length. [ 579.444316][T14425] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2668'. [ 579.589636][T14436] netlink: 'syz.1.2670': attribute type 27 has an invalid length. [ 579.616108][T14436] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2670'. [ 580.163125][T14462] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2678'. [ 580.213829][T14466] bond0: (slave bridge0): Error: Slave device does not support XDP [ 580.424658][T14471] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2680'. [ 581.260414][T14479] netlink: 'syz.3.2682': attribute type 21 has an invalid length. [ 581.326196][T14479] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2682'. [ 581.662961][T14493] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2685'. [ 581.832104][T14496] netlink: 'syz.2.2686': attribute type 46 has an invalid length. [ 582.096747][T14515] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2692'. [ 582.116265][T14511] netlink: 'syz.1.2690': attribute type 2 has an invalid length. [ 582.143047][T14515] netlink: 2739 bytes leftover after parsing attributes in process `syz.3.2692'. [ 582.548424][T14523] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 582.637517][T14523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'. [ 583.243832][T14533] Ÿë: port 1(syz_tun) entered blocking state [ 583.307875][T14533] Ÿë: port 1(syz_tun) entered disabled state [ 583.328272][T14533] device syz_tun entered promiscuous mode [ 583.392845][T14541] netlink: 'syz.2.2697': attribute type 11 has an invalid length. [ 583.441756][T14541] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2697'. [ 584.493538][T14550] device wlan1 left promiscuous mode [ 584.524367][T14553] netlink: 'syz.4.2701': attribute type 33 has an invalid length. [ 584.540847][T14553] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2701'. [ 584.571079][T14534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.804196][T14565] IPv6: NLM_F_CREATE should be specified when creating new route [ 585.101507][T14581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2709'. [ 585.809432][T14597] device syzkaller0 entered promiscuous mode [ 585.891211][T14601] netlink: 'syz.3.2714': attribute type 1 has an invalid length. [ 587.434138][T14641] netlink: 'syz.3.2727': attribute type 13 has an invalid length. [ 587.477234][T14640] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2725'. [ 587.478027][T14638] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2725'. [ 587.540600][T14641] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.2727'. [ 587.574547][T14638] openvswitch: netlink: Flow actions attr not present in new flow. [ 587.598150][T14640] openvswitch: netlink: Flow actions attr not present in new flow. [ 588.041023][T14662] netlink: 'syz.2.2732': attribute type 7 has an invalid length. [ 588.404347][T14667] netlink: 'syz.1.2734': attribute type 13 has an invalid length. [ 588.413935][T14667] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2734'. [ 588.454388][T14668] netlink: 'syz.1.2734': attribute type 13 has an invalid length. [ 588.479741][T14668] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2734'. [ 588.524434][T14670] netlink: 'syz.1.2734': attribute type 10 has an invalid length. [ 588.649247][T14683] netlink: 463 bytes leftover after parsing attributes in process `syz.2.2736'. [ 588.671331][T14670] device netdevsim0 left promiscuous mode [ 588.761158][T14670] team0: Port device netdevsim0 added [ 588.908311][T14685] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2738'. [ 588.985889][T14685] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2738'. [ 589.087698][T14696] netlink: 'syz.4.2740': attribute type 10 has an invalid length. [ 590.894630][T14773] sctp: [Deprecated]: syz.1.2749 (pid 14773) Use of int in max_burst socket option deprecated. [ 590.894630][T14773] Use struct sctp_assoc_value instead [ 592.831485][T14770] __nla_validate_parse: 2 callbacks suppressed [ 592.831499][T14770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2750'. [ 593.094656][T14789] device macsec0 entered promiscuous mode [ 593.787440][T14811] netlink: 'syz.3.2759': attribute type 13 has an invalid length. [ 593.799271][T14811] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2759'. [ 593.833677][T14811] syz_tun: refused to change device tx_queue_len [ 593.841672][T14813] netlink: 'syz.3.2759': attribute type 1 has an invalid length. [ 593.847154][T14811] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 593.894588][T14813] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2759'. [ 594.278346][T14824] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.2762'. [ 596.911782][T14896] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2785'. [ 596.951784][T14896] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 597.134984][T14901] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 597.177401][T14901] team0: Device vxcan1 is of different type [ 597.455431][T14909] netlink: 'syz.4.2788': attribute type 21 has an invalid length. [ 597.479526][T14909] netlink: 'syz.4.2788': attribute type 2 has an invalid length. [ 597.498858][T14905] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2786'. [ 597.816278][T14923] netlink: 'syz.2.2793': attribute type 10 has an invalid length. [ 597.824670][T14923] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2793'. [ 597.886046][T14923] device batadv_slave_1 entered promiscuous mode [ 598.150130][T14940] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2799'. [ 598.190208][T14940] bridge_slave_1: default FDB implementation only supports local addresses [ 598.569137][T14953] netlink: 'syz.1.2803': attribute type 2 has an invalid length. [ 598.599415][T14953] device 3 entered promiscuous mode [ 598.683486][T14962] syzkaller0: create flow: hash 2064434795 index 1 [ 598.717924][T14959] device syzkaller0 entered promiscuous mode [ 598.725482][ T126] syzkaller0: tun_net_xmit 48 [ 598.939935][T14959] syzkaller0: delete flow: hash 2064434795 index 1 [ 601.817555][T14982] netlink: 'syz.0.2813': attribute type 2 has an invalid length. [ 601.838359][T14982] netlink: 'syz.0.2813': attribute type 4 has an invalid length. [ 601.858977][T14982] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2813'. [ 601.887240][T14997] netlink: 'syz.1.2816': attribute type 9 has an invalid length. [ 601.926573][T14996] netlink: 'syz.1.2816': attribute type 9 has an invalid length. [ 602.147819][T15003] tun0: tun_chr_ioctl cmd 1074025675 [ 602.168698][T15003] tun0: persist enabled [ 602.182218][T11164] tipc: Subscription rejected, illegal request [ 602.369039][T15019] netlink: 'syz.2.2822': attribute type 10 has an invalid length. [ 602.386764][T15019] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2822'. [ 603.322290][T15059] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.2835'. [ 603.860794][T15070] tap0: tun_chr_ioctl cmd 1074025675 [ 603.874806][T15070] tap0: persist disabled [ 603.957606][T15073] delete_channel: no stack [ 603.962270][T15073] delete_channel: no stack [ 603.998528][T15074] delete_channel: no stack [ 604.003132][T15074] delete_channel: no stack [ 604.194890][T15087] netlink: 'syz.2.2842': attribute type 1 has an invalid length. [ 604.223853][T15087] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.2842'. [ 604.619629][T15094] device syzkaller0 entered promiscuous mode [ 604.662128][T15106] bond0: (slave bridge0): Error: Slave device does not support XDP [ 604.785517][T15116] bond0: (slave wlan1): Error: Slave device does not support XDP [ 605.331588][T15133] netlink: 'syz.0.2855': attribute type 2 has an invalid length. [ 605.354054][T15133] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2855'. [ 605.378114][T15136] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.2856'. [ 607.758602][T15144] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 607.766109][T15144] IPv6: NLM_F_CREATE should be set when creating new route [ 607.774226][T15144] IPv6: NLM_F_CREATE should be set when creating new route [ 607.781724][T15144] IPv6: NLM_F_CREATE should be set when creating new route [ 608.761268][ T4283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 608.772705][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 608.783028][T15187] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 608.795132][T15187] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 608.808162][T15187] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 608.816097][T15187] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 609.046565][T11160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.068991][T15193] netlink: 'syz.1.2870': attribute type 10 has an invalid length. [ 609.078356][T15193] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2870'. [ 609.130644][T11160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.239655][T11160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.357013][T11160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.927522][T15205] -1: renamed from syzkaller0 [ 609.972843][T15221] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2875'. [ 610.035104][T11160] device 0 left promiscuous mode [ 610.180229][T15207] delete_channel: no stack [ 610.254875][T15186] chnl_net:caif_netlink_parms(): no params data found [ 610.790599][T15242] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 610.800892][T15242] syzkaller0: linktype set to 825 [ 610.881852][ T4271] Bluetooth: hci5: command 0x0409 tx timeout [ 611.126836][T15256] netlink: 'syz.4.2882': attribute type 21 has an invalid length. [ 611.151750][T15256] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2882'. [ 611.212436][T15186] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.220199][T15186] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.249940][T15186] device bridge_slave_0 entered promiscuous mode [ 611.269140][T15269] netlink: 'syz.1.2884': attribute type 2 has an invalid length. [ 611.322483][T15186] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.343440][T15186] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.363111][T15186] device bridge_slave_1 entered promiscuous mode [ 611.514559][T15186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.529488][T15276] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 611.599738][T15186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.711542][T15186] team0: Port device team_slave_0 added [ 611.733325][T15186] team0: Port device team_slave_1 added [ 611.745128][T15278] netlink: 'syz.2.2887': attribute type 10 has an invalid length. [ 611.915185][T15186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.932863][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.995549][T15186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.113185][T15186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.126407][T15186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.241312][T15186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.472462][T15304] netlink: 'syz.3.2894': attribute type 7 has an invalid length. [ 612.527123][T15310] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2893'. [ 612.563258][T15186] device hsr_slave_0 entered promiscuous mode [ 612.606749][T15186] device hsr_slave_1 entered promiscuous mode [ 612.697618][T15310] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 612.946825][ T4271] Bluetooth: hci5: command 0x041b tx timeout [ 613.130717][T11160] bond0: (slave wlan1): Releasing backup interface [ 613.292729][T15318] netlink: 'syz.2.2896': attribute type 1 has an invalid length. [ 613.306911][T15318] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.2896'. [ 613.410938][T15333] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2898'. [ 613.683110][T15344] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 613.765476][T15341] netlink: 'syz.4.2901': attribute type 21 has an invalid length. [ 613.810394][T11160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.818307][T11160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.837503][T11160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.854179][T11160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.883952][T11160] device bridge_slave_1 left promiscuous mode [ 613.927758][T11160] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.942543][T11160] device bridge_slave_0 left promiscuous mode [ 613.954150][T11160] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.990422][T11160] device veth1_macvtap left promiscuous mode [ 613.997554][T11160] device veth0_macvtap left promiscuous mode [ 614.167589][T15359] netlink: 'syz.4.2903': attribute type 2 has an invalid length. [ 614.862257][T11160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.026025][T15187] Bluetooth: hci5: command 0x040f tx timeout [ 615.167796][T11160] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 615.176883][T11160] bond0 (unregistering): Released all slaves [ 615.278535][T15359] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2903'. [ 615.596574][T15369] Â: renamed from pim6reg1 [ 616.260828][T15385] netlink: 'syz.4.2910': attribute type 21 has an invalid length. [ 616.297349][T15385] IPv6: NLM_F_CREATE should be specified when creating new route [ 616.432191][T15393] netlink: 'syz.3.2911': attribute type 3 has an invalid length. [ 616.445672][T15393] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2911'. [ 616.533756][T15186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 616.556925][T15186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 616.586361][T15186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 616.660417][T15186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 616.966539][T15186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.036718][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.064291][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.103986][T15186] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.111430][T15187] Bluetooth: hci5: command 0x0419 tx timeout [ 617.180527][T15411] netlink: 'syz.1.2916': attribute type 27 has an invalid length. [ 617.207344][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.228176][T15411] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2916'. [ 617.237958][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.238564][T11160] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.238681][T11160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.239889][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.419092][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.445429][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.467634][T11160] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.474867][T11160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.526219][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 617.544999][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 617.588543][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 617.628707][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 617.663652][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 617.726473][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 617.787979][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 617.808756][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 617.847010][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 617.866467][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 617.885555][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 617.910900][T15186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 619.107542][T15461] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 619.161942][T11164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.171268][T11164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.222892][T15186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.346361][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 619.369875][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 619.389219][T15462] netlink: 'syz.3.2928': attribute type 10 has an invalid length. [ 619.459896][T15462] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 619.532326][T15478] netlink: 'syz.4.2933': attribute type 3 has an invalid length. [ 619.558605][T15478] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2933'. [ 619.619168][T15478] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2933'. [ 619.629776][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 619.654530][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.688327][T15484] netlink: 'syz.2.2934': attribute type 6 has an invalid length. [ 619.713542][T15484] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2934'. [ 619.771957][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.786776][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.871063][T15186] device veth0_vlan entered promiscuous mode [ 619.979060][T15186] device veth1_vlan entered promiscuous mode [ 620.155294][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 620.188008][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 620.211404][T15186] device veth0_macvtap entered promiscuous mode [ 620.246618][T15186] device veth1_macvtap entered promiscuous mode [ 620.315208][T15186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.357396][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 620.367038][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 620.442878][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 620.496712][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 620.540285][T15186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.574076][T15503] device pim6reg1 entered promiscuous mode [ 620.627765][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.657985][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.693193][T15186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.712992][T15186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.755749][T15186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.765004][T15186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.579061][T11160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.620170][T11160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.709201][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 621.779121][T11160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.792390][T11160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.813849][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 622.331767][T15553] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2945'. [ 622.630928][T15548] netlink: 'syz.1.2945': attribute type 10 has an invalid length. [ 622.683447][T15553] netlink: 'syz.1.2945': attribute type 4 has an invalid length. [ 622.731331][T15553] netlink: 199776 bytes leftover after parsing attributes in process `syz.1.2945'. [ 623.214886][T15548] team0 (unregistering): Port device team_slave_0 removed [ 623.334297][T15548] team0 (unregistering): Port device team_slave_1 removed [ 623.361309][T15187] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 623.372116][T15187] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 623.381917][T15187] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 623.390927][T15187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 623.401507][T15187] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 623.410240][T15187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 623.468915][T15548] team0 (unregistering): Port device wlan1 removed [ 623.509176][T15548] team0 (unregistering): Port device netdevsim0 removed [ 623.820376][T11169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.093151][T11169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.121722][T15592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.129457][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 624.137274][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 624.145030][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 624.181056][T15590] netlink: 'syz.1.2955': attribute type 10 has an invalid length. [ 624.209137][T15590] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2955'. [ 624.431679][T11169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.568191][T11169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.719462][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.725975][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.912718][T15575] chnl_net:caif_netlink_parms(): no params data found [ 625.083559][T15618] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2961'. [ 625.362532][T15575] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.425435][T15575] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.477437][T15575] device bridge_slave_0 entered promiscuous mode [ 625.506021][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 625.515434][T15575] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.548138][T15575] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.584441][T15575] device bridge_slave_1 entered promiscuous mode [ 625.639275][T15575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.651874][T15575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.688643][T15575] team0: Port device team_slave_0 added [ 625.719750][T15628] netlink: 'syz.3.2962': attribute type 1 has an invalid length. [ 625.732013][T15575] team0: Port device team_slave_1 added [ 625.755823][T15628] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2962'. [ 625.964261][T15575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.991677][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.114922][T15575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.160861][T15575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.176392][T15575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.245890][T15575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.272204][T11169] device 0 left promiscuous mode [ 626.388140][T11169] device 1 left promiscuous mode [ 626.454243][T15575] device hsr_slave_0 entered promiscuous mode [ 626.504846][T15575] device hsr_slave_1 entered promiscuous mode [ 626.518670][T15575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.529941][T15647] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.2966'. [ 626.546562][T15575] Cannot create hsr debugfs directory [ 626.571059][T11169] tipc: Left network mode [ 626.842025][T11169] device ip6gretap0 left promiscuous mode [ 626.857022][T11169] : port 1(ip6gretap0) entered disabled state [ 626.896644][T15655] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 626.902869][T15655] syzkaller0: linktype set to 778 [ 627.004885][T15652] netlink: 'syz.4.2968': attribute type 7 has an invalid length. [ 627.041365][T15666] netlink: 'syz.3.2967': attribute type 3 has an invalid length. [ 627.057276][T15666] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2967'. [ 627.214587][T15664] netlink: 'syz.3.2967': attribute type 25 has an invalid length. [ 627.272226][T15664] netlink: 'syz.3.2967': attribute type 29 has an invalid length. [ 627.438426][T15674] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 627.478481][T15674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.586322][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 628.424506][T15691] netlink: 'syz.3.2974': attribute type 3 has an invalid length. [ 628.439751][T15691] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2974'. [ 629.234378][T15575] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 629.333026][T15575] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 629.494168][T15575] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 629.549128][T15575] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 629.666094][ T4271] Bluetooth: hci2: command 0x040f tx timeout [ 629.964734][T11169] device bridge_slave_0 left promiscuous mode [ 629.971360][T11169] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.021531][T11169] device veth1_macvtap left promiscuous mode [ 630.036069][T15744] netlink: 'syz.0.2986': attribute type 29 has an invalid length. [ 630.054381][T11169] device veth0_macvtap left promiscuous mode [ 631.686918][T15744] netlink: 'syz.0.2986': attribute type 29 has an invalid length. [ 631.746141][ T4271] Bluetooth: hci2: command 0x0419 tx timeout [ 631.919028][T15575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.972162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 631.991568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.049130][T15575] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.104740][T15774] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2991'. [ 632.169480][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 632.196966][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.236204][ T5259] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.243518][ T5259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.286507][ T5259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 632.342617][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 632.371184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.410937][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.418229][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.442514][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 632.461984][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 632.715587][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 632.740889][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.765258][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 632.781530][T15793] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 632.801084][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.814836][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 632.827731][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.871440][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.284229][T15783] device syzkaller0 entered promiscuous mode [ 633.312452][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 633.325086][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 633.411444][T15575] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.850417][T15816] netlink: 'syz.3.3003': attribute type 3 has an invalid length. [ 635.896116][T15816] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3003'. [ 635.969447][T15822] netlink: 'syz.4.3005': attribute type 3 has an invalid length. [ 635.979953][T15822] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3005'. [ 636.142704][T15822] IPv6: Can't replace route, no match found [ 636.374343][T15832] netlink: 'syz.0.3008': attribute type 11 has an invalid length. [ 636.405294][T15832] netlink: 'syz.0.3008': attribute type 6 has an invalid length. [ 636.419050][T15832] netlink: 125060 bytes leftover after parsing attributes in process `syz.0.3008'. [ 636.583908][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 636.601136][T15837] sctp: [Deprecated]: syz.3.3010 (pid 15837) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.601136][T15837] Use struct sctp_sack_info instead [ 636.602780][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 636.678248][T15575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.899755][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 636.925597][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.416938][T15855] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.3015'. [ 637.485097][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 637.509988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.526114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.534495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.575459][T15575] device veth0_vlan entered promiscuous mode [ 637.678042][T15575] device veth1_vlan entered promiscuous mode [ 637.719253][ T4271] Bluetooth: hci1: ISO packet for unknown connection handle 8 [ 637.833743][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 637.849084][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 637.899518][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.970198][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 638.020419][T15575] device veth0_macvtap entered promiscuous mode [ 638.110521][T15575] device veth1_macvtap entered promiscuous mode [ 638.158507][T15871] netlink: 'syz.3.3019': attribute type 10 has an invalid length. [ 639.435289][T15871] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.470622][T15871] device bridge_slave_1 left promiscuous mode [ 639.477394][T15871] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.488138][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 639.497436][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 639.524830][T15575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 639.536598][T15575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.550550][T15575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.641960][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 639.662079][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 639.685138][T15575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 639.706012][T15575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 639.719048][T15575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.851525][T15890] sctp: [Deprecated]: syz.4.3024 (pid 15890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 639.851525][T15890] Use struct sctp_sack_info instead [ 640.522400][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 640.557084][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 640.583192][T15575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.622810][T15575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.647903][T15575] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.665716][T15575] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.972739][T15906] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.3029'. [ 641.018549][T15910] netlink: 'syz.4.3029': attribute type 7 has an invalid length. [ 641.065821][T15910] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.3029'. [ 641.083799][ T5259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.129732][ T5259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.156435][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 641.204617][T11160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.216816][T11160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.265756][T11164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 641.276781][T15922] netlink: 'syz.1.3032': attribute type 4 has an invalid length. [ 641.294734][T15922] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3032'. [ 641.373716][T15922] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 642.438470][T15952] sctp: [Deprecated]: syz.2.3040 (pid 15952) Use of struct sctp_assoc_value in delayed_ack socket option. [ 642.438470][T15952] Use struct sctp_sack_info instead [ 642.817669][T11164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.936907][T15187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 642.951756][ T4283] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 642.960699][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 642.970253][ T4283] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 642.980867][ T4283] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 642.990257][ T4283] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 643.013307][T11164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.141087][T11164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.226449][T15984] netlink: 192432 bytes leftover after parsing attributes in process `syz.4.3048'. [ 643.255997][T15984] netlink: get zone limit has 4 unknown bytes [ 643.280213][T11164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.320143][T15987] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3049'. [ 643.342215][T15987] bridge_slave_1: default FDB implementation only supports local addresses [ 643.672855][T11164] device 0 left promiscuous mode [ 643.758601][T11164] device 0 left promiscuous mode [ 643.842716][T15974] chnl_net:caif_netlink_parms(): no params data found [ 643.903445][T11164] device 1 left promiscuous mode [ 643.946361][T11164] device 2 left promiscuous mode [ 644.022471][T11164] device 3 left promiscuous mode [ 644.291280][T11164] tipc: Left network mode [ 644.437092][T16036] netlink: 'syz.3.3062': attribute type 2 has an invalid length. [ 644.445082][T16036] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3062'. [ 644.700420][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.716020][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.753974][T15974] device bridge_slave_0 entered promiscuous mode [ 645.026815][ T4271] Bluetooth: hci1: command 0x0409 tx timeout [ 645.045837][T16057] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3065'. [ 645.062775][T16057] openvswitch: netlink: Flow key attr not present in new flow. [ 645.083425][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.093329][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.110888][T15974] device bridge_slave_1 entered promiscuous mode [ 645.240199][T16059] netlink: 'syz.2.3066': attribute type 2 has an invalid length. [ 645.469569][T16059] device 0 entered promiscuous mode [ 645.493345][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.529357][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.269684][T15974] team0: Port device team_slave_0 added [ 646.308677][T15974] team0: Port device team_slave_1 added [ 646.739730][T16088] can: request_module (can-proto-5) failed. [ 646.761299][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.773814][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.842249][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.943836][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.953502][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.036868][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.106556][ T4271] Bluetooth: hci1: command 0x041b tx timeout [ 647.620671][T15974] device hsr_slave_0 entered promiscuous mode [ 647.661375][T15974] device hsr_slave_1 entered promiscuous mode [ 647.686753][T15974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.694414][T15974] Cannot create hsr debugfs directory [ 648.230834][T16143] netlink: 'syz.3.3085': attribute type 12 has an invalid length. [ 648.262627][T16143] netlink: 'syz.3.3085': attribute type 15 has an invalid length. [ 648.368427][T11164] device hsr_slave_0 left promiscuous mode [ 648.379428][T11164] device hsr_slave_1 left promiscuous mode [ 648.463423][T11164] device veth1_vlan left promiscuous mode [ 648.484331][T11164] device veth0_vlan left promiscuous mode [ 648.561435][T16156] netlink: 'syz.3.3088': attribute type 29 has an invalid length. [ 649.197373][ T4283] Bluetooth: hci1: command 0x040f tx timeout [ 650.046901][T11164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.457592][T11164] bond0 (unregistering): Released all slaves [ 650.507329][T16155] netlink: 'syz.3.3088': attribute type 10 has an invalid length. [ 650.515433][T16156] netlink: 'syz.3.3088': attribute type 29 has an invalid length. [ 650.540619][T16183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3094'. [ 650.842216][T16188] netlink: 'syz.0.3096': attribute type 10 has an invalid length. [ 650.872282][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.907402][T16188] device bridge_slave_1 left promiscuous mode [ 650.922037][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.955945][T16188] team0: Port device bridge_slave_1 added [ 651.191030][T16194] netlink: 'syz.2.3098': attribute type 12 has an invalid length. [ 651.228513][T16194] netlink: 'syz.2.3098': attribute type 15 has an invalid length. [ 651.265842][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 651.855987][T16213] netlink: 'syz.4.3103': attribute type 10 has an invalid length. [ 651.961067][T15974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 652.001337][T15974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 652.033487][T15974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 652.053626][T15974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 652.193321][T16227] netlink: 'syz.3.3095': attribute type 46 has an invalid length. [ 652.346890][T15974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.392635][T16236] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3107'. [ 652.419051][T16238] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3106'. [ 652.433081][T11164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 652.442759][T11164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 652.460291][T15974] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.554797][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 652.597896][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 652.610617][T11170] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.618189][T11170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.635784][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 652.656293][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 652.671258][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 652.681202][T11170] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.688423][T11170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.740026][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.765310][T16245] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 652.803826][T16244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 652.886138][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.896782][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.918772][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.998677][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.029931][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.069543][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 653.104691][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 653.164780][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 653.217590][T15974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 653.262075][T15974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 653.310966][T16256] netlink: 'syz.4.3112': attribute type 10 has an invalid length. [ 653.334197][T16256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3112'. [ 653.360191][T16256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 653.416965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 653.436961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 653.612361][T16268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3113'. [ 653.931376][T16282] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3117'. [ 654.000840][T16282] bridge_slave_1: default FDB implementation only supports local addresses [ 654.055764][T16278] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3117'. [ 654.105785][T16278] bridge_slave_1: default FDB implementation only supports local addresses [ 654.279844][T15974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.311315][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 654.323980][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 654.401735][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 654.425556][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 654.510543][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 654.526480][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 654.547144][T15974] device veth0_vlan entered promiscuous mode [ 654.730827][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 654.759567][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 654.794762][T15974] device veth1_vlan entered promiscuous mode [ 654.855307][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 654.877947][T11162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 654.900768][T15974] device veth0_macvtap entered promiscuous mode [ 654.918235][T15974] device veth1_macvtap entered promiscuous mode [ 654.996640][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.025265][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.065880][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.095933][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.144734][T15974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.169485][T16303] netlink: 'syz.0.3121': attribute type 16 has an invalid length. [ 655.189059][T16303] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3121'. [ 655.220873][T16309] netlink: 'syz.3.3123': attribute type 1 has an invalid length. [ 655.241959][T16309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3123'. [ 655.310651][T16303] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 655.469616][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 655.498344][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 655.543741][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 655.583844][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 655.728860][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.754705][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.781942][T15974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.825251][T15974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.885949][T15974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.960398][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 655.997021][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 656.029435][T15974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.064010][T15974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.086100][T15974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.102663][T15974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.429942][T16323] validate_nla: 4 callbacks suppressed [ 656.429982][T16323] netlink: 'syz.4.3125': attribute type 13 has an invalid length. [ 656.498630][T16323] __nla_validate_parse: 1 callbacks suppressed [ 656.498672][T16323] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3125'. [ 656.643307][T16323] syz_tun: refused to change device tx_queue_len [ 656.657139][T16323] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 656.783426][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.806773][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.823432][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 656.871267][T16334] Ÿë: port 3(syz_tun) entered blocking state [ 656.881770][T16334] Ÿë: port 3(syz_tun) entered disabled state [ 656.903917][T16334] device syz_tun entered promiscuous mode [ 656.967715][T11160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.985983][T11160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.063171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 657.729697][T16355] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3133'. [ 657.942818][T16361] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3132'. [ 658.031562][T16366] netlink: 'syz.1.3134': attribute type 3 has an invalid length. [ 658.082172][T16361] netlink: 'syz.0.3132': attribute type 27 has an invalid length. [ 658.096059][T16366] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3134'. [ 658.185782][T16361] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3132'. [ 658.716533][T16374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3136'. [ 658.862548][T16382] netlink: 'syz.2.3137': attribute type 3 has an invalid length. [ 658.920888][T16382] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3137'. [ 658.961681][ T4271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 658.972608][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 658.994526][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 659.004077][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 659.012157][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 659.026004][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 659.043110][ T4269] device syz_tun left promiscuous mode [ 659.067494][ T4269] Ÿë: port 1(syz_tun) entered disabled state [ 659.359557][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.531285][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.610291][T16397] device lo entered promiscuous mode [ 659.702076][T16397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 659.847128][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.985095][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.453401][T16384] chnl_net:caif_netlink_parms(): no params data found [ 660.654982][ T9] device 0 left promiscuous mode [ 660.689034][T16439] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.3150'. [ 660.779802][T16444] netlink: 'syz.3.3152': attribute type 10 has an invalid length. [ 660.798979][T16444] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3152'. [ 661.106270][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 661.773403][T16471] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3156'. [ 661.879276][T16439] device syzkaller0 entered promiscuous mode [ 661.906443][ T9] tipc: Left network mode [ 662.297593][T16384] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.320531][T16384] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.347280][T16384] device bridge_slave_0 entered promiscuous mode [ 662.398545][T16384] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.415774][T16384] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.451354][T16384] device bridge_slave_1 entered promiscuous mode [ 662.851898][T16384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.910889][T16384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.064100][T16506] netlink: 'syz.3.3161': attribute type 21 has an invalid length. [ 663.183037][T16384] team0: Port device team_slave_0 added [ 663.197905][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 663.438205][T16384] team0: Port device team_slave_1 added [ 663.585849][T16384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.620638][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.684961][T16384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.754029][T16518] netlink: 'syz.3.3165': attribute type 2 has an invalid length. [ 663.797791][T16518] netlink: 'syz.3.3165': attribute type 1 has an invalid length. [ 663.834254][T16518] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.3165'. [ 663.851238][T16384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.860751][T16384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.950057][T16384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.345349][T16384] device hsr_slave_0 entered promiscuous mode [ 664.369847][T16384] device hsr_slave_1 entered promiscuous mode [ 664.385468][T16384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 664.432663][T16384] Cannot create hsr debugfs directory [ 665.234963][T16552] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3168'. [ 665.265825][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 665.649875][T16548] device syzkaller0 entered promiscuous mode [ 665.706747][T16574] netlink: 'syz.0.3173': attribute type 4 has an invalid length. [ 665.751858][T16576] netlink: 'syz.3.3172': attribute type 21 has an invalid length. [ 665.810708][T16576] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3172'. [ 665.998368][T16576] netlink: 'syz.3.3172': attribute type 5 has an invalid length. [ 666.011264][T16581] netlink: 'syz.0.3174': attribute type 16 has an invalid length. [ 666.016414][T16576] netlink: 'syz.3.3172': attribute type 6 has an invalid length. [ 666.029597][T16581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3174'. [ 666.079522][T16576] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3172'. [ 666.369456][T16581] netlink: 'syz.0.3174': attribute type 10 has an invalid length. [ 666.587864][T16581] team0: Port device macvlan0 added [ 666.690073][ T9] device hsr_slave_0 left promiscuous mode [ 666.710465][ T9] device hsr_slave_1 left promiscuous mode [ 666.737655][ T9] device bridge_slave_0 left promiscuous mode [ 666.744137][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.864256][ T9] device veth0_macvtap left promiscuous mode [ 667.346116][ T4283] Bluetooth: hci0: command 0x0419 tx timeout [ 670.865044][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.129203][ T9] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 671.138796][ T9] bond0 (unregistering): Released all slaves [ 671.264430][T16606] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3183'. [ 671.276716][T16609] netlink: 'syz.3.3182': attribute type 10 has an invalid length. [ 671.499230][T16615] netlink: 'syz.0.3185': attribute type 10 has an invalid length. [ 671.546257][T16615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3185'. [ 671.622350][T16615] batman_adv: batadv0: Adding interface: virt_wifi0 [ 671.639322][T16615] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.750774][T16615] batman_adv: batadv0: Interface activated: virt_wifi0 [ 672.152521][T16384] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 672.248389][T16384] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 672.325202][T16384] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 672.399974][T16384] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 672.816887][T16384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.870041][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 672.879587][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 672.911613][T16384] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.951316][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 672.971975][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 673.014830][T11160] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.022342][T11160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.136068][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 673.154602][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 673.206999][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 673.236168][T11160] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.243343][T11160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.303565][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 673.333026][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 673.419246][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 673.440944][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 673.471979][T16659] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3195'. [ 673.496521][T16662] netlink: 'syz.1.3197': attribute type 9 has an invalid length. [ 673.529476][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 673.534424][T16662] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3197'. [ 673.548310][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 673.570633][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 673.590371][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 673.617606][T11160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 673.658244][T16665] device syzkaller0 entered promiscuous mode [ 673.790276][T16384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 673.832449][T16384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 673.872391][T16661] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3196'. [ 673.897882][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 673.916310][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.804078][T16696] netlink: 'syz.0.3204': attribute type 3 has an invalid length. [ 674.859254][T16696] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.3204'. [ 675.126851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 675.134456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.197892][T16715] netlink: 'syz.1.3206': attribute type 46 has an invalid length. [ 675.243103][T16715] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3206'. [ 675.294771][T16384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.582578][T16731] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3211'. [ 675.626371][T16731] netlink: zone id is out of range [ 675.646119][T16731] netlink: zone id is out of range [ 675.651371][T16731] netlink: zone id is out of range [ 675.674266][T16731] netlink: zone id is out of range [ 675.715779][T16731] netlink: zone id is out of range [ 675.720994][T16731] netlink: zone id is out of range [ 675.749836][T16731] netlink: zone id is out of range [ 675.769826][T16731] netlink: zone id is out of range [ 675.775041][T16731] netlink: zone id is out of range [ 675.805018][T16731] netlink: zone id is out of range [ 675.915055][T16744] netlink: 'syz.3.3213': attribute type 11 has an invalid length. [ 675.983777][T16744] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3213'. [ 676.323251][T16757] netlink: 'syz.1.3216': attribute type 10 has an invalid length. [ 677.200517][T16757] team0 (unregistering): Port device team_slave_0 removed [ 677.253911][T16757] team0 (unregistering): Port device team_slave_1 removed [ 677.389440][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 677.417109][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 677.496512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 677.516552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.576916][T16384] device veth0_vlan entered promiscuous mode [ 677.632397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.644700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 677.687534][T16384] device veth1_vlan entered promiscuous mode [ 677.825525][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 677.854071][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 677.918031][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.938011][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.993843][T16384] device veth0_macvtap entered promiscuous mode [ 678.023707][T16384] device veth1_macvtap entered promiscuous mode [ 678.111891][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.128407][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.142827][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.175674][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.211082][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 678.222287][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.245188][T16384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.265381][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 678.279223][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 678.323115][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 678.355416][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 678.392976][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.410018][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.423115][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.423425][T16798] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.3226'. [ 678.449823][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.505675][T16384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.521050][T16384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.534968][T16384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.620032][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 678.635509][T11170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 678.652483][T16798] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.3226'. [ 678.667939][T16384] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.691792][T16384] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.705526][T16384] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.721696][T16384] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.056910][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.080869][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.162572][T16807] netlink: 'syz.2.3229': attribute type 19 has an invalid length. [ 679.180743][T16807] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3229'. [ 679.244395][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 679.326862][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.375707][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.525104][T11169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 679.814518][T16827] device syzkaller0 entered promiscuous mode [ 680.236357][T16833] netlink: 'syz.4.3236': attribute type 21 has an invalid length. [ 680.404548][T16835] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3237'. [ 681.085993][T16839] netlink: 'syz.2.3238': attribute type 11 has an invalid length. [ 682.863041][T16866] netlink: 'syz.4.3244': attribute type 29 has an invalid length. [ 683.067847][ T4270] device syz_tun left promiscuous mode [ 683.073775][ T4270] Ÿë: port 3(syz_tun) entered disabled state [ 683.121227][ T4271] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.131555][ T4271] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.142058][ T4271] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.152092][T16866] netlink: 'syz.4.3244': attribute type 29 has an invalid length. [ 683.163370][ T4271] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.172340][ T4271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 683.181439][ T4271] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 683.260191][T16869] netlink: 'syz.4.3244': attribute type 29 has an invalid length. [ 683.524779][ T5259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.573397][T16880] netlink: 'syz.1.3248': attribute type 2 has an invalid length. [ 683.627281][T16880] netlink: 'syz.1.3248': attribute type 1 has an invalid length. [ 683.645137][T16880] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.3248'. [ 685.281705][ T4271] Bluetooth: hci3: command 0x0409 tx timeout [ 686.244951][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.251707][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.273555][T16872] netlink: 'syz.4.3244': attribute type 29 has an invalid length. [ 686.475324][ T5259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.764618][ T5259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.090549][ T5259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.346135][ T4271] Bluetooth: hci3: command 0x041b tx timeout [ 687.413298][T16873] chnl_net:caif_netlink_parms(): no params data found [ 687.496917][T16903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 687.838387][T16921] netlink: 'syz.0.3255': attribute type 2 has an invalid length. [ 687.855895][T16921] netlink: 'syz.0.3255': attribute type 1 has an invalid length. [ 687.906743][T16921] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3255'. [ 687.925576][T16873] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.972886][T16873] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.034864][T16873] device bridge_slave_0 entered promiscuous mode [ 688.077231][T16923] netlink: 'syz.4.3258': attribute type 10 has an invalid length. [ 688.119076][T16923] device veth1_macvtap left promiscuous mode [ 688.563561][ T5259] bridge0: port 3(ip6gretap0) entered disabled state [ 688.755915][T16944] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3262'. [ 688.769735][ T5259] device ip6gretap0 left promiscuous mode [ 688.805769][ T5259] bridge0: port 3(ip6gretap0) entered disabled state [ 688.828142][T16873] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.838203][T16873] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.862761][T16873] device bridge_slave_1 entered promiscuous mode [ 688.887947][T16931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3260'. [ 688.935733][T16944] netlink: 'syz.2.3262': attribute type 10 has an invalid length. [ 688.989585][T16950] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3263'. [ 689.002906][T16944] team0: Port device dummy0 added [ 689.218024][T16950] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 689.275295][T16950] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 689.327777][T16950] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 689.402215][T16873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.425740][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 689.594006][T16873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.625890][T16976] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3268'. [ 689.775076][T16873] team0: Port device team_slave_0 added [ 689.874751][T16873] team0: Port device team_slave_1 added [ 689.891452][T16981] netlink: 'syz.0.3269': attribute type 11 has an invalid length. [ 690.639259][ T5259] device gretap0 left promiscuous mode [ 690.644890][ T5259] Ÿë: port 1(gretap0) entered disabled state [ 690.748581][T16991] netlink: 'syz.4.3271': attribute type 1 has an invalid length. [ 690.798371][T16990] netlink: 'syz.4.3271': attribute type 10 has an invalid length. [ 690.836242][T16990] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3271'. [ 690.869972][T16991] netlink: 'syz.4.3271': attribute type 3 has an invalid length. [ 690.959780][T16991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3271'. [ 690.998702][T16873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.016988][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.108903][T16873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.128256][T17008] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3275'. [ 691.187144][T17009] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3275'. [ 691.206477][T16873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.225984][T16873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.271748][T16873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.292261][T17006] netlink: 'syz.0.3274': attribute type 2 has an invalid length. [ 691.358352][T17006] netlink: 'syz.0.3274': attribute type 8 has an invalid length. [ 691.392509][T17006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3274'. [ 691.410560][T17013] tun0: tun_chr_ioctl cmd 1074025681 [ 691.505758][ T4271] Bluetooth: hci3: command 0x0419 tx timeout [ 691.603905][T16873] device hsr_slave_0 entered promiscuous mode [ 691.644473][T16873] device hsr_slave_1 entered promiscuous mode [ 691.662547][T16873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.687316][T16873] Cannot create hsr debugfs directory [ 691.816701][T17019] delete_channel: no stack [ 692.238588][ T5259] bond0: (slave wlan1): Releasing backup interface [ 692.459732][T17040] device sit0 entered promiscuous mode [ 692.629496][T17044] netlink: 'syz.1.3284': attribute type 10 has an invalid length. [ 692.663594][T17044] device veth1_macvtap left promiscuous mode [ 693.066880][T17050] delete_channel: no stack [ 693.345252][ T5259] device veth0_to_team left promiscuous mode [ 693.372983][ T5259] Ÿë: port 2(veth0_to_team) entered disabled state [ 693.503626][ T5259] device bridge_slave_0 left promiscuous mode [ 693.530384][ T5259] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.564380][ T5259] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 694.812938][T17089] ================================================================== [ 694.821097][T17089] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 694.828996][T17089] Write of size 48 at addr ffff88807777cc90 by task syz.0.3293/17089 [ 694.837205][T17089] [ 694.839584][T17089] CPU: 1 PID: 17089 Comm: syz.0.3293 Not tainted syzkaller #0 [ 694.847098][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.857213][T17089] Call Trace: [ 694.860616][T17089] [ 694.863608][T17089] dump_stack_lvl+0x188/0x24e [ 694.868350][T17089] ? __lock_acquire+0x7d10/0x7d10 [ 694.873478][T17089] ? show_regs_print_info+0x12/0x12 [ 694.878777][T17089] ? load_image+0x400/0x400 [ 694.883322][T17089] ? __virt_addr_valid+0x465/0x540 [ 694.888479][T17089] ? __bpf_get_stackid+0x6c9/0x920 [ 694.893622][T17089] print_report+0xa8/0x210 [ 694.898082][T17089] kasan_report+0x10b/0x140 [ 694.902652][T17089] ? __bpf_get_stackid+0x6c9/0x920 [ 694.907814][T17089] kasan_check_range+0x235/0x290 [ 694.912792][T17089] ? __bpf_get_stackid+0x6c9/0x920 [ 694.918033][T17089] memcpy+0x3c/0x60 [ 694.921879][T17089] __bpf_get_stackid+0x6c9/0x920 [ 694.926853][T17089] bpf_get_stackid_pe+0x33f/0x400 [ 694.932048][T17089] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 694.937556][T17089] bpf_overflow_handler+0x522/0x7c0 [ 694.942799][T17089] ? bpf_overflow_handler+0xd9/0x7c0 [ 694.948131][T17089] ? perf_swevent_overflow+0x230/0x230 [ 694.953660][T17089] ? ct_irq_exit_irqson+0x113/0x170 [ 694.958897][T17089] ? __perf_event_account_interrupt+0x187/0x280 [ 694.965180][T17089] __perf_event_overflow+0x448/0x610 [ 694.970521][T17089] perf_swevent_event+0x315/0x570 [ 694.975764][T17089] ? perf_tp_event+0xc30/0xc30 [ 694.980570][T17089] ? ___perf_sw_event+0x3ce/0x6e0 [ 694.985642][T17089] ___perf_sw_event+0x49e/0x6e0 [ 694.990541][T17089] ? ___perf_sw_event+0x180/0x6e0 [ 694.995609][T17089] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 695.002204][T17089] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 695.008577][T17089] ? lockdep_hardirqs_on+0x94/0x140 [ 695.013826][T17089] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 695.020025][T17089] __perf_sw_event+0x135/0x260 [ 695.024958][T17089] do_user_addr_fault+0xaea/0xb10 [ 695.030028][T17089] ? trace_hardirqs_off_finish+0x86/0x180 [ 695.035792][T17089] exc_page_fault+0x60/0x100 [ 695.040451][T17089] ? __might_fault+0xa6/0x120 [ 695.045227][T17089] asm_exc_page_fault+0x22/0x30 [ 695.050144][T17089] RIP: 0010:__get_user_4+0x1c/0x30 [ 695.055349][T17089] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 695.075080][T17089] RSP: 0018:ffffc90003ce7d38 EFLAGS: 00050202 [ 695.081269][T17089] RAX: 0000000000000004 RBX: ffffc90003ce7e20 RCX: 99e7e65433fc3100 [ 695.089275][T17089] RDX: ffffffffffffffff RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 695.097280][T17089] RBP: ffffc90003ce7f10 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 695.105368][T17089] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: 0000000000000000 [ 695.113461][T17089] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 695.121472][T17089] perf_copy_attr+0x45/0x850 [ 695.126101][T17089] __se_sys_perf_event_open+0xf5/0x1ec0 [ 695.131786][T17089] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 695.137465][T17089] ? syscall_enter_from_user_mode+0x2a/0x80 [ 695.143395][T17089] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 695.149249][T17089] do_syscall_64+0x4c/0xa0 [ 695.153797][T17089] ? clear_bhb_loop+0x60/0xb0 [ 695.158516][T17089] ? clear_bhb_loop+0x60/0xb0 [ 695.163246][T17089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.169183][T17089] RIP: 0033:0x7f6ff6d9c819 [ 695.173631][T17089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.193265][T17089] RSP: 002b:00007f6ff7ba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 695.201711][T17089] RAX: ffffffffffffffda RBX: 00007f6ff7015fa0 RCX: 00007f6ff6d9c819 [ 695.209799][T17089] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 695.217890][T17089] RBP: 00007f6ff6e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 695.225973][T17089] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 695.233970][T17089] R13: 00007f6ff7016038 R14: 00007f6ff7015fa0 R15: 00007ffc8961ce88 [ 695.241980][T17089] [ 695.245027][T17089] [ 695.247388][T17089] Allocated by task 17089: [ 695.251849][T17089] kasan_set_track+0x4b/0x70 [ 695.256751][T17089] __kasan_kmalloc+0x8e/0xa0 [ 695.261382][T17089] __kmalloc_node+0xb0/0x240 [ 695.266018][T17089] bpf_map_area_alloc+0x47/0xe0 [ 695.270900][T17089] prealloc_elems_and_freelist+0x86/0x1c0 [ 695.276655][T17089] stack_map_alloc+0x390/0x520 [ 695.281454][T17089] map_create+0x534/0x1000 [ 695.285909][T17089] __sys_bpf+0x38b/0x780 [ 695.290189][T17089] __x64_sys_bpf+0x78/0x90 [ 695.294637][T17089] do_syscall_64+0x4c/0xa0 [ 695.299172][T17089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.305268][T17089] [ 695.307616][T17089] The buggy address belongs to the object at ffff88807777cc80 [ 695.307616][T17089] which belongs to the cache kmalloc-cg-64 of size 64 [ 695.321779][T17089] The buggy address is located 16 bytes inside of [ 695.321779][T17089] 64-byte region [ffff88807777cc80, ffff88807777ccc0) [ 695.334906][T17089] [ 695.337252][T17089] The buggy address belongs to the physical page: [ 695.343697][T17089] page:ffffea0001dddf00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7777c [ 695.353874][T17089] memcg:ffff888042cd8201 [ 695.358133][T17089] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 695.365758][T17089] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888017442780 [ 695.374387][T17089] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888042cd8201 [ 695.382996][T17089] page dumped because: kasan: bad access detected [ 695.389450][T17089] page_owner tracks the page as allocated [ 695.395186][T17089] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 16873, tgid 16873 (syz-executor), ts 686950135178, free_ts 686513585974 [ 695.414233][T17089] post_alloc_hook+0x173/0x1a0 [ 695.419074][T17089] get_page_from_freelist+0x1a1e/0x1ab0 [ 695.424658][T17089] __alloc_pages+0x1ec/0x4f0 [ 695.429312][T17089] alloc_slab_page+0x5d/0x160 [ 695.434029][T17089] new_slab+0x87/0x2c0 [ 695.438128][T17089] ___slab_alloc+0xbc6/0x1240 [ 695.442837][T17089] __kmem_cache_alloc_node+0x1a0/0x260 [ 695.448319][T17089] __kmalloc_node+0xa0/0x240 [ 695.452976][T17089] kvmalloc_node+0x6c/0x180 [ 695.457515][T17089] nf_hook_entries_grow+0x309/0x730 [ 695.462742][T17089] __nf_register_net_hook+0x2c9/0x910 [ 695.468150][T17089] nf_register_net_hook+0xae/0x190 [ 695.473309][T17089] nf_register_net_hooks+0x40/0x1a0 [ 695.478535][T17089] brnf_device_event+0x12e/0x1d0 [ 695.483496][T17089] raw_notifier_call_chain+0xcb/0x160 [ 695.488924][T17089] register_netdevice+0x163f/0x1b00 [ 695.494150][T17089] page last free stack trace: [ 695.498862][T17089] free_unref_page_prepare+0x8b4/0x9a0 [ 695.504374][T17089] free_unref_page+0x2e/0x3f0 [ 695.509084][T17089] tlb_finish_mmu+0x140/0x220 [ 695.513790][T17089] exit_mmap+0x384/0x960 [ 695.518075][T17089] __mmput+0x118/0x3c0 [ 695.522193][T17089] exit_mm+0x1fe/0x2d0 [ 695.526293][T17089] do_exit+0x905/0x2480 [ 695.530480][T17089] do_group_exit+0x217/0x2d0 [ 695.535105][T17089] get_signal+0x1272/0x1350 [ 695.539731][T17089] arch_do_signal_or_restart+0xc4/0x1350 [ 695.545490][T17089] exit_to_user_mode_loop+0x70/0x110 [ 695.550809][T17089] exit_to_user_mode_prepare+0xee/0x180 [ 695.556395][T17089] syscall_exit_to_user_mode+0x16/0x40 [ 695.561890][T17089] do_syscall_64+0x58/0xa0 [ 695.566343][T17089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.572468][T17089] [ 695.574817][T17089] Memory state around the buggy address: [ 695.580467][T17089] ffff88807777cb80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 695.588578][T17089] ffff88807777cc00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 695.596705][T17089] >ffff88807777cc80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 695.604881][T17089] ^ [ 695.610305][T17089] ffff88807777cd00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 695.618400][T17089] ffff88807777cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 695.626489][T17089] ================================================================== [ 695.634600][T17089] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 695.641908][T17089] CPU: 1 PID: 17089 Comm: syz.0.3293 Not tainted syzkaller #0 [ 695.649592][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 695.659771][T17089] Call Trace: [ 695.663091][T17089] [ 695.666102][T17089] dump_stack_lvl+0x188/0x24e [ 695.670945][T17089] ? memcpy+0x3c/0x60 [ 695.674987][T17089] ? show_regs_print_info+0x12/0x12 [ 695.680381][T17089] ? load_image+0x400/0x400 [ 695.684929][T17089] panic+0x2e5/0x730 [ 695.688950][T17089] ? bpf_jit_dump+0xd0/0xd0 [ 695.693836][T17089] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 695.699767][T17089] ? _raw_spin_unlock+0x40/0x40 [ 695.704831][T17089] ? print_memory_metadata+0x314/0x400 [ 695.710428][T17089] check_panic_on_warn+0x80/0xa0 [ 695.715414][T17089] ? __bpf_get_stackid+0x6c9/0x920 [ 695.720555][T17089] end_report+0x66/0x110 [ 695.724926][T17089] kasan_report+0x118/0x140 [ 695.729471][T17089] ? __bpf_get_stackid+0x6c9/0x920 [ 695.734620][T17089] kasan_check_range+0x235/0x290 [ 695.739603][T17089] ? __bpf_get_stackid+0x6c9/0x920 [ 695.744751][T17089] memcpy+0x3c/0x60 [ 695.748596][T17089] __bpf_get_stackid+0x6c9/0x920 [ 695.753597][T17089] bpf_get_stackid_pe+0x33f/0x400 [ 695.758663][T17089] bpf_prog_ceda4e53fcf21ae1+0x28/0x40 [ 695.764159][T17089] bpf_overflow_handler+0x522/0x7c0 [ 695.769422][T17089] ? bpf_overflow_handler+0xd9/0x7c0 [ 695.774775][T17089] ? perf_swevent_overflow+0x230/0x230 [ 695.780281][T17089] ? ct_irq_exit_irqson+0x113/0x170 [ 695.785530][T17089] ? __perf_event_account_interrupt+0x187/0x280 [ 695.791814][T17089] __perf_event_overflow+0x448/0x610 [ 695.797147][T17089] perf_swevent_event+0x315/0x570 [ 695.802211][T17089] ? perf_tp_event+0xc30/0xc30 [ 695.807106][T17089] ? ___perf_sw_event+0x3ce/0x6e0 [ 695.812183][T17089] ___perf_sw_event+0x49e/0x6e0 [ 695.817174][T17089] ? ___perf_sw_event+0x180/0x6e0 [ 695.822236][T17089] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 695.828699][T17089] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 695.834919][T17089] ? lockdep_hardirqs_on+0x94/0x140 [ 695.840156][T17089] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 695.846351][T17089] __perf_sw_event+0x135/0x260 [ 695.851154][T17089] do_user_addr_fault+0xaea/0xb10 [ 695.856217][T17089] ? trace_hardirqs_off_finish+0x86/0x180 [ 695.862002][T17089] exc_page_fault+0x60/0x100 [ 695.866625][T17089] ? __might_fault+0xa6/0x120 [ 695.871358][T17089] asm_exc_page_fault+0x22/0x30 [ 695.876247][T17089] RIP: 0010:__get_user_4+0x1c/0x30 [ 695.881404][T17089] Code: 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 48 ba fd ef ff ff ff 7f 00 00 48 39 d0 0f 83 90 00 00 00 48 19 d2 48 21 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 90 90 48 ba [ 695.901047][T17089] RSP: 0018:ffffc90003ce7d38 EFLAGS: 00050202 [ 695.907143][T17089] RAX: 0000000000000004 RBX: ffffc90003ce7e20 RCX: 99e7e65433fc3100 [ 695.915137][T17089] RDX: ffffffffffffffff RSI: ffffffff8a8c2220 RDI: ffffffff8adf0d20 [ 695.923131][T17089] RBP: ffffc90003ce7f10 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 695.931130][T17089] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: 0000000000000000 [ 695.939319][T17089] R13: 0000000000000004 R14: dffffc0000000000 R15: 0000000000000000 [ 695.947451][T17089] perf_copy_attr+0x45/0x850 [ 695.952104][T17089] __se_sys_perf_event_open+0xf5/0x1ec0 [ 695.957693][T17089] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 695.963380][T17089] ? syscall_enter_from_user_mode+0x2a/0x80 [ 695.969412][T17089] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 695.975117][T17089] do_syscall_64+0x4c/0xa0 [ 695.979674][T17089] ? clear_bhb_loop+0x60/0xb0 [ 695.984391][T17089] ? clear_bhb_loop+0x60/0xb0 [ 695.989103][T17089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.995042][T17089] RIP: 0033:0x7f6ff6d9c819 [ 695.999509][T17089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.019180][T17089] RSP: 002b:00007f6ff7ba7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 696.027644][T17089] RAX: ffffffffffffffda RBX: 00007f6ff7015fa0 RCX: 00007f6ff6d9c819 [ 696.035744][T17089] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 696.043784][T17089] RBP: 00007f6ff6e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 696.051783][T17089] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 696.059793][T17089] R13: 00007f6ff7016038 R14: 00007f6ff7015fa0 R15: 00007ffc8961ce88 [ 696.067802][T17089] [ 696.071517][T17089] Kernel Offset: disabled [ 696.075881][T17089] Rebooting in 86400 seconds..