last executing test programs: 10m23.106481184s ago: executing program 3 (id=493): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd055, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2a, 0x2, 0x0) close(r1) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x10}}, @ip_retopts={{0x50, 0x0, 0x7, {[@cipso={0x86, 0xfffffffffffffd68, 0x1, [{0x6, 0x5, "d59e81"}, {0x0, 0x2}, {0x1, 0x11, "2f7df745ef622464fff28eb6a6affd"}, {0x6, 0x2}, {0x0, 0x3, 'M'}]}, @lsrr={0x83, 0x1b, 0xa4, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0xa}]}]}}}], 0x60}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000072000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xcc0, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x9, &(0x7f0000000800), 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x1a600, 0x2, 0xfffffffe, 0x9, 0x8, 0x0, 0xc9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sysnet/ipv4\b\x00\x03\x00\x00\x00\x00\x00\x00\x00ze\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x00'/59}, 0x30) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x1}], 0x1}, 0x4845) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socket$kcm(0x2a, 0x2, 0x0) 10m22.18119818s ago: executing program 3 (id=490): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0xb9da}, 0x10}, 0x94) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x61, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r2, 0x0, 0x9b, 0x1000, &(0x7f0000000780)="b68bdf8054f8d42936084c0e274ab596736954ea2df135c7d1477d76c3c1b024bb43ce8c29239bcbd221188a9e38d88a0f0382c75b5453f46c20e0928739a3ea729b191b8372f0da59722983f259d5df6303f08c4fefa55ef9cf767d72cd4a24f2bd378d2f2a6a53c4553b170e3ce9e6b24670cc12545aff110e9d3ef7a8ef86d3dd3cbbd078f01fa85bbb3a7e0c826cd889ac2b2e060eae461486", &(0x7f0000001400)=""/4096, 0x9, 0x0, 0x5f, 0xea, &(0x7f0000000840)="00727aa4ea714e12b698331c9671e11dc5778b0a18cba40cf8567bff056a5c9e5507e28f4d35b774a1d485beb418c4da1031e3f8961401fad9b8c6ac11fedb76885346212710b91a1679333ba73dd8a4f33063e68b2853d2b58128c3b96527", &(0x7f0000000900)="f769b7723830a6eedd99125efe1159d630bf49bfc7c18b53b2ea6eeb56092031011301726eb4cd01d6e368776a489fe292aa3c07a0ca91bff36834e9c56d472f96ff1602d967eba3734c771f6a472e75ffec4df162edcc9450fa54d2cb25a56a32d2df84b50e276649f6ace89c4eb59bc469e35cb0c103a5b54b802328d5b1df96b1151f8dd92d12e83c1f1c7cd1ff98972e6d3ade682e779e174c0eef016c6e623270705aa07da86771fd76547a46effbb189e41eb3a78475c0f5b9465ddbc0a48788c2027ee1ab7b0923258b370e4da551d03f60c866484b25526d842ca28839d34d0dd5a34739fa2c", 0x3, 0x0, 0x1}, 0x50) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="e2f4ef7fde4116e0a1c04c7015b120b8ae96b15716afafbd4cf88be1717a30120b97759aa6e6cd0c96c35199f9b6d9bb480330e1646ad5de6af40016598b668b49505cd27d85df98689e2df4bea1e437f0e11923e3dbc39911c3c5020efed958492b78d44dea4db824", 0x69}, {&(0x7f0000000380)="8c4db8da0d318e9c3609ea974315d53ad9c15f55737d4669b108825214975bdd838f69b91df96abe74dce566e13e41553305fd5cd31e9104de5c9613b67ab26408fc54fa82021ff3", 0x48}, {&(0x7f0000000180)}, {&(0x7f0000000600)="3e0a3f26bfac349bbb76bff7de6ae5883ff2871ade25e543a5ebda430baae2f9d5636ad0620584512cab030f12f47e396ada3a7a1af0cedb99567b8c74e5b43f91b498ffd1ba2a65c0857059151e0674aaf468cb64cddcb7099f8b3cb10311f09a366af8b54b3e3f162f1fa60ec4de222eb06a1cab738443d63e685384295bd387b54ecc6dc478a613e6ef8936e4faac6594cedd8dd822d47bbefa2dfb7daa37dad5b3258e241f20da70f89e6f41f22b10f2a777a094b86b67c77807f05476c0a14c5f4266622f1f0e0fce0c0759129f3ea7b60b2890c0f2f9052a806205de0398d91bce797a84312307ccb323f4ae9ec5", 0xf1}], 0x4, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @broadcast}}}], 0x20}, 0x48090) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000240), 0x0}, 0x20) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r8, 0x4) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x1000000000000005, 0x0) 10m22.103142594s ago: executing program 3 (id=491): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xcc3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x90}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x2194, @empty, 0xe}}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000580)="bcfbd8e3cbdcc6", 0x7}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) 10m18.994828147s ago: executing program 3 (id=501): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000000000"], 0x0, 0x96}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = getpid() bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/time\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x32, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r4 = socket$kcm(0x2, 0x922000000001, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0xa, 0x2, 0x88) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x1) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x891f, &(0x7f0000000080)) recvmsg$kcm(r5, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) 10m18.016720375s ago: executing program 3 (id=505): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41}, 0x5e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000180), 0xfff, r0, 0x200000000000000}, 0x38) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000b40)={0x0, 0x0}) 10m17.896883671s ago: executing program 3 (id=506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000100), 0xc}}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5dd, 0x9}, 0x101000, 0x7, 0x8, 0x3, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x10003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000100), 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18028abf0100000000000000000000008500000087000000458b3d5633578651"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18028abf0100000000000000000000008500000087000000458b3d5633578651"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500030020"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500030020"}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x49c269f8, @private0}, 0x80, 0x0}, 0x240000c1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x34040, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000300)={'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb3e7b75981a190ad}}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000300040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000300040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) socketpair(0x1, 0xa, 0x0, &(0x7f0000000340)) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) (async) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) 10m2.613496984s ago: executing program 32 (id=506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x3a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000100), 0xc}}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5dd, 0x9}, 0x101000, 0x7, 0x8, 0x3, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x10003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000100), 0x120) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18028abf0100000000000000000000008500000087000000458b3d5633578651"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18028abf0100000000000000000000008500000087000000458b3d5633578651"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500030020"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500030020"}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000080000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x49c269f8, @private0}, 0x80, 0x0}, 0x240000c1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x34040, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000300)={'vcan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb3e7b75981a190ad}}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000300040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000300040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) socketpair(0x1, 0xa, 0x0, &(0x7f0000000340)) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) (async) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) 19.670652857s ago: executing program 2 (id=3942): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) gettid() socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d3", 0xa}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 19.20976061s ago: executing program 2 (id=3945): perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x41, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006", 0x21}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x71e7, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0xffff, 0x1, 0x80, 0x5}, {0x8000, 0x12, 0x4, 0x8000}, {0x9, 0x5, 0x3, 0x1}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0xfffd}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000", @ANYBLOB="c400000000", @ANYRES32=r6, @ANYRES32=r7], 0x50) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 19.101179015s ago: executing program 1 (id=3946): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000140)="882f1242a03c3f98722780b605a7", 0x0, 0x9909, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000900)=""/44) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x48, &(0x7f0000000100)=r6, 0x120) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3fe}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) 18.917135755s ago: executing program 4 (id=3947): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], &(0x7f0000000340)=""/142, 0x4e, 0xfeaf, 0x1}, 0x20) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6b, &(0x7f0000000000)=r3, 0x1c) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) 18.638927098s ago: executing program 0 (id=3949): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff4}, 0x0, 0xc8, 0x0, 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3e80}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, 0x0, 0xfdef) 18.517655924s ago: executing program 0 (id=3950): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bf50000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x8000}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180600080000000000000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r3}}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000040)=0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703", 0x44}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 18.435398219s ago: executing program 2 (id=3951): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) gettid() socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400090000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a891588d818a0afc0b3116a130974cac0615232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f84e4272d2cc72d4e771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de457f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5bfc182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456cd7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b4"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 18.321185594s ago: executing program 1 (id=3953): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0xffffffab}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xed, 0x6}, 0x880, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff00b702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, 0x0, 0x52cc) 17.9903086s ago: executing program 4 (id=3954): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x33, 0x0, 0x0) openat$tun(0xffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) 17.672545036s ago: executing program 4 (id=3955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0xc, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xffffffa4, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="000000003d000000000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000002280)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000000b40)=""/113, 0x81}, {&(0x7f0000000c00)=""/183, 0xb7}, {&(0x7f00000020c0)=""/152, 0xb0}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/16, 0x10}, {&(0x7f0000001dc0)=""/196, 0xc4}, {&(0x7f0000001ec0)=""/171, 0xab}, {&(0x7f0000001f80)=""/133, 0x85}, {&(0x7f0000000940)=""/80, 0x50}, {&(0x7f0000000840)=""/254}, {&(0x7f00000003c0)=""/2}, {&(0x7f00000022c0)=""/4096}], 0x9, &(0x7f0000002180)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x3020e0bc9961fc2c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000240), &(0x7f0000000340)=r2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x71, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x101000, 0xb, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) sendmsg$inet(r10, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441505"], 0x30}, 0x7e8166965e22236a) 17.59650945s ago: executing program 0 (id=3956): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) gettid() socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d3", 0xa}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 17.561338362s ago: executing program 5 (id=3957): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x24048094) sendmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x20040010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000fdfbffffffffffff00850000006100000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="d2ff03076003006d2c9e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x23, 0x5, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040008004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004885) 17.535417773s ago: executing program 2 (id=3958): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="c534598306000000ff0f00000000000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000050000000100"/28], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8917, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b1a620398a4529b1cd12364b98f84b8a15eb30d84d91dc2cb9165708f24f896bccc0e3a222acd13202a8cfca70039d081c82c5289803c0b8eebfc1e48cc61a4ef502d64e5685bc2f99805007596c4627618cdadad9a86c59c5638f1c8f60b6e529abec3317170213a928b162d885ea71063e2ea570ed84f86aa764cff1ba896378e76a11e121b681bfa3848a0b7ae257f9385ff96dc5e2f46381e0355515051a6b67d86abe5b1f5ad55b7f2fd1142b284", @ANYBLOB="02e15b5429c779211062629945d59e2e78c542c47e809fd15ed264c56dbb37974560f383f8275c4ae81770184812a3c70a3540efa12d8b15c770c7b35608c51a7afcbf2e68544e87bb9fb058b4aeb49ddca6ee235c7bd6315508fe40f6cfc4f20fe311cb2919c65907a6571d2f81b5e6da04c2d05c56315d7fe5ef26ab65d0c932b25ced", @ANYRES64=r3, @ANYRES16=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0xfffffffffffffdfe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, &(0x7f0000001600), 0x0}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000100000400000d3d000000bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x0) 17.463317106s ago: executing program 1 (id=3959): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006babda3fe3d86e17aa0a046b5a6c1d0048007ea60864160af36504001a003800317c39aa50c82c2b76111d001931a0e69ee517d34460bca705251e6182949a3651f60a84c9f4218e13fbb277ff2fd31be8d0c2db330b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000015c0)=""/227, 0xe3}, {&(0x7f0000000ec0)=""/243, 0xf3}, {&(0x7f0000003140)=""/4058, 0xfda}, {&(0x7f0000000c00)=""/248, 0xf8}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f00000005c0)=""/185, 0xb9}, {&(0x7f0000000900)=""/235, 0xeb}, {&(0x7f0000000e40)=""/21, 0x15}, {&(0x7f0000000fc0)=""/195, 0xc3}, {&(0x7f0000000500)=""/155, 0x9b}, {&(0x7f0000000880)=""/64, 0x40}, {&(0x7f0000001140)=""/71, 0x47}, {&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f00000011c0)=""/146, 0x92}, {&(0x7f00000014c0)=""/242, 0xf2}, {&(0x7f0000000000)=""/28, 0x1c}], 0x10}, 0x40000000) (fail_nth: 3) 17.431582768s ago: executing program 4 (id=3960): perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd2b4, 0x22a0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x4, 0x2, 0x1, 0x0, 0x9, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d3ec66ecc053c543da2e2e", @ANYRES32], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x8, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x7fff, 0x7fffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={&(0x7f0000000200), 0x7}, 0x0, 0x4, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x78a97ff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=@framed, &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x142, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r0, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x100}) socketpair(0x2, 0x6, 0xe, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81d080900000000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d17a54ef5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f00feffff16ac9609f4fb00000000000000000000000000000000000000000000000000e19bdee3c4ead119f9ae2aa728e2fd1b", 0xd8}], 0x1}, 0x4004) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008050) 17.343826682s ago: executing program 0 (id=3961): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000d000000cd0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce6207"], 0xfe1b) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) close(r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000004000000000000000400"/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f00000002c0)=""/175, 0xaf}], 0x3, &(0x7f0000000380)=""/193, 0xc1}, 0x40000064) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x3d9}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005000000400000"], 0x0, 0x26}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.228217228s ago: executing program 5 (id=3962): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex=r6, 0xd, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.950888022s ago: executing program 1 (id=3963): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={0x0, 0x8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000140)="882f1242a03c3f98722780b605a7", 0x0, 0x9909, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000900)=""/44) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_config_ext={0x407fff, 0xaea}, 0x14b3d, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r5, 0x29, 0x48, &(0x7f0000000100)=r6, 0x120) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3fe}, 0x80, &(0x7f0000002640)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) 16.901278384s ago: executing program 4 (id=3964): perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x41, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006", 0x21}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x71e7, 0x830d}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)}], 0x1}, 0x41) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0xffff, 0x1, 0x80, 0x5}, {0x8000, 0x12, 0x4, 0x8000}, {0x9, 0x5, 0x3, 0x1}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x5, &(0x7f0000000440)=@raw=[@alu={0x7, 0x0, 0x0, 0xb, 0x7, 0xffffffffffffffcf, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x9, 0x6, 0x50, 0x10}, @generic={0xf7, 0x1, 0x2, 0x0, 0x3}, @generic={0x16, 0x0, 0x5, 0x5, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000004c0)='GPL\x00', 0x4, 0x6c, &(0x7f0000000500)=""/108, 0xc1000, 0x11, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x2, 0xe, 0x7}, 0x10, 0x0, r3, 0x0, &(0x7f0000000700)=[r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) 16.78249075s ago: executing program 2 (id=3965): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.78130884s ago: executing program 0 (id=3966): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80d1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bf50000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x8000}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180600080000000000000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x11, r3}}, @exit], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$kcm(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000040)=0x4) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703", 0x44}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 16.317001653s ago: executing program 5 (id=3967): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff4}, 0x0, 0xc8, 0x0, 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/4081, 0xff1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002c80)={&(0x7f0000002c40), &(0x7f0000002e80)=""/262, &(0x7f0000002d80), &(0x7f0000002e00)="f583d3de8d35cd35abe065c140d4c9ad4e3a18b3ea84da153aeb", 0xafe5, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$kcm(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x29, 0x7, 0x0) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22e0ee00000000000000000000000000007fc5f603ff65ec5deb004298f479a79d93014b8e7781"], 0xfdef) 16.263246766s ago: executing program 4 (id=3968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000800800"/20, @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500d1464706061466e00aa73c7a6200000200000001000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f0000000180)="4f1127f6c81207d0a807a53cb707c08f5c79feb00fb1219c230327a1177ab5468fba060ab29afd6789a31198a531cfb395441d822647437a3968c3838f065c589dc15b3187330c5ef3575630c278f2cea5e63b8aa724ee94623cc0184980612728a1477560dad9af67e435fa17ea801e181e9ab8af579d9cd531937d49814ccca58691e95f34eb61d16e5eef07b7250e36979c5a7049cb647b85d33c3f4d599d599a187d", &(0x7f0000000300)=""/186, 0x4}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad0000009500000000000000a905e16edb7af50b4d83e695dcb6133fdd391e0e5f23638df23bbcbb67d7c46939ae"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000240)=""/146}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400814002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/12], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) r4 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a8f27e02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d988c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438a58c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c38680a377f8c26e6e382067f690089f34b13ee0633a171c7918401acd4575f1443815854f775308c083ff4f4046cfca8bca48e6db6b211113c06797722230af92290231a0f02e247cf96876257dac9ff0b8f07ff5916a8ccd3f15b389d34520f074c6f006e0383280bf0b9765c995ef1e696a1da41d9372a1c9d85f1a83b6213b5fb236fbeda8fb90dee70ca3cfc0833741a0e9341ab4dee09669b832840fef5a2bbebd5957503656c445a428efc5711d1c66093b360c63e63e91cb871f8dc43a915ec87be492daec18847de7032d5c97d0296a1fa97d17f"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r3, r5, 0x4}, 0x10) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000004020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r8) 16.215767028s ago: executing program 0 (id=3969): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0xffffffab}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xed, 0x6}, 0x880, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff00b702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 16.18545355s ago: executing program 2 (id=3970): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000028e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x8, 0x0, 0x0}}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x16, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x10081, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4400, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)="465a9252", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000977a43b88b7ece00000000000000"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000040)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4000000) openat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) 16.082937885s ago: executing program 5 (id=3971): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) gettid() socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d3", 0xa}], 0x1}, 0x40000) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 16.081699795s ago: executing program 1 (id=3972): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001840)={r0, 0x20, &(0x7f0000001800)={&(0x7f0000000780)=""/118, 0x76, 0x0, &(0x7f0000000800)=""/4096, 0x1000}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x15, 0x24, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x527e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0x6, 0x5, 0x6, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x2, 0x1, 0xf, 0x7, 0x18, 0x8}, @generic={0x9, 0x7, 0x2, 0x5421, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x7f, 0xe7, &(0x7f00000002c0)=""/231, 0x40f00, 0x5, '\x00', r2, @sk_reuseport=0x28, r0, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xe, 0xcc93, 0x80000001}, 0x10, r3, r0, 0x3, &(0x7f0000001880)=[r0, r0], &(0x7f00000018c0)=[{0x1, 0x1, 0x1, 0x7}, {0x3, 0x5, 0xc, 0xa}, {0x1, 0x2, 0x2, 0x9}], 0x10, 0xe9e}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a40)={{r0, 0xffffffffffffffff}, &(0x7f00000019c0), &(0x7f0000001a00)=r4}, 0x20) (async) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002c00)=@o_path={&(0x7f0000002bc0)='./file0\x00', 0x0, 0xc000, r0}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d00)={0x18, 0x9, &(0x7f0000001a80)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xd4}, @call={0x85, 0x0, 0x0, 0x70}, @initr0={0x18, 0x0, 0x0, 0x0, 0x704f3201, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000001b00)='GPL\x00', 0x0, 0x1000, &(0x7f0000001b40)=""/4096, 0x40f00, 0x28, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000002b40)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000002b80)={0x3, 0x5, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002c40)=[r6, r1, r1, r1, r1, r0, r0, r1, r4], &(0x7f0000002c80)=[{0x4, 0x1, 0xe, 0xd}, {0x4, 0x5, 0xb, 0x5}, {0x3, 0x4, 0xa, 0x7}, {0x5, 0x3, 0x0, 0x4}, {0x5, 0x1, 0xa}, {0x5, 0x1, 0xe, 0x5}], 0x10, 0x5}, 0x94) r8 = perf_event_open(&(0x7f0000002dc0)={0x1, 0x80, 0x4, 0xf, 0x2, 0x81, 0x0, 0x2, 0x86, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x3}, 0x1046, 0x5, 0x9, 0x7, 0x3, 0x1ff, 0x4, 0x0, 0xdf4, 0x0, 0x3b6b0af2}, 0x0, 0x9, r0, 0xe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, &(0x7f0000002e40)={0x3, 0x80, 0x80, 0x4, 0x3, 0xe2, 0x0, 0x40, 0x200, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x900, 0x2, @perf_config_ext={0x401, 0x1800}, 0x4, 0xc00000, 0x1ff, 0x5, 0x4, 0x8000, 0x5, 0x0, 0x2, 0x0, 0x100000001}) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000002ec0), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002f40)=@o_path={&(0x7f0000002f00)='./file0\x00', 0x0, 0x18, r7}, 0x18) sendmsg$kcm(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f0000002f80), 0x0, &(0x7f0000002fc0)=[{0x30, 0xb1, 0xfee1, "3b4a6946e22ad69ac8b3666e4c03f461ed0827e5fd854c0ece97ee"}, {0x78, 0x107, 0xfa75, "3b27bf0af0de48d07cf8d0cc5094c9785af8846b705b14854bddffaaa67df05dc03927f3f0b18b76f747a77488bd48757f17b6a4a0663b285a9b1f13aa4fb7bf9db21c403106fc0cba5e3d5b6d0a3860da3851c782a4d7d49d8bb6a6479adf8aa2fa6fb8bedf80"}, {0x90, 0x112, 0xfffffffc, "f7f4aaa95d97b8b1fd69e63e119e4ee8ee90329ce262f75ac6e1b16f5a3df45b6abc7ad10c149accbb20d9415d4b5008b2ecdbe9a2934ebff12a88a3e3205dfb93493a2eb4985100a176a3fa76fb7ce35d786e9bdaa4bb662a0022a751628b84bce585952d924bf822f64c1868583c4b5c360b6c236f2dda1cdc14b31bd773"}], 0x138}, 0x4040004) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003440)={0x11, 0x20, &(0x7f0000003140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfa47}, [@jmp={0x5, 0x0, 0x1, 0x6, 0x2, 0x100, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff}, @printk={@lx}, @ldst={0x1, 0x3, 0x3, 0x9, 0x0, 0x80, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}]}, &(0x7f0000003240)='GPL\x00', 0x8, 0x74, &(0x7f0000003280)=""/116, 0x40f00, 0x28, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000003300)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000003340)={0x2, 0x7, 0x6, 0xffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003380)=[r0], &(0x7f00000033c0)=[{0x3, 0x2, 0x4, 0x4}, {0x2, 0x4, 0xc, 0x5}, {0x5, 0x2, 0x6, 0x7}, {0x5, 0x1, 0x4}, {0x5, 0x2, 0x9, 0x5}], 0x10, 0x4}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003500)={r0, r4, 0x4, r9}, 0x10) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003540)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x200, '\x00', 0x0, r0, 0x1, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003640)={{r10}, &(0x7f00000035c0), &(0x7f0000003600)='%+9llu \x00'}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000003680)=0x2) (async) bpf$LINK_DETACH(0x22, &(0x7f00000036c0)=r0, 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000003700), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000003740), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000003780), 0x4) (async) unlink(&(0x7f00000037c0)='./file0\x00') (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003ac0)={r4, 0xe0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000003800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000003840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003880)=[0x0], 0x0, 0xf5, &(0x7f00000038c0)=[{}, {}], 0x10, 0x10, &(0x7f0000003900), &(0x7f0000003940), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000003980)}}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003b00)) (async, rerun: 64) syz_clone(0x80210000, &(0x7f0000003b40)="7ee9aa595150f65058f5294bf6a1975ee242b2b2f02d0e7cf10b9bcf1ba8340d5bc124509a67323afce616aeacf59529deb37ab8e1e6dcbb0e68b6bd11805516608f37dbb57c98fcf77b6733cfcd35d34f6b5e9c8dbef3b93f49b0112b8790984a7dcc0ba209513061f998dcb4038f73a7fd6f1971034d9bab2d890252c04a24468b04078d7a02ce1c8a062ba995aa126586d8d4c8993b99b3a3f7abf6a1d1449441ed96afa6c10adfaf79d2eab5e110f5", 0xb1, &(0x7f0000003c00), &(0x7f0000003c40), &(0x7f0000003c80)="c7e48c6793ae52f63a077c07ceb3630d15cce78476d726079be1ea71e09a3ad4a74f178092f0d1c869b39a7271678a12fdb92af394c55938a7431ad2b53b8d7b9409c52614dbf6a60c4dc600edce94") (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003e40)={&(0x7f0000003d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@union={0x7, 0x4, 0x0, 0x5, 0x0, 0x80000000, [{0x10, 0x5, 0xf3e}, {0xe, 0x4, 0x200}, {0x5, 0x1, 0x8}, {0x3, 0x2, 0x10000}]}, @typedef={0xd}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x1}]}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4, 0x2}, {0x3, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x61, 0x2e, 0xe]}}, &(0x7f0000003dc0)=""/97, 0x97, 0x61, 0x0, 0x91ae}, 0x28) (async) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000003e80)=r7) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004140)={0x6, 0x1c, &(0x7f0000003ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4885, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000003fc0)='syzkaller\x00', 0x19, 0x71, &(0x7f0000004000)=""/113, 0x41100, 0x20, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000004080)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000040c0)={0x2, 0x9, 0x234c, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004100)=[r10, r6], 0x0, 0x10, 0x3}, 0x94) 15.704337714s ago: executing program 1 (id=3973): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xcf, &(0x7f0000000640)=""/207, 0x0, 0x48}, 0x94) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="03ff8d000100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xb, 0x0, 0x8, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg(r3, 0x0, 0x12003) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="188154405603c7070500000000000000000000007112188d75be37e9d2793a324100f3e3"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00', @random="0e7298f95446"}) 15.703872824s ago: executing program 5 (id=3974): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.468947215s ago: executing program 5 (id=3975): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="c534598306000000ff0f00000000000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000050000000100"/28], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8917, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b1a620398a4529b1cd12364b98f84b8a15eb30d84d91dc2cb9165708f24f896bccc0e3a222acd13202a8cfca70039d081c82c5289803c0b8eebfc1e48cc61a4ef502d64e5685bc2f99805007596c4627618cdadad9a86c59c5638f1c8f60b6e529abec3317170213a928b162d885ea71063e2ea570ed84f86aa764cff1ba896378e76a11e121b681bfa3848a0b7ae257f9385ff96dc5e2f46381e0355515051a6b67d86abe5b1f5ad55b7f2fd1142b284", @ANYBLOB="02e15b5429c779211062629945d59e2e78c542c47e809fd15ed264c56dbb37974560f383f8275c4ae81770184812a3c70a3540efa12d8b15c770c7b35608c51a7afcbf2e68544e87bb9fb058b4aeb49ddca6ee235c7bd6315508fe40f6cfc4f20fe311cb2919c65907a6571d2f81b5e6da04c2d05c56315d7fe5ef26ab65d0c932b25ced", @ANYRES64=r3, @ANYRES16=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0xfffffffffffffdfe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, &(0x7f0000001600), 0x0}, 0x20) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) close(r6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000100000400000d3d000000bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x0) 541.826804ms ago: executing program 33 (id=3969): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0xffffffab}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xed, 0x6}, 0x880, 0x0, 0x0, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff00b702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 439.926079ms ago: executing program 34 (id=3973): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x5, 0xcf, &(0x7f0000000640)=""/207, 0x0, 0x48}, 0x94) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="03ff8d000100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d71, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xb, 0x0, 0x8, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmsg(r3, 0x0, 0x12003) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="188154405603c7070500000000000000000000007112188d75be37e9d2793a324100f3e3"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00', @random="0e7298f95446"}) 379.701531ms ago: executing program 35 (id=3970): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000028e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67, 0x8, 0x0, 0x0}}, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x16, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x10081, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4400, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00\x00\x00\x00\x00\x00\x00\x80=\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)="465a9252", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000020200000000002e2e5f"], 0x0, 0x44}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000977a43b88b7ece00000000000000"], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000040)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}, 0x4000000) openat$cgroup(r2, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) 279.615506ms ago: executing program 36 (id=3968): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000800800"/20, @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500d1464706061466e00aa73c7a6200000200000001000000000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r0, &(0x7f0000000180)="4f1127f6c81207d0a807a53cb707c08f5c79feb00fb1219c230327a1177ab5468fba060ab29afd6789a31198a531cfb395441d822647437a3968c3838f065c589dc15b3187330c5ef3575630c278f2cea5e63b8aa724ee94623cc0184980612728a1477560dad9af67e435fa17ea801e181e9ab8af579d9cd531937d49814ccca58691e95f34eb61d16e5eef07b7250e36979c5a7049cb647b85d33c3f4d599d599a187d", &(0x7f0000000300)=""/186, 0x4}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x7, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000200000005000000000000009500007b0000000085000000ad0000009500000000000000a905e16edb7af50b4d83e695dcb6133fdd391e0e5f23638df23bbcbb67d7c46939ae"], &(0x7f0000000000)='GPL\x00', 0x3, 0x92, &(0x7f0000000240)=""/146}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400814002000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/12], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) r4 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r3, r5, 0x4}, 0x10) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000004020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x6, 0x4, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r8) 0s ago: executing program 37 (id=3975): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="c534598306000000ff0f00000000000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000050000000100"/28], 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8917, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b1a620398a4529b1cd12364b98f84b8a15eb30d84d91dc2cb9165708f24f896bccc0e3a222acd13202a8cfca70039d081c82c5289803c0b8eebfc1e48cc61a4ef502d64e5685bc2f99805007596c4627618cdadad9a86c59c5638f1c8f60b6e529abec3317170213a928b162d885ea71063e2ea570ed84f86aa764cff1ba896378e76a11e121b681bfa3848a0b7ae257f9385ff96dc5e2f46381e0355515051a6b67d86abe5b1f5ad55b7f2fd1142b284", @ANYBLOB="02e15b5429c779211062629945d59e2e78c542c47e809fd15ed264c56dbb37974560f383f8275c4ae81770184812a3c70a3540efa12d8b15c770c7b35608c51a7afcbf2e68544e87bb9fb058b4aeb49ddca6ee235c7bd6315508fe40f6cfc4f20fe311cb2919c65907a6571d2f81b5e6da04c2d05c56315d7fe5ef26ab65d0c932b25ced", @ANYRES64=r3, @ANYRES16=r2], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0xfffffffffffffdfe) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, &(0x7f0000001600), 0x0}, 0x20) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) close(r6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000100000400000d3d000000bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x0) kernel console output (not intermixed with test programs): om eth0 [ 612.196101][T13696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 612.251862][T13696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.325421][T13696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.522672][T13780] netlink: 'syz.2.3049': attribute type 10 has an invalid length. [ 612.543122][T13780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3049'. [ 612.691459][T13696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.726017][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 612.746333][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 612.805263][T13696] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.834243][T13785] bond0: (slave bridge0): Error: Slave device does not support XDP [ 612.860123][T13789] netlink: 'syz.2.3051': attribute type 10 has an invalid length. [ 612.932369][T13784] delete_channel: no stack [ 612.937606][T13529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 612.946654][T13529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 612.999600][T13529] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.006830][T13529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.049091][T13529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 613.058995][T13529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 613.072564][T13529] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.079868][T13529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.105389][T13529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 613.131102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 613.156761][T13790] netlink: 'syz.5.3053': attribute type 10 has an invalid length. [ 613.167205][T13790] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3053'. [ 613.193696][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 613.236816][T13801] netlink: 'syz.4.3055': attribute type 10 has an invalid length. [ 613.267774][T13792] device syzkaller0 entered promiscuous mode [ 613.285706][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 613.299370][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 613.355691][T13793] delete_channel: no stack [ 613.360737][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 613.366781][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 613.391425][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 613.427944][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 613.440500][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.454861][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.475469][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.537749][T13807] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 613.544137][T13807] syzkaller0: linktype set to 769 [ 613.568152][T13696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.711960][T13803] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 613.969815][T13817] netlink: 'syz.4.3061': attribute type 10 has an invalid length. [ 614.042275][T13817] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3061'. [ 614.108616][T13817] device team0 entered promiscuous mode [ 614.114582][T13817] device team_slave_0 entered promiscuous mode [ 614.138289][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 614.158874][T13817] device team_slave_1 entered promiscuous mode [ 614.177475][T13817] bridge0: port 3(team0) entered blocking state [ 614.194097][T13817] bridge0: port 3(team0) entered disabled state [ 614.204072][T13827] netlink: 'syz.5.3063': attribute type 4 has an invalid length. [ 614.227993][T13827] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3063'. [ 614.282127][T13817] bridge0: port 3(team0) entered blocking state [ 614.289122][T13817] bridge0: port 3(team0) entered forwarding state [ 614.497208][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.521948][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 614.568959][T13696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.685634][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 614.702155][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 614.714416][T13834] netlink: 'syz.4.3066': attribute type 10 has an invalid length. [ 614.744216][T13833] delete_channel: no stack [ 614.766168][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 614.798429][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 614.810723][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 614.848542][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 614.892537][T13696] device veth0_vlan entered promiscuous mode [ 614.919539][T13839] netlink: 'syz.4.3068': attribute type 10 has an invalid length. [ 614.975032][T13696] device veth1_vlan entered promiscuous mode [ 614.995158][T13838] delete_channel: no stack [ 615.025570][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 615.078429][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 615.132191][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 615.192173][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 615.230433][T13841] netlink: 'syz.2.3067': attribute type 10 has an invalid length. [ 615.256958][T13841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3067'. [ 615.287024][T13696] device veth0_macvtap entered promiscuous mode [ 615.316885][T13696] device veth1_macvtap entered promiscuous mode [ 615.403133][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 615.413873][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 615.445748][T13848] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 615.471918][T13848] device syzkaller0 entered promiscuous mode [ 615.484267][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.513696][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.531575][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.581824][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.604710][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.619918][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.646072][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.671850][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.682179][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.692988][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.703547][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.714522][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.747169][T13696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.830998][T13856] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 615.837099][T13856] syzkaller0: linktype set to 769 [ 615.868618][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 615.886520][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.948481][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.959886][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.975228][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.987225][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.998862][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.013148][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.027609][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.038587][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.048964][T13696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.060494][T13696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.072803][T13696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.082074][T13862] netlink: 'syz.2.3074': attribute type 10 has an invalid length. [ 616.091079][T13862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3074'. [ 616.104600][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 616.115179][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 616.154273][T13696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.194358][T13696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.212903][T13696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.242302][T13696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.557885][ T6160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.566047][ T6160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.634617][T13875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3087'. [ 616.668561][T13875] device team0 entered promiscuous mode [ 616.696838][T13875] device team_slave_0 entered promiscuous mode [ 616.728198][T13875] device team_slave_1 entered promiscuous mode [ 616.758309][T13875] bridge0: port 3(team0) entered blocking state [ 616.766085][T13875] bridge0: port 3(team0) entered disabled state [ 616.809879][T13875] bridge0: port 3(team0) entered blocking state [ 616.811016][T13883] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3079'. [ 616.817307][T13875] bridge0: port 3(team0) entered forwarding state [ 616.846960][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 616.872222][T13879] bond0: (slave bridge0): Error: Slave device does not support XDP [ 616.904362][ T1625] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.913416][T13878] delete_channel: no stack [ 616.935804][ T1625] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.966965][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 617.186558][T13886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3091'. [ 617.376496][T13891] delete_channel: no stack [ 618.191308][T13908] validate_nla: 5 callbacks suppressed [ 618.191335][T13908] netlink: 'syz.1.3086': attribute type 10 has an invalid length. [ 618.209697][T13908] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3086'. [ 618.232193][T13908] device team0 entered promiscuous mode [ 618.258336][T13908] device team_slave_0 entered promiscuous mode [ 618.281665][T13908] device team_slave_1 entered promiscuous mode [ 618.333719][T13908] bridge0: port 3(team0) entered blocking state [ 618.410685][T13908] bridge0: port 3(team0) entered disabled state [ 618.521060][T13908] bridge0: port 3(team0) entered blocking state [ 618.528141][T13908] bridge0: port 3(team0) entered forwarding state [ 618.590842][T13926] netlink: 'syz.4.3097': attribute type 10 has an invalid length. [ 618.610001][T13925] delete_channel: no stack [ 618.683028][T13932] netlink: 'syz.5.3098': attribute type 4 has an invalid length. [ 618.707650][T13932] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3098'. [ 618.843933][T13934] netlink: 'syz.4.3100': attribute type 10 has an invalid length. [ 618.873174][T13934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3100'. [ 619.377342][T13960] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3109'. [ 619.650410][T13964] netlink: 'syz.4.3110': attribute type 10 has an invalid length. [ 619.720775][T13963] delete_channel: no stack [ 619.772722][T13972] netlink: 'syz.2.3113': attribute type 2 has an invalid length. [ 619.797593][T13972] netlink: 'syz.2.3113': attribute type 8 has an invalid length. [ 619.849255][T13972] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3113'. [ 619.960494][T13972] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.3113'. [ 620.031066][T13981] netlink: 'syz.5.3117': attribute type 10 has an invalid length. [ 620.042389][T13981] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3117'. [ 620.223289][T13988] netlink: 'syz.4.3118': attribute type 10 has an invalid length. [ 620.589216][T13998] netlink: 'syz.1.3122': attribute type 4 has an invalid length. [ 620.597222][T13998] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3122'. [ 621.403743][T14011] delete_channel: no stack [ 621.678264][T14001] chnl_net:caif_netlink_parms(): no params data found [ 621.923796][T14037] FAULT_INJECTION: forcing a failure. [ 621.923796][T14037] name failslab, interval 1, probability 0, space 0, times 0 [ 621.947559][T14037] CPU: 0 PID: 14037 Comm: syz.0.3133 Not tainted syzkaller #0 [ 621.955418][T14037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.965736][T14037] Call Trace: [ 621.969144][T14037] [ 621.972106][T14037] dump_stack_lvl+0x188/0x250 [ 621.976913][T14037] ? show_regs_print_info+0x20/0x20 [ 621.982548][T14037] ? load_image+0x400/0x400 [ 621.987106][T14037] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 621.993243][T14037] should_fail+0x38c/0x4c0 [ 621.997703][T14037] should_failslab+0x5/0x20 [ 622.002338][T14037] slab_pre_alloc_hook+0x51/0xc0 [ 622.007316][T14037] ? __build_skb+0x26/0x2e0 [ 622.011864][T14037] kmem_cache_alloc+0x3d/0x290 [ 622.016679][T14037] __build_skb+0x26/0x2e0 [ 622.021177][T14037] build_skb+0x1e/0x170 [ 622.025376][T14037] bpf_prog_test_run_skb+0x260/0x1180 [ 622.030804][T14037] ? lockdep_hardirqs_on+0x94/0x140 [ 622.036236][T14037] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 622.042521][T14037] ? cpu_online+0x60/0x60 [ 622.046989][T14037] ? cpu_online+0x60/0x60 [ 622.051882][T14037] bpf_prog_test_run+0x31e/0x390 [ 622.056874][T14037] __sys_bpf+0x5a5/0x6f0 [ 622.061257][T14037] ? bpf_link_show_fdinfo+0x380/0x380 [ 622.066888][T14037] __x64_sys_bpf+0x78/0x90 [ 622.071465][T14037] do_syscall_64+0x4c/0xa0 [ 622.076106][T14037] ? clear_bhb_loop+0x30/0x80 [ 622.081040][T14037] ? clear_bhb_loop+0x30/0x80 [ 622.085856][T14037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 622.092178][T14037] RIP: 0033:0x7fc6b0ade799 [ 622.096736][T14037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.116767][T14037] RSP: 002b:00007fc6aed38028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 622.125247][T14037] RAX: ffffffffffffffda RBX: 00007fc6b0d57fa0 RCX: 00007fc6b0ade799 [ 622.133268][T14037] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 622.141582][T14037] RBP: 00007fc6aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 622.149608][T14037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.157807][T14037] R13: 00007fc6b0d58038 R14: 00007fc6b0d57fa0 R15: 00007ffef6c76f88 [ 622.166277][T14037] [ 622.223145][T14001] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.309187][T14001] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.318581][T14001] device bridge_slave_0 entered promiscuous mode [ 622.328120][T14001] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.335687][T14001] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.344538][T14001] device bridge_slave_1 entered promiscuous mode [ 622.543530][T14001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.660772][T14001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.748761][T14050] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3138'. [ 622.793518][T14001] team0: Port device team_slave_0 added [ 622.801668][T14052] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.3137'. [ 622.819008][T14001] team0: Port device team_slave_1 added [ 622.857878][T13749] Bluetooth: hci4: command 0x0409 tx timeout [ 622.940019][T14056] bond0: (slave bond_slave_0): Releasing backup interface [ 622.995170][T14001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.009190][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.063005][T14001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.095972][T14055] delete_channel: no stack [ 623.112380][T14001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.127144][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.171284][T14001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.269499][T14001] device hsr_slave_0 entered promiscuous mode [ 623.277142][T14001] device hsr_slave_1 entered promiscuous mode [ 623.288143][T14001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.297304][T14001] Cannot create hsr debugfs directory [ 623.953828][T14001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.984664][T14080] validate_nla: 4 callbacks suppressed [ 623.984702][T14080] netlink: 'syz.0.3147': attribute type 10 has an invalid length. [ 624.164307][T14001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.186335][T14091] netlink: 'syz.0.3150': attribute type 4 has an invalid length. [ 624.340572][T14091] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3150'. [ 624.529418][T14001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.544888][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.544982][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.937622][ T4858] Bluetooth: hci4: command 0x041b tx timeout [ 627.017617][ T4858] Bluetooth: hci4: command 0x040f tx timeout [ 627.229748][T14001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.282366][T14101] netlink: 'syz.1.3154': attribute type 10 has an invalid length. [ 627.327634][T14099] delete_channel: no stack [ 627.505851][T14117] netlink: 'syz.5.3160': attribute type 10 has an invalid length. [ 627.535282][T14120] netlink: 'syz.0.3162': attribute type 4 has an invalid length. [ 627.546362][T14120] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3162'. [ 627.558033][T14001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 627.602762][T14001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 627.625853][T14001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 627.717105][T14001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 628.155143][T14001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.178560][T14138] netlink: 'syz.4.3167': attribute type 5 has an invalid length. [ 628.243255][T14138] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3167'. [ 628.367286][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.378202][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.432166][T14001] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.464870][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 628.484775][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 628.516603][ T1628] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.523971][ T1628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.589844][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 628.608162][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 628.628400][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 628.654437][ T1628] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.661758][ T1628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.690260][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 628.720355][T14152] netlink: 'syz.0.3170': attribute type 10 has an invalid length. [ 628.752019][T14152] bond0: (slave bond_slave_0): Releasing backup interface [ 628.809422][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 628.948068][T14158] netlink: 'syz.5.3174': attribute type 4 has an invalid length. [ 628.955889][T14158] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3174'. [ 629.099312][T13749] Bluetooth: hci4: command 0x0419 tx timeout [ 631.269648][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 631.340278][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 631.351104][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 631.361097][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 631.388631][T14147] delete_channel: no stack [ 631.407572][T14161] netlink: 'syz.1.3173': attribute type 10 has an invalid length. [ 631.430054][T14161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3173'. [ 631.461801][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 631.481675][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 631.511691][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 631.591267][T14164] netlink: 'syz.4.3175': attribute type 10 has an invalid length. [ 631.619037][T14001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.641004][T14001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 631.760115][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 631.779373][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.376378][T14192] netlink: 'syz.4.3184': attribute type 10 has an invalid length. [ 632.422801][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.479097][T14192] device bridge_slave_1 left promiscuous mode [ 632.509571][T14192] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.572253][T14192] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 632.640147][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 632.669564][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 632.775828][T14001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.864556][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 632.887767][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 632.972499][T14205] netlink: 'syz.4.3188': attribute type 10 has an invalid length. [ 633.005238][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 633.039307][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 633.071089][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 633.095012][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 633.134012][T14207] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 633.157883][T14207] device syzkaller0 entered promiscuous mode [ 633.200005][T14001] device veth0_vlan entered promiscuous mode [ 633.357358][T14001] device veth1_vlan entered promiscuous mode [ 633.484402][T14220] netlink: 'syz.5.3192': attribute type 3 has an invalid length. [ 633.519250][T14220] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3192'. [ 633.617861][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 633.655704][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 633.708907][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 633.723042][T14226] netlink: 'syz.5.3192': attribute type 1 has an invalid length. [ 633.758078][T14226] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.3192'. [ 633.760838][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 633.820934][T14001] device veth0_macvtap entered promiscuous mode [ 633.870117][T14001] device veth1_macvtap entered promiscuous mode [ 633.904242][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.925231][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.937701][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.955454][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.966163][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.979485][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.990117][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.001458][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.041445][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.064792][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.086858][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.111580][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.132381][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.147960][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.172601][T14001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.221576][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 634.244581][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 634.266636][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 634.308055][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.326372][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.336880][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.348373][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.360032][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.370779][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.382309][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.393827][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.404690][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.415789][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.433626][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.444673][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.458119][T14001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.470211][T14247] netlink: 'syz.5.3199': attribute type 10 has an invalid length. [ 634.492870][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 634.518968][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 634.593466][T14001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.645828][T14001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.678764][T14001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.687911][T14001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.701497][T14255] netlink: 'syz.1.3202': attribute type 10 has an invalid length. [ 637.648301][T14275] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 637.670397][T14275] device syzkaller0 entered promiscuous mode [ 638.168992][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.177309][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.218434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 638.256951][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.280861][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.301996][T14295] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 638.321475][T14295] syzkaller0: linktype set to 769 [ 638.328711][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 638.485471][T14296] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 638.564246][T14300] netlink: 'syz.5.3217': attribute type 10 has an invalid length. [ 638.600543][T14300] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3217'. [ 639.907612][T14313] netlink: 'syz.5.3220': attribute type 10 has an invalid length. [ 641.968920][T14335] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 642.005662][T14335] syzkaller0: linktype set to 769 [ 642.081498][T14341] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3228'. [ 642.154393][T14344] netlink: 'syz.4.3229': attribute type 3 has an invalid length. [ 642.183609][T14344] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3229'. [ 642.197641][T14345] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 642.275154][T14350] netlink: 'syz.1.3230': attribute type 10 has an invalid length. [ 642.325945][T14350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3230'. [ 642.475307][T14354] netlink: 'syz.2.3232': attribute type 10 has an invalid length. [ 642.974010][T14364] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 643.020874][T14364] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3234'. [ 643.069941][T14364] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3234'. [ 643.297728][T14361] netlink: 'syz.1.3233': attribute type 10 has an invalid length. [ 643.316301][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3234'. [ 643.370867][T14357] delete_channel: no stack [ 646.012369][T14400] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 646.024104][T14400] syzkaller0: linktype set to 769 [ 646.088070][T14402] netlink: 'syz.4.3248': attribute type 10 has an invalid length. [ 646.145270][T14404] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 646.201105][T14406] netlink: 'syz.1.3249': attribute type 10 has an invalid length. [ 646.256372][T14405] delete_channel: no stack [ 646.290028][T14411] FAULT_INJECTION: forcing a failure. [ 646.290028][T14411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.322767][T14411] CPU: 0 PID: 14411 Comm: syz.4.3250 Not tainted syzkaller #0 [ 646.330316][T14411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.340517][T14411] Call Trace: [ 646.343948][T14411] [ 646.346917][T14411] dump_stack_lvl+0x188/0x250 [ 646.351667][T14411] ? show_regs_print_info+0x20/0x20 [ 646.357128][T14411] ? load_image+0x400/0x400 [ 646.362166][T14411] ? __lock_acquire+0x7d10/0x7d10 [ 646.367680][T14411] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 646.373776][T14411] should_fail+0x38c/0x4c0 [ 646.378354][T14411] _copy_from_user+0x2e/0x170 [ 646.383088][T14411] iovec_from_user+0x142/0x370 [ 646.387926][T14411] __import_iovec+0x70/0x490 [ 646.392792][T14411] import_iovec+0x6f/0xa0 [ 646.397182][T14411] ___sys_sendmsg+0x1fd/0x2e0 [ 646.401940][T14411] ? __sys_sendmsg+0x2a0/0x2a0 [ 646.406942][T14411] ? trace_event_raw_event_lock+0x270/0x270 [ 646.412973][T14411] ? vfs_write+0x8b2/0xd60 [ 646.417489][T14411] __se_sys_sendmsg+0x1af/0x290 [ 646.422585][T14411] ? __x64_sys_sendmsg+0x80/0x80 [ 646.427736][T14411] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 646.434421][T14411] ? lockdep_hardirqs_on+0x94/0x140 [ 646.439761][T14411] do_syscall_64+0x4c/0xa0 [ 646.444214][T14411] ? clear_bhb_loop+0x30/0x80 [ 646.449121][T14411] ? clear_bhb_loop+0x30/0x80 [ 646.454108][T14411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 646.460457][T14411] RIP: 0033:0x7fd37d850799 [ 646.465010][T14411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.484758][T14411] RSP: 002b:00007fd37baaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.493412][T14411] RAX: ffffffffffffffda RBX: 00007fd37dac9fa0 RCX: 00007fd37d850799 [ 646.501628][T14411] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 646.509849][T14411] RBP: 00007fd37baaa090 R08: 0000000000000000 R09: 0000000000000000 [ 646.517959][T14411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.526176][T14411] R13: 00007fd37daca038 R14: 00007fd37dac9fa0 R15: 00007ffe6a155f58 [ 646.534496][T14411] [ 647.138191][T14436] netlink: 'syz.2.3260': attribute type 10 has an invalid length. [ 647.450544][T14447] netlink: 'syz.4.3262': attribute type 10 has an invalid length. [ 649.548665][T14443] delete_channel: no stack [ 649.691471][T14458] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 649.747991][T14458] syzkaller0: linktype set to 769 [ 649.836525][T14462] netlink: 'syz.4.3278': attribute type 10 has an invalid length. [ 649.942673][T14468] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 650.019507][T14461] delete_channel: no stack [ 650.448275][T14482] netlink: 'syz.2.3273': attribute type 10 has an invalid length. [ 650.479165][T14481] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 650.990811][T14501] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 650.996912][T14501] syzkaller0: linktype set to 769 [ 651.065107][T14502] bond0: (slave bridge0): Error: Slave device does not support XDP [ 653.833386][T14507] netlink: 'syz.5.3283': attribute type 10 has an invalid length. [ 653.842320][T14508] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 653.906575][T14498] delete_channel: no stack [ 654.141625][T14524] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 654.389457][T14532] netlink: 'syz.0.3291': attribute type 10 has an invalid length. [ 654.801631][T14545] netlink: 'syz.2.3296': attribute type 10 has an invalid length. [ 654.853656][T14545] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3296'. [ 654.904073][T14545] device team0 entered promiscuous mode [ 654.935792][T14545] device team_slave_0 entered promiscuous mode [ 654.963190][T14545] device team_slave_1 entered promiscuous mode [ 655.008621][T14545] bridge0: port 3(team0) entered blocking state [ 655.031292][T14545] bridge0: port 3(team0) entered disabled state [ 655.201550][T14545] bridge0: port 3(team0) entered blocking state [ 655.208915][T14545] bridge0: port 3(team0) entered forwarding state [ 657.587045][T14562] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 657.619469][T14562] syzkaller0: linktype set to 769 [ 657.654523][T14566] netlink: 'syz.1.3303': attribute type 10 has an invalid length. [ 657.776348][T14562] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 658.058954][T14575] netlink: 'syz.4.3307': attribute type 10 has an invalid length. [ 658.134345][T14580] FAULT_INJECTION: forcing a failure. [ 658.134345][T14580] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 658.155659][T14580] CPU: 0 PID: 14580 Comm: syz.0.3309 Not tainted syzkaller #0 [ 658.163468][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.173939][T14580] Call Trace: [ 658.177409][T14580] [ 658.180378][T14580] dump_stack_lvl+0x188/0x250 [ 658.185190][T14580] ? show_regs_print_info+0x20/0x20 [ 658.190797][T14580] ? load_image+0x400/0x400 [ 658.195433][T14580] ? __lock_acquire+0x7d10/0x7d10 [ 658.200863][T14580] should_fail+0x38c/0x4c0 [ 658.205334][T14580] prepare_alloc_pages+0x1e4/0x5f0 [ 658.210833][T14580] __alloc_pages+0x11b/0x480 [ 658.215586][T14580] ? zone_statistics+0x170/0x170 [ 658.220959][T14580] ? alloc_pages+0x438/0x550 [ 658.225683][T14580] __get_free_pages+0x8/0x30 [ 658.230414][T14580] kasan_populate_vmalloc_pte+0x21/0xc0 [ 658.236102][T14580] __apply_to_page_range+0x983/0xd10 [ 658.241561][T14580] ? kasan_populate_vmalloc+0x70/0x70 [ 658.247072][T14580] alloc_vmap_area+0x18d5/0x1a10 [ 658.252076][T14580] ? vm_map_ram+0xba0/0xba0 [ 658.256793][T14580] __get_vm_area_node+0x14f/0x2d0 [ 658.262054][T14580] __vmalloc_node_range+0xef/0x8b0 [ 658.267209][T14580] ? copy_process+0x5f0/0x3e20 [ 658.272194][T14580] ? rcu_is_watching+0x11/0xa0 [ 658.276998][T14580] ? kmem_cache_alloc_node+0x162/0x2d0 [ 658.282701][T14580] dup_task_struct+0x3f5/0xb30 [ 658.287845][T14580] ? copy_process+0x5f0/0x3e20 [ 658.292926][T14580] copy_process+0x5f0/0x3e20 [ 658.297703][T14580] ? __pidfd_prepare+0x140/0x140 [ 658.302815][T14580] kernel_clone+0x23f/0x990 [ 658.307372][T14580] ? __lock_acquire+0x7d10/0x7d10 [ 658.312577][T14580] ? vfs_write+0x8b2/0xd60 [ 658.317128][T14580] ? create_io_thread+0x180/0x180 [ 658.322738][T14580] __x64_sys_clone+0x19a/0x210 [ 658.327860][T14580] ? __ia32_sys_vfork+0x130/0x130 [ 658.333227][T14580] ? lockdep_hardirqs_on+0x94/0x140 [ 658.338762][T14580] do_syscall_64+0x4c/0xa0 [ 658.343421][T14580] ? clear_bhb_loop+0x30/0x80 [ 658.348500][T14580] ? clear_bhb_loop+0x30/0x80 [ 658.353324][T14580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 658.360123][T14580] RIP: 0033:0x7fc6b0ade799 [ 658.365239][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.385343][T14580] RSP: 002b:00007fc6aed37fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 658.394262][T14580] RAX: ffffffffffffffda RBX: 00007fc6b0d57fa0 RCX: 00007fc6b0ade799 [ 658.402376][T14580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 658.410393][T14580] RBP: 00007fc6aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 658.418487][T14580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 658.426572][T14580] R13: 00007fc6b0d58038 R14: 00007fc6b0d57fa0 R15: 00007ffef6c76f88 [ 658.434784][T14580] [ 658.755200][T14580] syz.0.3309: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 658.806508][T14580] CPU: 0 PID: 14580 Comm: syz.0.3309 Not tainted syzkaller #0 [ 658.814142][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.824330][T14580] Call Trace: [ 658.827798][T14580] [ 658.830867][T14580] dump_stack_lvl+0x188/0x250 [ 658.835587][T14580] ? rcu_lock_release+0x5/0x20 [ 658.840393][T14580] ? show_regs_print_info+0x20/0x20 [ 658.845631][T14580] ? load_image+0x400/0x400 [ 658.850354][T14580] warn_alloc+0x243/0x320 [ 658.854779][T14580] ? zone_watermark_ok_safe+0x240/0x240 [ 658.860374][T14580] ? __get_vm_area_node+0x164/0x2d0 [ 658.865711][T14580] __vmalloc_node_range+0x2b1/0x8b0 [ 658.871046][T14580] ? rcu_is_watching+0x11/0xa0 [ 658.876192][T14580] ? kmem_cache_alloc_node+0x162/0x2d0 [ 658.881866][T14580] dup_task_struct+0x3f5/0xb30 [ 658.886743][T14580] ? copy_process+0x5f0/0x3e20 [ 658.891675][T14580] copy_process+0x5f0/0x3e20 [ 658.896356][T14580] ? __pidfd_prepare+0x140/0x140 [ 658.901418][T14580] kernel_clone+0x23f/0x990 [ 658.906134][T14580] ? __lock_acquire+0x7d10/0x7d10 [ 658.911299][T14580] ? vfs_write+0x8b2/0xd60 [ 658.915908][T14580] ? create_io_thread+0x180/0x180 [ 658.921012][T14580] __x64_sys_clone+0x19a/0x210 [ 658.925904][T14580] ? __ia32_sys_vfork+0x130/0x130 [ 658.930988][T14580] ? lockdep_hardirqs_on+0x94/0x140 [ 658.936319][T14580] do_syscall_64+0x4c/0xa0 [ 658.940762][T14580] ? clear_bhb_loop+0x30/0x80 [ 658.945609][T14580] ? clear_bhb_loop+0x30/0x80 [ 658.950315][T14580] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 658.956320][T14580] RIP: 0033:0x7fc6b0ade799 [ 658.960770][T14580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.981174][T14580] RSP: 002b:00007fc6aed37fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 658.989903][T14580] RAX: ffffffffffffffda RBX: 00007fc6b0d57fa0 RCX: 00007fc6b0ade799 [ 658.998109][T14580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 659.006305][T14580] RBP: 00007fc6aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 659.014411][T14580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 659.022900][T14580] R13: 00007fc6b0d58038 R14: 00007fc6b0d57fa0 R15: 00007ffef6c76f88 [ 659.030931][T14580] [ 659.117664][T14580] Mem-Info: [ 659.122531][T14580] active_anon:286 inactive_anon:9484 isolated_anon:0 [ 659.122531][T14580] active_file:13333 inactive_file:40731 isolated_file:0 [ 659.122531][T14580] unevictable:768 dirty:195 writeback:0 [ 659.122531][T14580] slab_reclaimable:20658 slab_unreclaimable:104269 [ 659.122531][T14580] mapped:29965 shmem:2812 pagetables:701 bounce:0 [ 659.122531][T14580] kernel_misc_reclaimable:0 [ 659.122531][T14580] free:1366865 free_pcp:8482 free_cma:0 [ 659.173463][T14580] Node 0 active_anon:1112kB inactive_anon:37328kB active_file:53136kB inactive_file:162924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119860kB dirty:776kB writeback:0kB shmem:9272kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10968kB pagetables:2804kB all_unreclaimable? no [ 659.237069][T14580] Node 1 active_anon:32kB inactive_anon:508kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 659.296196][T14580] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.398058][T14580] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 659.410992][T14580] Node 0 DMA32 free:1527524kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1112kB inactive_anon:32328kB active_file:53136kB inactive_file:162924kB unevictable:1536kB writepending:776kB present:3129332kB managed:2606552kB mlocked:0kB bounce:0kB free_pcp:38240kB local_pcp:21260kB free_cma:0kB [ 659.490645][T14608] netlink: 'syz.2.3316': attribute type 10 has an invalid length. [ 659.507705][T14580] lowmem_reserve[]: 0 0 0 0 0 [ 659.512777][T14580] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.575963][T14608] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3316'. [ 659.607181][T14580] lowmem_reserve[]: 0 0 0 0 0 [ 659.617339][T14580] Node 1 Normal free:3923008kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 659.714465][T14613] netlink: 'syz.4.3318': attribute type 10 has an invalid length. [ 659.817684][T14580] lowmem_reserve[]: 0 0 0 0 0 [ 659.836426][T14580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 659.900426][T14580] Node 0 DMA32: 1341*4kB (UME) 373*8kB (UME) 1533*16kB (UME) 804*32kB (UME) 189*64kB (UME) 64*128kB (UME) 76*256kB (UME) 45*512kB (UM) 7*1024kB (UM) 7*2048kB (UME) 337*4096kB (UM) = 1523244kB [ 660.014116][T14580] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 660.039391][T14580] Node 1 Normal: 248*4kB (UME) 46*8kB (UME) 29*16kB (UME) 177*32kB (UME) 90*64kB (UME) 25*128kB (UE) 16*256kB (UME) 4*512kB (UE) 1*1024kB (U) 2*2048kB (ME) 951*4096kB (M) = 3923008kB [ 660.150883][T14580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.161045][T14580] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 660.170939][T14580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 660.194073][T14580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 660.217694][T14580] 55858 total pagecache pages [ 660.222560][T14580] 0 pages in swap cache [ 660.258513][T14580] Swap cache stats: add 0, delete 0, find 0/0 [ 660.264752][T14580] Free swap = 124996kB [ 660.311875][T14580] Total swap = 124996kB [ 660.316372][T14580] 2097051 pages RAM [ 660.332588][T14580] 0 pages HighMem/MovableOnly [ 660.342731][T14580] 411490 pages reserved [ 660.347330][T14580] 0 pages cma reserved [ 660.552132][T14635] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 660.578362][T14635] device syzkaller0 entered promiscuous mode [ 662.726852][T14644] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 662.756362][T14644] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3330'. [ 662.827284][T14650] netlink: 'syz.5.3332': attribute type 10 has an invalid length. [ 663.210203][T14661] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3335'. [ 663.369836][T14672] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 663.415141][T14672] syzkaller0: linktype set to 769 [ 663.498840][T14675] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 663.607522][T14675] device syzkaller0 entered promiscuous mode [ 663.737376][T14677] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 663.776583][T14682] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 663.847961][T14682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3345'. [ 664.161403][T14690] netlink: 'syz.1.3348': attribute type 10 has an invalid length. [ 667.108036][T14705] ip6gretap0: refused to change device tx_queue_len [ 667.197106][T14715] netlink: 'syz.0.3358': attribute type 10 has an invalid length. [ 667.238208][T14715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3358'. [ 667.357832][T14725] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 667.363919][T14725] syzkaller0: linktype set to 769 [ 667.411336][T14726] netlink: 'syz.4.3360': attribute type 10 has an invalid length. [ 667.492576][T14727] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 667.958265][T14741] device sit0 entered promiscuous mode [ 670.693702][T14757] netlink: 'syz.2.3369': attribute type 10 has an invalid length. [ 670.732078][T14757] bond0: (slave bond_slave_0): Releasing backup interface [ 670.783571][T14752] delete_channel: no stack [ 670.788195][T14762] netlink: 'syz.4.3373': attribute type 10 has an invalid length. [ 671.237961][T14778] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 671.268408][T14778] syzkaller0: linktype set to 769 [ 671.352050][T14783] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 671.546626][T14785] device sit0 entered promiscuous mode [ 672.205761][T14799] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3386'. [ 672.254491][T14799] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 674.410697][T14795] netlink: 'syz.5.3385': attribute type 10 has an invalid length. [ 674.426165][T14810] netlink: 'syz.0.3388': attribute type 10 has an invalid length. [ 674.459491][T14806] delete_channel: no stack [ 675.316397][T14842] device sit0 entered promiscuous mode [ 675.992642][T14845] netlink: 'syz.5.3402': attribute type 10 has an invalid length. [ 676.012527][T14850] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 676.027784][T14850] syzkaller0: linktype set to 769 [ 676.126803][T14850] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 676.172401][T14857] bond0: (slave bridge0): Error: Slave device does not support XDP [ 678.060703][T14858] netlink: 'syz.5.3405': attribute type 10 has an invalid length. [ 678.145428][T14858] delete_channel: no stack [ 678.879659][T14884] netlink: 'syz.0.3414': attribute type 4 has an invalid length. [ 678.898878][T14884] netlink: 'syz.0.3414': attribute type 8 has an invalid length. [ 678.968963][T14884] netlink: 'syz.0.3414': attribute type 4 has an invalid length. [ 679.057662][T14884] netlink: 'syz.0.3414': attribute type 7 has an invalid length. [ 679.112974][T14890] netlink: 'syz.2.3415': attribute type 10 has an invalid length. [ 679.126799][T14884] netlink: 198228 bytes leftover after parsing attributes in process `syz.0.3414'. [ 679.178521][T14891] netlink: 'syz.5.3416': attribute type 10 has an invalid length. [ 679.222319][T14891] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3416'. [ 679.461612][T14900] netlink: 'syz.2.3420': attribute type 10 has an invalid length. [ 679.472584][T14899] delete_channel: no stack [ 679.750501][T14909] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 679.799998][T14909] syzkaller0: linktype set to 769 [ 679.957862][T14912] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 682.412951][T14931] netlink: 'syz.2.3429': attribute type 4 has an invalid length. [ 682.423906][T14933] netlink: 'syz.4.3430': attribute type 10 has an invalid length. [ 682.461998][T14931] netlink: 'syz.2.3429': attribute type 8 has an invalid length. [ 682.476834][T14931] netlink: 'syz.2.3429': attribute type 4 has an invalid length. [ 682.484721][T14931] netlink: 'syz.2.3429': attribute type 7 has an invalid length. [ 682.524104][T14931] netlink: 198228 bytes leftover after parsing attributes in process `syz.2.3429'. [ 682.654335][T14941] netlink: 'syz.4.3433': attribute type 10 has an invalid length. [ 682.709506][T14940] delete_channel: no stack [ 682.745706][T14943] netlink: 'syz.1.3434': attribute type 10 has an invalid length. [ 682.793827][T14943] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3434'. [ 682.896428][T14950] netlink: 'syz.2.3436': attribute type 6 has an invalid length. [ 683.308982][T14961] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 683.466374][T14961] syzkaller0: linktype set to 769 [ 683.625865][T14961] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 685.921941][T14971] netlink: 'syz.5.3443': attribute type 10 has an invalid length. [ 685.980817][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.988462][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.128484][T14980] netlink: 'syz.1.3446': attribute type 4 has an invalid length. [ 686.136386][T14980] netlink: 'syz.1.3446': attribute type 8 has an invalid length. [ 686.157568][T14983] netlink: 'syz.5.3447': attribute type 10 has an invalid length. [ 686.190753][T14980] netlink: 'syz.1.3446': attribute type 4 has an invalid length. [ 686.200097][T14982] delete_channel: no stack [ 686.251521][T14980] netlink: 'syz.1.3446': attribute type 7 has an invalid length. [ 686.314591][T14980] netlink: 198228 bytes leftover after parsing attributes in process `syz.1.3446'. [ 686.418064][T14997] netlink: 'syz.5.3450': attribute type 6 has an invalid length. [ 686.671880][T15005] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 687.040936][T15008] netlink: 'syz.5.3454': attribute type 10 has an invalid length. [ 687.064449][T15008] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3454'. [ 687.110892][T15016] netlink: 'syz.0.3456': attribute type 10 has an invalid length. [ 687.429337][T15026] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 687.467943][T15026] syzkaller0: linktype set to 769 [ 687.564194][T15032] netlink: 'syz.5.3464': attribute type 21 has an invalid length. [ 687.586360][T15032] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3464'. [ 687.668269][T15034] netlink: 198228 bytes leftover after parsing attributes in process `syz.0.3463'. [ 687.718077][T15026] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 687.849758][T15030] delete_channel: no stack [ 687.929254][T15046] FAULT_INJECTION: forcing a failure. [ 687.929254][T15046] name failslab, interval 1, probability 0, space 0, times 0 [ 687.984692][T15046] CPU: 0 PID: 15046 Comm: syz.0.3466 Not tainted syzkaller #0 [ 687.992634][T15046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.003196][T15046] Call Trace: [ 688.006653][T15046] [ 688.009913][T15046] dump_stack_lvl+0x188/0x250 [ 688.014922][T15046] ? show_regs_print_info+0x20/0x20 [ 688.020370][T15046] ? load_image+0x400/0x400 [ 688.025076][T15046] ? __might_sleep+0xf0/0xf0 [ 688.030080][T15046] ? __lock_acquire+0x7d10/0x7d10 [ 688.035363][T15046] should_fail+0x38c/0x4c0 [ 688.039969][T15046] should_failslab+0x5/0x20 [ 688.044802][T15046] slab_pre_alloc_hook+0x51/0xc0 [ 688.049991][T15046] __kmalloc_node_track_caller+0x68/0x3a0 [ 688.056106][T15046] ? __ip_append_data+0x2105/0x32d0 [ 688.061618][T15046] ? kmem_cache_alloc_node+0x162/0x2d0 [ 688.067522][T15046] ? __alloc_skb+0xf4/0x750 [ 688.072179][T15046] ? __ip_append_data+0x2105/0x32d0 [ 688.077427][T15046] __alloc_skb+0x22c/0x750 [ 688.081970][T15046] ? skb_put+0x117/0x210 [ 688.086274][T15046] __ip_append_data+0x2105/0x32d0 [ 688.091551][T15046] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 688.096644][T15046] ? ip_setup_cork+0x890/0x890 [ 688.101597][T15046] ? ip_setup_cork+0x496/0x890 [ 688.106428][T15046] ip_make_skb+0x227/0x440 [ 688.111181][T15046] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 688.116091][T15046] ? ip_flush_pending_frames+0x250/0x250 [ 688.122469][T15046] udp_sendmsg+0x1ab5/0x2370 [ 688.127120][T15046] ? release_sock+0x2b/0x1b0 [ 688.131883][T15046] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 688.136787][T15046] ? udp_cmsg_send+0x350/0x350 [ 688.141717][T15046] ? rcu_nmi_exit+0x6f/0xf0 [ 688.146567][T15046] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 688.153024][T15046] ? __local_bh_enable_ip+0x136/0x1c0 [ 688.158917][T15046] ? _local_bh_enable+0xa0/0xa0 [ 688.163914][T15046] ? inet_sendmsg+0x147/0x2f0 [ 688.168740][T15046] ? inet_sendmsg+0x147/0x2f0 [ 688.173618][T15046] ? inet_send_prepare+0x260/0x260 [ 688.179068][T15046] ____sys_sendmsg+0x5b7/0x8f0 [ 688.184152][T15046] ? __sys_sendmsg_sock+0x30/0x30 [ 688.189325][T15046] ? import_iovec+0x6f/0xa0 [ 688.193966][T15046] ___sys_sendmsg+0x236/0x2e0 [ 688.198803][T15046] ? __sys_sendmsg+0x2a0/0x2a0 [ 688.204873][T15046] __se_sys_sendmsg+0x1af/0x290 [ 688.210060][T15046] ? __x64_sys_sendmsg+0x80/0x80 [ 688.215139][T15046] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 688.221269][T15046] ? lockdep_hardirqs_on+0x94/0x140 [ 688.227206][T15046] do_syscall_64+0x4c/0xa0 [ 688.231876][T15046] ? clear_bhb_loop+0x30/0x80 [ 688.236602][T15046] ? clear_bhb_loop+0x30/0x80 [ 688.241482][T15046] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 688.247731][T15046] RIP: 0033:0x7fc6b0ade799 [ 688.253017][T15046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.272838][T15046] RSP: 002b:00007fc6aed38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 688.281771][T15046] RAX: ffffffffffffffda RBX: 00007fc6b0d57fa0 RCX: 00007fc6b0ade799 [ 688.289988][T15046] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000005 [ 688.298348][T15046] RBP: 00007fc6aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 688.306699][T15046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 688.315319][T15046] R13: 00007fc6b0d58038 R14: 00007fc6b0d57fa0 R15: 00007ffef6c76f88 [ 688.323502][T15046] [ 688.693938][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3468'. [ 689.112419][T15057] delete_channel: no stack [ 689.241131][ T144] device hsr_slave_0 left promiscuous mode [ 689.279364][ T144] device hsr_slave_1 left promiscuous mode [ 689.297909][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.305573][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.378022][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.395901][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.483876][T15083] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3477'. [ 689.520887][ T144] bridge0: port 2(team0) entered disabled state [ 689.547511][ T144] device bridge_slave_0 left promiscuous mode [ 689.564529][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.935607][T15093] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3480'. [ 689.990699][ T144] device team_slave_1 left promiscuous mode [ 690.012012][ T144] team0 (unregistering): Port device team_slave_1 removed [ 690.042092][ T144] device team_slave_0 left promiscuous mode [ 690.052683][ T144] team0 (unregistering): Port device team_slave_0 removed [ 690.095187][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.139936][ T144] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 690.270384][ T144] bond0 (unregistering): Released all slaves [ 690.341684][T15086] delete_channel: no stack [ 690.604327][T15105] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 690.738572][T15105] syzkaller0: linktype set to 769 [ 690.833049][T15111] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 691.151564][T15115] validate_nla: 15 callbacks suppressed [ 691.151586][T15115] netlink: 'syz.0.3487': attribute type 1 has an invalid length. [ 691.185197][T15115] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.3487'. [ 691.869835][T15127] netlink: 'syz.5.3491': attribute type 10 has an invalid length. [ 693.466800][T15125] delete_channel: no stack [ 693.521352][T15135] netlink: 'syz.1.3494': attribute type 4 has an invalid length. [ 693.597543][T15135] netlink: 'syz.1.3494': attribute type 8 has an invalid length. [ 693.605453][T15135] netlink: 'syz.1.3494': attribute type 4 has an invalid length. [ 693.714463][T15135] netlink: 'syz.1.3494': attribute type 7 has an invalid length. [ 693.723890][T15135] netlink: 198228 bytes leftover after parsing attributes in process `syz.1.3494'. [ 693.737709][T15148] netlink: 'syz.2.3498': attribute type 10 has an invalid length. [ 695.664102][T15181] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 695.678723][T15181] syzkaller0: linktype set to 769 [ 695.768528][T15181] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 696.382897][T15184] netlink: 'syz.4.3509': attribute type 10 has an invalid length. [ 696.398161][T15186] netlink: 'syz.1.3510': attribute type 10 has an invalid length. [ 696.486549][T15183] delete_channel: no stack [ 696.505162][T15191] netlink: 'syz.0.3512': attribute type 4 has an invalid length. [ 696.554055][T15191] netlink: 'syz.0.3512': attribute type 8 has an invalid length. [ 696.587651][T15191] netlink: 'syz.0.3512': attribute type 4 has an invalid length. [ 696.595788][T15191] netlink: 'syz.0.3512': attribute type 7 has an invalid length. [ 696.625351][T15191] netlink: 198228 bytes leftover after parsing attributes in process `syz.0.3512'. [ 697.130755][T15206] netlink: 'syz.4.3519': attribute type 10 has an invalid length. [ 697.178823][T15206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3519'. [ 697.228286][T15208] netlink: 'syz.2.3518': attribute type 10 has an invalid length. [ 697.287811][T15208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3518'. [ 697.533168][T15217] netlink: 'syz.4.3523': attribute type 10 has an invalid length. [ 698.006531][T15221] netlink: 'syz.2.3524': attribute type 10 has an invalid length. [ 698.042656][T15220] delete_channel: no stack [ 698.058475][T15226] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 698.064918][T15226] syzkaller0: linktype set to 769 [ 698.297866][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 698.314386][T15226] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 698.628618][T15242] netlink: 198228 bytes leftover after parsing attributes in process `syz.0.3530'. [ 698.719428][T15225] chnl_net:caif_netlink_parms(): no params data found [ 698.939608][T15225] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.979127][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.988474][T15225] device bridge_slave_0 entered promiscuous mode [ 699.047684][T15225] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.054872][T15225] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.164826][T15225] device bridge_slave_1 entered promiscuous mode [ 699.235527][T15255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3533'. [ 699.426256][T15225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.439825][T15225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.516740][T15225] team0: Port device team_slave_0 added [ 699.541264][T15225] team0: Port device team_slave_1 added [ 699.593906][T15225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.613575][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.648828][T15225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.682283][T15225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.699574][T15225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.744696][T15225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.987763][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 702.070227][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 702.218065][T15225] device hsr_slave_0 entered promiscuous mode [ 702.268852][T15225] device hsr_slave_1 entered promiscuous mode [ 702.327523][T15225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.348306][T15225] Cannot create hsr debugfs directory [ 702.362594][T15272] delete_channel: no stack [ 702.965867][T15225] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.033715][T15293] validate_nla: 7 callbacks suppressed [ 703.033734][T15293] netlink: 'syz.2.3543': attribute type 4 has an invalid length. [ 703.081118][T15293] netlink: 'syz.2.3543': attribute type 8 has an invalid length. [ 703.097582][T15293] netlink: 'syz.2.3543': attribute type 4 has an invalid length. [ 703.128845][T15293] netlink: 'syz.2.3543': attribute type 7 has an invalid length. [ 703.141675][T15225] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.206570][T15295] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 703.213371][T15293] netlink: 198228 bytes leftover after parsing attributes in process `syz.2.3543'. [ 703.251411][T15295] syzkaller0: linktype set to 769 [ 703.320222][T15225] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.433193][T15294] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 703.568370][T15225] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.612835][T15304] netlink: 'syz.1.3546': attribute type 10 has an invalid length. [ 703.805710][T15225] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 703.868757][T15225] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 704.137715][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 706.217740][ T4190] Bluetooth: hci1: command 0x0419 tx timeout [ 706.551597][T15314] netlink: 'syz.4.3551': attribute type 10 has an invalid length. [ 706.571169][T15310] netlink: 'syz.1.3550': attribute type 10 has an invalid length. [ 706.597709][T15310] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3550'. [ 706.628463][T15312] delete_channel: no stack [ 706.630057][T15225] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 706.682492][T15225] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 706.972638][T15328] netlink: 'syz.4.3556': attribute type 4 has an invalid length. [ 707.008465][T15330] netlink: 'syz.1.3554': attribute type 7 has an invalid length. [ 707.017484][T15328] netlink: 'syz.4.3556': attribute type 8 has an invalid length. [ 707.179884][T15328] netlink: 198228 bytes leftover after parsing attributes in process `syz.4.3556'. [ 707.349603][T15225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.487529][T15225] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.532298][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 707.541382][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 707.579086][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 707.607041][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 707.658120][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.665686][ T6160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.709956][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 707.742130][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 707.783711][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 707.824028][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.831349][ T6160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.901435][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 707.973955][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 707.989620][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.053794][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.094940][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.136714][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.177003][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.228670][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.266601][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.323387][T15225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.407083][T15225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.471401][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.490476][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 708.872042][T15358] validate_nla: 2 callbacks suppressed [ 708.872068][T15358] netlink: 'syz.1.3561': attribute type 10 has an invalid length. [ 709.191515][T15362] netlink: 'syz.2.3563': attribute type 10 has an invalid length. [ 709.248782][T15362] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3563'. [ 709.389869][T15366] netlink: 'syz.0.3565': attribute type 10 has an invalid length. [ 709.409664][T15364] delete_channel: no stack [ 709.437063][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 709.450374][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 709.493299][T15225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.368172][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.408453][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 710.468900][T15225] device veth0_vlan entered promiscuous mode [ 710.487274][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 710.509178][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 710.551960][T15225] device veth1_vlan entered promiscuous mode [ 710.583712][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 710.598394][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 710.618457][ T743] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 710.716852][T15225] device veth0_macvtap entered promiscuous mode [ 710.799980][T15225] device veth1_macvtap entered promiscuous mode [ 710.906183][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 710.969573][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 710.998880][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 711.032140][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 711.058491][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 711.109018][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.157788][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.177725][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.207490][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.227506][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.248625][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.269759][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.291257][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.322006][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.347077][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.377460][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.395133][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.456827][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.512329][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.535601][T15225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.556731][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 711.588802][ T6160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 711.623779][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.684248][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.738316][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.759913][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.834754][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.876567][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.920071][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.087765][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.149443][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.224886][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.264909][T15225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.323107][T15225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.398676][T15225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.448418][T15401] netlink: 'syz.4.3571': attribute type 7 has an invalid length. [ 712.467729][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 712.508421][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 712.564235][T15225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.607529][T15225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.647578][T15225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.656633][T15225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.930729][T15410] netlink: 'syz.0.3575': attribute type 10 has an invalid length. [ 714.969047][T15406] netlink: 'syz.4.3573': attribute type 21 has an invalid length. [ 714.998342][T15408] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 715.025912][T15408] syzkaller0: linktype set to 769 [ 715.069333][ T743] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.103094][ T743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.137321][T15408] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 715.157829][ T1625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 715.197892][ T1628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.228275][ T1628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.263007][ T1628] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 715.618528][T15430] netlink: 'syz.5.3517': attribute type 28 has an invalid length. [ 715.705727][T15430] netlink: 'syz.5.3517': attribute type 3 has an invalid length. [ 715.807208][T15430] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3517'. [ 715.886368][T15425] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 715.913964][T15425] syzkaller0: linktype set to 769 [ 715.967617][T15431] netlink: 'syz.1.3581': attribute type 10 has an invalid length. [ 716.011149][T15428] delete_channel: no stack [ 716.523438][T15448] netlink: 'syz.2.3585': attribute type 7 has an invalid length. [ 717.203008][T15457] netlink: 'syz.0.3587': attribute type 25 has an invalid length. [ 717.217519][T15457] netlink: 'syz.0.3587': attribute type 29 has an invalid length. [ 717.341135][T15459] netlink: 'syz.1.3588': attribute type 10 has an invalid length. [ 717.541565][T15463] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 717.592661][T15463] syzkaller0: linktype set to 769 [ 717.683739][T15469] netlink: 'syz.1.3592': attribute type 10 has an invalid length. [ 717.707142][T15469] bridge0: port 3(team0) entered disabled state [ 717.713828][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.721462][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.938310][T15469] bridge0: port 3(team0) entered blocking state [ 717.945074][T15469] bridge0: port 3(team0) entered forwarding state [ 717.952408][T15469] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.959928][T15469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.968739][T15469] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.976133][T15469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.003188][T15469] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 718.027452][T15463] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 718.801388][ T1108] Bluetooth: hci0: command 0x0406 tx timeout [ 718.809970][T15470] delete_channel: no stack [ 718.973871][T15492] FAULT_INJECTION: forcing a failure. [ 718.973871][T15492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.049384][T15492] CPU: 1 PID: 15492 Comm: syz.5.3601 Not tainted syzkaller #0 [ 719.057056][T15492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.067330][T15492] Call Trace: [ 719.070758][T15492] [ 719.073726][T15492] dump_stack_lvl+0x188/0x250 [ 719.078633][T15492] ? show_regs_print_info+0x20/0x20 [ 719.084190][T15492] ? load_image+0x400/0x400 [ 719.088970][T15492] ? __lock_acquire+0x7d10/0x7d10 [ 719.094318][T15492] ? __alloc_skb+0x473/0x750 [ 719.099172][T15492] should_fail+0x38c/0x4c0 [ 719.103805][T15492] _copy_from_iter+0x22e/0x1170 [ 719.108740][T15492] ? __lock_acquire+0x7d10/0x7d10 [ 719.114301][T15492] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 719.119753][T15492] ? __virt_addr_valid+0x3c6/0x470 [ 719.125003][T15492] ? __phys_addr_symbol+0x2b/0x70 [ 719.130414][T15492] ? __check_object_size+0x30c/0x410 [ 719.135776][T15492] skb_copy_datagram_from_iter+0xf2/0x6a0 [ 719.141556][T15492] ? skb_put+0x117/0x210 [ 719.145970][T15492] tun_get_user+0xaf9/0x3a70 [ 719.150635][T15492] ? tun_ring_recv+0xc40/0xc40 [ 719.155490][T15492] ? rcu_lock_release+0x5/0x20 [ 719.160638][T15492] ? __lock_acquire+0x7d10/0x7d10 [ 719.165877][T15492] tun_chr_write_iter+0x112/0x1e0 [ 719.170976][T15492] vfs_write+0x745/0xd60 [ 719.175295][T15492] ? file_end_write+0x250/0x250 [ 719.180555][T15492] ? __fget_files+0x40f/0x480 [ 719.185393][T15492] ? __fdget_pos+0x1e2/0x370 [ 719.190119][T15492] ? ksys_write+0x71/0x260 [ 719.194778][T15492] ksys_write+0x152/0x260 [ 719.199240][T15492] ? __ia32_sys_read+0x80/0x80 [ 719.204160][T15492] ? lockdep_hardirqs_on+0x94/0x140 [ 719.209630][T15492] do_syscall_64+0x4c/0xa0 [ 719.214755][T15492] ? clear_bhb_loop+0x30/0x80 [ 719.219748][T15492] ? clear_bhb_loop+0x30/0x80 [ 719.225374][T15492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 719.231583][T15492] RIP: 0033:0x7f9988647799 [ 719.236185][T15492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.256545][T15492] RSP: 002b:00007f99868a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 719.265545][T15492] RAX: ffffffffffffffda RBX: 00007f99888c0fa0 RCX: 00007f9988647799 [ 719.273815][T15492] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 719.282019][T15492] RBP: 00007f99868a1090 R08: 0000000000000000 R09: 0000000000000000 [ 719.290222][T15492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.298246][T15492] R13: 00007f99888c1038 R14: 00007f99888c0fa0 R15: 00007ffd5c62ed98 [ 719.306459][T15492] [ 721.312898][T15499] validate_nla: 2 callbacks suppressed [ 721.312925][T15499] netlink: 'syz.4.3602': attribute type 10 has an invalid length. [ 721.475883][T15515] netlink: 'syz.1.3603': attribute type 28 has an invalid length. [ 721.542077][T15515] netlink: 'syz.1.3603': attribute type 3 has an invalid length. [ 721.597557][T15515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3603'. [ 722.184912][ T144] device hsr_slave_0 left promiscuous mode [ 722.206419][ T144] device hsr_slave_1 left promiscuous mode [ 722.215045][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.223189][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.233197][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.248849][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.266704][ T144] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 722.279494][ T144] batman_adv: batadv0: Removing interface: veth0_vlan [ 722.291280][ T144] bridge0: port 3(team0) entered disabled state [ 722.309595][ T144] bridge0: port 2(dummy0) entered disabled state [ 722.327740][ T144] device bridge_slave_0 left promiscuous mode [ 722.336424][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.383773][ T144] device veth1_vlan left promiscuous mode [ 722.403710][ T144] device veth0_vlan left promiscuous mode [ 722.905009][ T144] device macvlan1 left promiscuous mode [ 722.920799][ T144] team0 (unregistering): Port device macvlan1 removed [ 723.025134][ T144] device team_slave_1 left promiscuous mode [ 723.034187][ T144] team0 (unregistering): Port device team_slave_1 removed [ 723.063448][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.107244][ T144] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 723.200205][ T144] bond0 (unregistering): Released all slaves [ 723.254673][T15531] netlink: 'syz.2.3610': attribute type 10 has an invalid length. [ 723.270721][T15540] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 723.277157][T15540] syzkaller0: linktype set to 769 [ 723.283311][T15528] delete_channel: no stack [ 723.464351][T15553] netlink: 'syz.0.3616': attribute type 10 has an invalid length. [ 724.501007][T15577] netlink: 'syz.2.3623': attribute type 28 has an invalid length. [ 724.523809][T15577] netlink: 'syz.2.3623': attribute type 3 has an invalid length. [ 724.534458][T15577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3623'. [ 724.759867][T15584] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 724.818748][T15584] syzkaller0: linktype set to 769 [ 724.888263][T15590] netlink: 'syz.1.3628': attribute type 25 has an invalid length. [ 724.896430][T15590] netlink: 'syz.1.3628': attribute type 29 has an invalid length. [ 724.947823][T15584] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 724.988789][T15592] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 724.996255][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 725.003842][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 725.011135][T15592] IPv6: NLM_F_CREATE should be set when creating new route [ 725.286055][T15597] netlink: 'syz.1.3630': attribute type 10 has an invalid length. [ 725.443859][T15596] delete_channel: no stack [ 726.000504][T15621] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.3640'. [ 726.752938][T15635] can: request_module (can-proto-3) failed. [ 726.782783][T15640] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 726.821654][T15640] syzkaller0: linktype set to 769 [ 726.922349][T15643] FAULT_INJECTION: forcing a failure. [ 726.922349][T15643] name failslab, interval 1, probability 0, space 0, times 0 [ 726.936205][T15643] CPU: 0 PID: 15643 Comm: syz.0.3646 Not tainted syzkaller #0 [ 726.945085][T15643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.955637][T15643] Call Trace: [ 726.958958][T15643] [ 726.961919][T15643] dump_stack_lvl+0x188/0x250 [ 726.966642][T15643] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 726.973692][T15643] ? show_regs_print_info+0x20/0x20 [ 726.979041][T15643] ? load_image+0x400/0x400 [ 726.983698][T15643] should_fail+0x38c/0x4c0 [ 726.988167][T15643] should_failslab+0x5/0x20 [ 726.992798][T15643] slab_pre_alloc_hook+0x51/0xc0 [ 726.998088][T15643] ? skb_clone+0x1bd/0x350 [ 727.002855][T15643] kmem_cache_alloc+0x3d/0x290 [ 727.007798][T15643] skb_clone+0x1bd/0x350 [ 727.012140][T15643] ? dev_queue_xmit_nit+0x1f9/0xb00 [ 727.017484][T15643] dev_queue_xmit_nit+0x2cc/0xb00 [ 727.022652][T15643] ? validate_xmit_skb+0x7b3/0xe40 [ 727.027806][T15643] dev_hard_start_xmit+0x13e/0x7e0 [ 727.033238][T15643] __dev_queue_xmit+0x1a9b/0x2f80 [ 727.038482][T15643] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 727.045369][T15643] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 727.051761][T15643] ? dev_queue_xmit+0x20/0x20 [ 727.056740][T15643] ? mark_lock+0x94/0x320 [ 727.061118][T15643] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 727.067620][T15643] ? lock_chain_count+0x20/0x20 [ 727.072710][T15643] ? rcu_lock_acquire+0x30/0x30 [ 727.078147][T15643] ? ip_finish_output2+0x8f7/0x10a0 [ 727.083433][T15643] ? ip_finish_output2+0xaba/0x10a0 [ 727.088943][T15643] ip_finish_output2+0xc87/0x10a0 [ 727.094268][T15643] ? ip_fragment+0x210/0x210 [ 727.098922][T15643] ? ip_skb_dst_mtu+0x584/0x9b0 [ 727.104044][T15643] ? ip_finish_output+0x3e8/0x4b0 [ 727.109355][T15643] ip_output+0x2c0/0x3e0 [ 727.113662][T15643] __ip_queue_xmit+0x11c1/0x1c00 [ 727.118925][T15643] __tcp_transmit_skb+0x1d11/0x3200 [ 727.124457][T15643] ? __tcp_send_ack+0x5d0/0x5d0 [ 727.129454][T15643] ? tcp_fastopen_cookie_check+0x269/0x3c0 [ 727.135339][T15643] tcp_connect+0x2d71/0x4970 [ 727.140134][T15643] tcp_v4_connect+0x103e/0x1a80 [ 727.145148][T15643] ? tcp_twsk_unique+0x990/0x990 [ 727.150156][T15643] __inet_stream_connect+0x244/0xd70 [ 727.155789][T15643] ? inet_dgram_connect+0x360/0x360 [ 727.161162][T15643] tcp_sendmsg_fastopen+0x38f/0x600 [ 727.166513][T15643] tcp_sendmsg_locked+0x2efa/0x3320 [ 727.171988][T15643] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 727.178983][T15643] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 727.185647][T15643] ? __lock_acquire+0x12e8/0x7d10 [ 727.190924][T15643] ? mark_lock+0x94/0x320 [ 727.195483][T15643] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 727.201881][T15643] ? lock_chain_count+0x20/0x20 [ 727.206958][T15643] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 727.213080][T15643] ? tcp_free_fastopen_req+0x70/0x70 [ 727.218598][T15643] tcp_sendmsg+0x2b/0x40 [ 727.222968][T15643] ? inet_send_prepare+0x260/0x260 [ 727.228615][T15643] ____sys_sendmsg+0x5b7/0x8f0 [ 727.233633][T15643] ? __sys_sendmsg_sock+0x30/0x30 [ 727.238807][T15643] ? import_iovec+0x6f/0xa0 [ 727.243445][T15643] ___sys_sendmsg+0x236/0x2e0 [ 727.248267][T15643] ? __sys_sendmsg+0x2a0/0x2a0 [ 727.253279][T15643] ? vfs_write+0x8b2/0xd60 [ 727.257860][T15643] __se_sys_sendmsg+0x1af/0x290 [ 727.263071][T15643] ? __x64_sys_sendmsg+0x80/0x80 [ 727.268168][T15643] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 727.274408][T15643] ? lockdep_hardirqs_on+0x94/0x140 [ 727.279915][T15643] do_syscall_64+0x4c/0xa0 [ 727.284492][T15643] ? clear_bhb_loop+0x30/0x80 [ 727.289398][T15643] ? clear_bhb_loop+0x30/0x80 [ 727.294123][T15643] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 727.300229][T15643] RIP: 0033:0x7fc6b0ade799 [ 727.305765][T15643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.326170][T15643] RSP: 002b:00007fc6aed38028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.335823][T15643] RAX: ffffffffffffffda RBX: 00007fc6b0d57fa0 RCX: 00007fc6b0ade799 [ 727.344197][T15643] RDX: 00000000200440e4 RSI: 00002000000004c0 RDI: 0000000000000003 [ 727.352866][T15643] RBP: 00007fc6aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 727.361103][T15643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.369217][T15643] R13: 00007fc6b0d58038 R14: 00007fc6b0d57fa0 R15: 00007ffef6c76f88 [ 727.377544][T15643] [ 727.402603][T15641] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 728.020067][T15668] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3656'. [ 728.071263][T15669] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3656'. [ 728.152599][T15669] openvswitch: netlink: Key type 4112 is out of range max 29 [ 729.417529][ T4232] Bluetooth: hci3: command 0x0406 tx timeout [ 729.538315][T15696] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 729.552147][T15696] syzkaller0: linktype set to 769 [ 729.697382][T15699] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 729.888672][T15698] validate_nla: 1 callbacks suppressed [ 729.888699][T15698] netlink: 'syz.1.3665': attribute type 10 has an invalid length. [ 729.937546][T15698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3665'. [ 730.254666][T15707] device syzkaller0 entered promiscuous mode [ 731.564669][T15739] netlink: 'syz.4.3680': attribute type 10 has an invalid length. [ 731.585355][T15739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3680'. [ 732.118469][T15750] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 732.137816][T15750] syzkaller0: linktype set to 769 [ 732.217048][T15750] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 732.910270][T15773] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3690'. [ 732.921292][T15779] netlink: 'syz.1.3691': attribute type 10 has an invalid length. [ 732.976237][T15773] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.3690'. [ 733.034114][T15773] tipc: Started in network mode [ 733.089540][T15773] tipc: Node identity d, cluster identity 46 [ 733.146036][T15773] tipc: Node number set to 13 [ 733.180533][T15778] delete_channel: no stack [ 733.804332][T15794] netlink: 'syz.4.3695': attribute type 10 has an invalid length. [ 733.858925][T15794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3695'. [ 734.374279][T15797] syz.1.3697[15797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 734.374584][T15797] syz.1.3697[15797] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 734.635543][T15772] delete_channel: no stack [ 734.975915][T15809] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 735.002233][T15809] syzkaller0: linktype set to 769 [ 735.239041][T15809] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 735.514539][T15824] netlink: 'syz.1.3708': attribute type 3 has an invalid length. [ 735.523189][T15824] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3708'. [ 736.135599][ T144] device hsr_slave_0 left promiscuous mode [ 736.143656][ T144] device hsr_slave_1 left promiscuous mode [ 736.231850][ T144] bridge0: port 3(team0) entered disabled state [ 736.258482][ T144] bridge0: port 2(dummy0) entered disabled state [ 736.425779][ T144] device bridge_slave_0 left promiscuous mode [ 736.439225][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.653334][ T144] device team_slave_1 left promiscuous mode [ 736.664446][ T144] team0 (unregistering): Port device team_slave_1 removed [ 736.692499][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.723864][ T144] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 736.811516][ T144] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 736.827881][ T144] bond0 (unregistering): Released all slaves [ 736.898151][T15831] netlink: 'syz.5.3710': attribute type 25 has an invalid length. [ 736.906218][T15831] netlink: 'syz.5.3710': attribute type 29 has an invalid length. [ 737.146739][T15857] netlink: 'syz.5.3718': attribute type 21 has an invalid length. [ 737.163117][T15848] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3715'. [ 737.174854][T15857] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3718'. [ 737.396614][T15848] netlink: 20624 bytes leftover after parsing attributes in process `syz.4.3715'. [ 737.516174][T15848] tipc: Started in network mode [ 737.533929][T15848] tipc: Node identity d, cluster identity 46 [ 737.617572][T15848] tipc: Node number set to 13 [ 738.238286][T15847] delete_channel: no stack [ 738.304405][T15868] netlink: 'syz.0.3721': attribute type 3 has an invalid length. [ 738.320544][T15868] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3721'. [ 738.504467][T15878] FAULT_INJECTION: forcing a failure. [ 738.504467][T15878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.529883][T15878] CPU: 1 PID: 15878 Comm: syz.5.3725 Not tainted syzkaller #0 [ 738.537640][T15878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.547954][T15878] Call Trace: [ 738.551442][T15878] [ 738.554406][T15878] dump_stack_lvl+0x188/0x250 [ 738.559212][T15878] ? show_regs_print_info+0x20/0x20 [ 738.564846][T15878] ? load_image+0x400/0x400 [ 738.570070][T15878] ? __lock_acquire+0x7d10/0x7d10 [ 738.575471][T15878] should_fail+0x38c/0x4c0 [ 738.580225][T15878] _copy_from_user+0x2e/0x170 [ 738.585176][T15878] ___sys_recvmsg+0x173/0x5c0 [ 738.590002][T15878] ? __sys_recvmsg+0x280/0x280 [ 738.595169][T15878] ? __lock_acquire+0x7d10/0x7d10 [ 738.600539][T15878] __x64_sys_recvmsg+0x1f9/0x2c0 [ 738.605802][T15878] ? ___sys_recvmsg+0x5c0/0x5c0 [ 738.610966][T15878] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 738.617290][T15878] ? lockdep_hardirqs_on+0x94/0x140 [ 738.623034][T15878] do_syscall_64+0x4c/0xa0 [ 738.627759][T15878] ? clear_bhb_loop+0x30/0x80 [ 738.632481][T15878] ? clear_bhb_loop+0x30/0x80 [ 738.637297][T15878] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 738.643326][T15878] RIP: 0033:0x7f9988647799 [ 738.647780][T15878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.668482][T15878] RSP: 002b:00007f9986880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 738.677321][T15878] RAX: ffffffffffffffda RBX: 00007f99888c1090 RCX: 00007f9988647799 [ 738.685573][T15878] RDX: 0000000000000021 RSI: 0000200000000400 RDI: 0000000000000005 [ 738.693771][T15878] RBP: 00007f9986880090 R08: 0000000000000000 R09: 0000000000000000 [ 738.702065][T15878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.710826][T15878] R13: 00007f99888c1128 R14: 00007f99888c1090 R15: 00007ffd5c62ed98 [ 738.719388][T15878] [ 739.305165][T15884] netlink: 'syz.5.3729': attribute type 10 has an invalid length. [ 739.369438][T15884] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3729'. [ 739.408610][T15884] device team0 entered promiscuous mode [ 739.438676][T15884] device team_slave_0 entered promiscuous mode [ 739.512809][T15884] device team_slave_1 entered promiscuous mode [ 739.566211][T15884] bridge0: port 3(team0) entered blocking state [ 739.608483][T15884] bridge0: port 3(team0) entered disabled state [ 739.692384][T15884] bridge0: port 3(team0) entered blocking state [ 739.700037][T15884] bridge0: port 3(team0) entered forwarding state [ 740.297273][T15904] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.3736'. [ 740.347840][T15903] netlink: 'syz.1.3735': attribute type 25 has an invalid length. [ 740.530368][T15903] netlink: 'syz.1.3735': attribute type 29 has an invalid length. [ 740.772050][T15904] netlink: 20624 bytes leftover after parsing attributes in process `syz.5.3736'. [ 740.799032][T15904] tipc: Started in network mode [ 740.803991][T15904] tipc: Node identity d, cluster identity 46 [ 740.872033][T15904] tipc: Node number set to 13 [ 741.579986][T15902] delete_channel: no stack [ 741.931774][T15923] netlink: 'syz.5.3741': attribute type 3 has an invalid length. [ 741.965656][T15923] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3741'. [ 743.769831][T15946] netlink: 'syz.1.3751': attribute type 10 has an invalid length. [ 743.818090][T15946] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3751'. [ 744.201820][T15943] netlink: 'syz.5.3750': attribute type 25 has an invalid length. [ 744.219370][T15943] netlink: 'syz.5.3750': attribute type 29 has an invalid length. [ 744.253094][T15956] netlink: 'syz.4.3754': attribute type 10 has an invalid length. [ 744.280088][T15955] delete_channel: no stack [ 744.387547][ T4228] Bluetooth: hci4: command 0x0406 tx timeout [ 744.560160][T15962] netlink: 'syz.5.3757': attribute type 10 has an invalid length. [ 744.795532][T15962] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3757'. [ 747.332009][T15981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3762'. [ 747.485269][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.491926][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.688251][T15990] FAULT_INJECTION: forcing a failure. [ 747.688251][T15990] name failslab, interval 1, probability 0, space 0, times 0 [ 747.808563][T15990] CPU: 1 PID: 15990 Comm: syz.1.3764 Not tainted syzkaller #0 [ 747.816374][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.826922][T15990] Call Trace: [ 747.830439][T15990] [ 747.833439][T15990] dump_stack_lvl+0x188/0x250 [ 747.838185][T15990] ? show_regs_print_info+0x20/0x20 [ 747.843458][T15990] ? load_image+0x400/0x400 [ 747.848222][T15990] ? perf_trace_lock_acquire+0x340/0x3e0 [ 747.853984][T15990] should_fail+0x38c/0x4c0 [ 747.858670][T15990] should_failslab+0x5/0x20 [ 747.863370][T15990] slab_pre_alloc_hook+0x51/0xc0 [ 747.868803][T15990] kmem_cache_alloc_node+0x47/0x2d0 [ 747.875135][T15990] ? __alloc_skb+0xf4/0x750 [ 747.880497][T15990] __alloc_skb+0xf4/0x750 [ 747.885576][T15990] ? lock_chain_count+0x20/0x20 [ 747.890704][T15990] tcp_send_fin+0x1ac/0xe80 [ 747.895362][T15990] ? trace_inet_sock_set_state+0x80/0x1c0 [ 747.901177][T15990] __tcp_close+0x5e4/0xfa0 [ 747.906019][T15990] ? do_raw_spin_unlock+0x11d/0x230 [ 747.911657][T15990] tcp_close+0x24/0x110 [ 747.916061][T15990] inet_release+0x139/0x180 [ 747.920951][T15990] sock_release+0x7b/0x140 [ 747.925630][T15990] smc_clcsock_release+0xc5/0xe0 [ 747.931192][T15990] __smc_release+0x398/0x500 [ 747.936571][T15990] smc_release+0x2ca/0x530 [ 747.941426][T15990] sock_close+0xd5/0x240 [ 747.946544][T15990] ? sock_mmap+0x90/0x90 [ 747.951371][T15990] __fput+0x234/0x930 [ 747.955456][T15990] task_work_run+0x125/0x1a0 [ 747.960318][T15990] exit_to_user_mode_loop+0x10f/0x130 [ 747.966090][T15990] exit_to_user_mode_prepare+0xee/0x180 [ 747.972231][T15990] syscall_exit_to_user_mode+0x16/0x40 [ 747.977774][T15990] do_syscall_64+0x58/0xa0 [ 747.982470][T15990] ? clear_bhb_loop+0x30/0x80 [ 747.987220][T15990] ? clear_bhb_loop+0x30/0x80 [ 747.992048][T15990] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 747.998120][T15990] RIP: 0033:0x7f0b0fa07799 [ 748.003164][T15990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.024291][T15990] RSP: 002b:00007f0b0dc61028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 748.033164][T15990] RAX: 0000000000000000 RBX: 00007f0b0fc80fa0 RCX: 00007f0b0fa07799 [ 748.041724][T15990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 748.050150][T15990] RBP: 00007f0b0dc61090 R08: 0000000000000000 R09: 0000000000000000 [ 748.058442][T15990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.066727][T15990] R13: 00007f0b0fc81038 R14: 00007f0b0fc80fa0 R15: 00007ffce0161c08 [ 748.074945][T15990] [ 748.657227][T16005] netlink: 'syz.1.3768': attribute type 10 has an invalid length. [ 748.698469][T16004] delete_channel: no stack [ 749.386969][T16032] sock: sock_timestamping_bind_phc: sock not bind to device [ 752.047985][T16046] netlink: 'syz.5.3782': attribute type 25 has an invalid length. [ 752.058719][T16046] netlink: 'syz.5.3782': attribute type 29 has an invalid length. [ 752.254917][T16057] netlink: 'syz.2.3784': attribute type 10 has an invalid length. [ 752.270147][T16056] delete_channel: no stack [ 752.280330][T16063] netlink: 'syz.4.3786': attribute type 29 has an invalid length. [ 752.354321][T16063] netlink: 'syz.4.3786': attribute type 29 has an invalid length. [ 752.471303][T16067] netlink: 'syz.5.3787': attribute type 10 has an invalid length. [ 752.504379][T16067] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3787'. [ 752.524883][T16072] netlink: 'syz.4.3786': attribute type 29 has an invalid length. [ 752.779006][T16076] netlink: 'syz.0.3791': attribute type 39 has an invalid length. [ 753.306131][T16084] FAULT_INJECTION: forcing a failure. [ 753.306131][T16084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.346024][T16084] CPU: 0 PID: 16084 Comm: syz.1.3792 Not tainted syzkaller #0 [ 753.353563][T16084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.364470][T16084] Call Trace: [ 753.368028][T16084] [ 753.371200][T16084] dump_stack_lvl+0x188/0x250 [ 753.376499][T16084] ? show_regs_print_info+0x20/0x20 [ 753.382806][T16084] ? load_image+0x400/0x400 [ 753.387578][T16084] ? __lock_acquire+0x7d10/0x7d10 [ 753.393495][T16084] should_fail+0x38c/0x4c0 [ 753.398326][T16084] _copy_from_user+0x2e/0x170 [ 753.403487][T16084] __copy_msghdr_from_user+0xc9/0x630 [ 753.409755][T16084] ? verify_lock_unused+0x140/0x140 [ 753.415728][T16084] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 753.422406][T16084] ___sys_sendmsg+0x19a/0x2e0 [ 753.427784][T16084] ? __sys_sendmsg+0x2a0/0x2a0 [ 753.432871][T16084] ? vfs_write+0x8b2/0xd60 [ 753.438111][T16084] __se_sys_sendmsg+0x1af/0x290 [ 753.444140][T16084] ? __x64_sys_sendmsg+0x80/0x80 [ 753.449747][T16084] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 753.456279][T16084] ? lockdep_hardirqs_on+0x94/0x140 [ 753.461625][T16084] do_syscall_64+0x4c/0xa0 [ 753.466592][T16084] ? clear_bhb_loop+0x30/0x80 [ 753.471534][T16084] ? clear_bhb_loop+0x30/0x80 [ 753.476623][T16084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 753.482817][T16084] RIP: 0033:0x7f0b0fa07799 [ 753.487578][T16084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.508456][T16084] RSP: 002b:00007f0b0dc40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.517679][T16084] RAX: ffffffffffffffda RBX: 00007f0b0fc81090 RCX: 00007f0b0fa07799 [ 753.526110][T16084] RDX: 000000006400480c RSI: 0000200000000240 RDI: 0000000000000004 [ 753.534310][T16084] RBP: 00007f0b0dc40090 R08: 0000000000000000 R09: 0000000000000000 [ 753.542746][T16084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.551219][T16084] R13: 00007f0b0fc81128 R14: 00007f0b0fc81090 R15: 00007ffce0161c08 [ 753.559962][T16084] [ 753.812572][T16081] netlink: 'syz.2.3789': attribute type 25 has an invalid length. [ 753.826084][T16081] netlink: 'syz.2.3789': attribute type 29 has an invalid length. [ 754.989618][T16112] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 754.995800][T16112] syzkaller0: linktype set to 769 [ 755.158070][ T144] device wlan1 left promiscuous mode [ 755.213062][ T144] team0: Port device wlan1 removed [ 756.586088][T16112] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 756.893267][T16130] netlink: 'syz.5.3807': attribute type 39 has an invalid length. [ 757.067866][T16140] FAULT_INJECTION: forcing a failure. [ 757.067866][T16140] name failslab, interval 1, probability 0, space 0, times 0 [ 757.151395][T16140] CPU: 1 PID: 16140 Comm: syz.4.3810 Not tainted syzkaller #0 [ 757.159028][T16140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 757.169568][T16140] Call Trace: [ 757.173004][T16140] [ 757.176085][T16140] dump_stack_lvl+0x188/0x250 [ 757.180905][T16140] ? show_regs_print_info+0x20/0x20 [ 757.186155][T16140] ? load_image+0x400/0x400 [ 757.190768][T16140] should_fail+0x38c/0x4c0 [ 757.195507][T16140] should_failslab+0x5/0x20 [ 757.200164][T16140] slab_pre_alloc_hook+0x51/0xc0 [ 757.205318][T16140] ? skb_clone+0x1bd/0x350 [ 757.210117][T16140] kmem_cache_alloc+0x3d/0x290 [ 757.215376][T16140] skb_clone+0x1bd/0x350 [ 757.220030][T16140] __netlink_deliver_tap+0x3cd/0x7c0 [ 757.225549][T16140] netlink_deliver_tap+0x16c/0x180 [ 757.230790][T16140] netlink_unicast+0x74f/0x920 [ 757.235707][T16140] netlink_sendmsg+0x8ba/0xbe0 [ 757.240945][T16140] ? netlink_getsockopt+0x570/0x570 [ 757.246715][T16140] ? aa_sock_msg_perm+0x94/0x150 [ 757.252027][T16140] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 757.257716][T16140] ? security_socket_sendmsg+0x7c/0xa0 [ 757.263403][T16140] ? netlink_getsockopt+0x570/0x570 [ 757.268660][T16140] ____sys_sendmsg+0x5b7/0x8f0 [ 757.273746][T16140] ? __sys_sendmsg_sock+0x30/0x30 [ 757.279024][T16140] ? import_iovec+0x6f/0xa0 [ 757.283758][T16140] ___sys_sendmsg+0x236/0x2e0 [ 757.288679][T16140] ? __sys_sendmsg+0x2a0/0x2a0 [ 757.293738][T16140] __se_sys_sendmsg+0x1af/0x290 [ 757.298913][T16140] ? __x64_sys_sendmsg+0x80/0x80 [ 757.304094][T16140] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 757.310356][T16140] ? lockdep_hardirqs_on+0x94/0x140 [ 757.316091][T16140] do_syscall_64+0x4c/0xa0 [ 757.320855][T16140] ? clear_bhb_loop+0x30/0x80 [ 757.326164][T16140] ? clear_bhb_loop+0x30/0x80 [ 757.331277][T16140] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 757.337636][T16140] RIP: 0033:0x7fd37d850799 [ 757.342851][T16140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.363450][T16140] RSP: 002b:00007fd37baaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.373024][T16140] RAX: ffffffffffffffda RBX: 00007fd37dac9fa0 RCX: 00007fd37d850799 [ 757.381315][T16140] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 757.389452][T16140] RBP: 00007fd37baaa090 R08: 0000000000000000 R09: 0000000000000000 [ 757.397545][T16140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 757.406012][T16140] R13: 00007fd37daca038 R14: 00007fd37dac9fa0 R15: 00007ffe6a155f58 [ 757.415007][T16140] [ 757.696148][T16140] netlink: 'syz.4.3810': attribute type 10 has an invalid length. [ 758.082373][ T144] device hsr_slave_0 left promiscuous mode [ 758.111041][ T144] device hsr_slave_1 left promiscuous mode [ 758.218189][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.276799][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.289652][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.365341][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.380598][ T144] bridge0: port 2(team0) entered disabled state [ 758.410310][ T144] device bridge_slave_0 left promiscuous mode [ 758.437832][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.459562][T16171] netlink: 'syz.0.3816': attribute type 2 has an invalid length. [ 758.488136][T16171] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3816'. [ 758.504080][ T144] device hsr_slave_0 left promiscuous mode [ 758.539839][ T144] device hsr_slave_1 left promiscuous mode [ 758.589977][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.611633][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.655263][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.668697][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.696553][ T144] bridge0: port 2(team0) entered disabled state [ 758.719561][ T144] device bridge_slave_0 left promiscuous mode [ 758.745770][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.898434][ T144] device veth1_vlan left promiscuous mode [ 758.906626][ T144] device veth0_vlan left promiscuous mode [ 759.688854][ T144] device team_slave_1 left promiscuous mode [ 759.730718][ T144] team0 (unregistering): Port device team_slave_1 removed [ 759.786158][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.816387][ T144] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 759.935813][ T144] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 759.946067][ T144] bond0 (unregistering): Released all slaves [ 760.104760][ T144] device team_slave_1 left promiscuous mode [ 760.116020][ T144] team0 (unregistering): Port device team_slave_1 removed [ 760.135117][ T144] device team_slave_0 left promiscuous mode [ 760.143587][ T144] team0 (unregistering): Port device team_slave_0 removed [ 760.162481][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.194986][ T144] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 760.246923][ T144] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 760.295392][ T144] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 760.306842][ T144] bond0 (unregistering): Released all slaves [ 760.382292][T16180] netlink: 'syz.2.3821': attribute type 25 has an invalid length. [ 760.417581][T16180] netlink: 'syz.2.3821': attribute type 29 has an invalid length. [ 760.851259][T16194] netlink: 'syz.1.3825': attribute type 39 has an invalid length. [ 761.160927][T16199] netlink: 'syz.2.3828': attribute type 25 has an invalid length. [ 761.189271][T16199] netlink: 'syz.2.3828': attribute type 29 has an invalid length. [ 761.490659][T16207] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 762.445471][T16211] netlink: 'syz.2.3833': attribute type 25 has an invalid length. [ 762.467634][T16211] netlink: 'syz.2.3833': attribute type 29 has an invalid length. [ 762.915094][T16246] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 762.953551][T16246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 763.193840][T16252] netlink: 'syz.1.3843': attribute type 10 has an invalid length. [ 763.228697][T16251] delete_channel: no stack [ 763.494072][T16262] FAULT_INJECTION: forcing a failure. [ 763.494072][T16262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.593092][T16262] CPU: 0 PID: 16262 Comm: syz.1.3846 Not tainted syzkaller #0 [ 763.600825][T16262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 763.611643][T16262] Call Trace: [ 763.615151][T16262] [ 763.618140][T16262] dump_stack_lvl+0x188/0x250 [ 763.623198][T16262] ? show_regs_print_info+0x20/0x20 [ 763.628476][T16262] ? load_image+0x400/0x400 [ 763.633061][T16262] ? __lock_acquire+0x7d10/0x7d10 [ 763.638162][T16262] ? trace_call_bpf+0x515/0x5b0 [ 763.643188][T16262] should_fail+0x38c/0x4c0 [ 763.647970][T16262] _copy_from_user+0x2e/0x170 [ 763.652991][T16262] __copy_msghdr_from_user+0xc9/0x630 [ 763.658747][T16262] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 763.664783][T16262] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 763.670520][T16262] ___sys_sendmsg+0x19a/0x2e0 [ 763.675618][T16262] ? __sys_sendmsg+0x2a0/0x2a0 [ 763.680497][T16262] ? trace_event_raw_event_lock+0x270/0x270 [ 763.686840][T16262] ? vfs_write+0x8b2/0xd60 [ 763.691817][T16262] __se_sys_sendmsg+0x1af/0x290 [ 763.697020][T16262] ? __x64_sys_sendmsg+0x80/0x80 [ 763.702258][T16262] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 763.708374][T16262] ? lockdep_hardirqs_on+0x94/0x140 [ 763.713823][T16262] do_syscall_64+0x4c/0xa0 [ 763.718479][T16262] ? clear_bhb_loop+0x30/0x80 [ 763.723322][T16262] ? clear_bhb_loop+0x30/0x80 [ 763.728142][T16262] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 763.734253][T16262] RIP: 0033:0x7f0b0fa07799 [ 763.738820][T16262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.759316][T16262] RSP: 002b:00007f0b0dc61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 763.768197][T16262] RAX: ffffffffffffffda RBX: 00007f0b0fc80fa0 RCX: 00007f0b0fa07799 [ 763.776741][T16262] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 763.785209][T16262] RBP: 00007f0b0dc61090 R08: 0000000000000000 R09: 0000000000000000 [ 763.793485][T16262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.801931][T16262] R13: 00007f0b0fc81038 R14: 00007f0b0fc80fa0 R15: 00007ffce0161c08 [ 763.810440][T16262] [ 764.063141][T13529] wlan1: Trigger new scan to find an IBSS to join [ 764.855971][T16277] netlink: 'syz.5.3849': attribute type 25 has an invalid length. [ 764.878165][T16277] netlink: 'syz.5.3849': attribute type 29 has an invalid length. [ 765.849351][T16303] netlink: 'syz.5.3858': attribute type 10 has an invalid length. [ 765.896609][T16303] bond0: (slave bond_slave_0): Releasing backup interface [ 766.078471][T16302] delete_channel: no stack [ 766.402351][T16320] netlink: 'syz.4.3864': attribute type 10 has an invalid length. [ 766.437282][T16320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3864'. [ 766.746830][T16335] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3868'. [ 766.887070][T16336] netlink: 'syz.2.3869': attribute type 25 has an invalid length. [ 766.978306][T16336] netlink: 'syz.2.3869': attribute type 29 has an invalid length. [ 767.629268][T16356] delete_channel: no stack [ 768.069766][ T743] wlan1: Trigger new scan to find an IBSS to join [ 768.167041][T16378] netlink: 'syz.2.3881': attribute type 10 has an invalid length. [ 768.490975][T16378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3881'. [ 769.395013][T16387] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3886'. [ 769.628351][ T743] wlan1: Creating new IBSS network, BSSID fe:3c:aa:78:15:ff [ 769.671821][T16395] netlink: 'syz.1.3888': attribute type 25 has an invalid length. [ 769.685093][T16395] netlink: 'syz.1.3888': attribute type 29 has an invalid length. [ 769.999360][T16398] delete_channel: no stack [ 770.017033][T16406] netlink: 'syz.4.3890': attribute type 41 has an invalid length. [ 770.579747][T16418] netlink: 'syz.5.3896': attribute type 10 has an invalid length. [ 770.660404][T16418] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3896'. [ 771.550857][T16440] delete_channel: no stack [ 771.925477][T16453] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3907'. [ 772.433566][T16470] FAULT_INJECTION: forcing a failure. [ 772.433566][T16470] name failslab, interval 1, probability 0, space 0, times 0 [ 772.487544][T16470] CPU: 0 PID: 16470 Comm: syz.4.3912 Not tainted syzkaller #0 [ 772.495299][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.505758][T16470] Call Trace: [ 772.509169][T16470] [ 772.512225][T16470] dump_stack_lvl+0x188/0x250 [ 772.517048][T16470] ? show_regs_print_info+0x20/0x20 [ 772.522310][T16470] ? load_image+0x400/0x400 [ 772.526988][T16470] should_fail+0x38c/0x4c0 [ 772.531452][T16470] should_failslab+0x5/0x20 [ 772.536157][T16470] slab_pre_alloc_hook+0x51/0xc0 [ 772.541124][T16470] ? __build_skb+0x26/0x2e0 [ 772.545664][T16470] kmem_cache_alloc+0x3d/0x290 [ 772.550454][T16470] __build_skb+0x26/0x2e0 [ 772.554919][T16470] build_skb+0x1e/0x170 [ 772.559317][T16470] __tun_build_skb+0x32/0x240 [ 772.564024][T16470] tun_get_user+0x19f7/0x3a70 [ 772.568828][T16470] ? tun_ring_recv+0xc40/0xc40 [ 772.573999][T16470] ? rcu_lock_release+0x5/0x20 [ 772.578898][T16470] ? __lock_acquire+0x7d10/0x7d10 [ 772.584259][T16470] tun_chr_write_iter+0x112/0x1e0 [ 772.589333][T16470] vfs_write+0x745/0xd60 [ 772.593624][T16470] ? file_end_write+0x250/0x250 [ 772.598945][T16470] ? __fget_files+0x40f/0x480 [ 772.603813][T16470] ? __fdget_pos+0x1e2/0x370 [ 772.608422][T16470] ? ksys_write+0x71/0x260 [ 772.613412][T16470] ksys_write+0x152/0x260 [ 772.617910][T16470] ? __ia32_sys_read+0x80/0x80 [ 772.622897][T16470] ? lockdep_hardirqs_on+0x94/0x140 [ 772.628121][T16470] do_syscall_64+0x4c/0xa0 [ 772.632833][T16470] ? clear_bhb_loop+0x30/0x80 [ 772.637528][T16470] ? clear_bhb_loop+0x30/0x80 [ 772.642247][T16470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 772.648354][T16470] RIP: 0033:0x7fd37d850799 [ 772.653022][T16470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.673164][T16470] RSP: 002b:00007fd37baaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 772.681966][T16470] RAX: ffffffffffffffda RBX: 00007fd37dac9fa0 RCX: 00007fd37d850799 [ 772.689971][T16470] RDX: 0000000000000055 RSI: 0000200000000000 RDI: 00000000000000c8 [ 772.698061][T16470] RBP: 00007fd37baaa090 R08: 0000000000000000 R09: 0000000000000000 [ 772.706060][T16470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.714139][T16470] R13: 00007fd37daca038 R14: 00007fd37dac9fa0 R15: 00007ffe6a155f58 [ 772.722432][T16470] [ 773.260857][T16473] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 773.285239][T16473] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3913'. [ 773.608298][T16487] delete_channel: no stack [ 774.147021][T16507] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 774.177856][T16507] syzkaller0: linktype set to 769 [ 774.254798][T16507] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 774.422624][T16512] netlink: 'syz.1.3927': attribute type 25 has an invalid length. [ 774.440474][T16518] FAULT_INJECTION: forcing a failure. [ 774.440474][T16518] name failslab, interval 1, probability 0, space 0, times 0 [ 774.460754][T16512] netlink: 'syz.1.3927': attribute type 29 has an invalid length. [ 774.475973][T16518] CPU: 0 PID: 16518 Comm: syz.0.3930 Not tainted syzkaller #0 [ 774.483623][T16518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.494125][T16518] Call Trace: [ 774.497573][T16518] [ 774.500628][T16518] dump_stack_lvl+0x188/0x250 [ 774.505354][T16518] ? show_regs_print_info+0x20/0x20 [ 774.510782][T16518] ? load_image+0x400/0x400 [ 774.515471][T16518] ? __might_sleep+0xf0/0xf0 [ 774.520367][T16518] ? __lock_acquire+0x7d10/0x7d10 [ 774.525536][T16518] should_fail+0x38c/0x4c0 [ 774.530014][T16518] should_failslab+0x5/0x20 [ 774.534652][T16518] slab_pre_alloc_hook+0x51/0xc0 [ 774.539637][T16518] ? getname_flags+0xb5/0x500 [ 774.544376][T16518] kmem_cache_alloc+0x3d/0x290 [ 774.549197][T16518] getname_flags+0xb5/0x500 [ 774.553752][T16518] do_sys_openat2+0xdd/0x4b0 [ 774.558383][T16518] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 774.564754][T16518] ? rcu_nmi_exit+0x6f/0xf0 [ 774.569309][T16518] ? do_sys_open+0xe0/0xe0 [ 774.573860][T16518] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 774.580104][T16518] ? lock_chain_count+0x20/0x20 [ 774.585176][T16518] ? vtime_user_exit+0x2c8/0x3e0 [ 774.590449][T16518] __x64_sys_openat+0x135/0x160 [ 774.595549][T16518] do_syscall_64+0x4c/0xa0 [ 774.600514][T16518] ? clear_bhb_loop+0x30/0x80 [ 774.605556][T16518] ? clear_bhb_loop+0x30/0x80 [ 774.610882][T16518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 774.617882][T16518] RIP: 0033:0x7fc6b0a9efce [ 774.622610][T16518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 774.642965][T16518] RSP: 002b:00007fc6aed37ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.651676][T16518] RAX: ffffffffffffffda RBX: 00007fc6aed386c0 RCX: 00007fc6b0a9efce [ 774.659856][T16518] RDX: 0000000000000002 RSI: 00007fc6aed37f90 RDI: ffffffffffffff9c [ 774.667953][T16518] RBP: 00007fc6aed38090 R08: 0000000000000000 R09: 0000000000000000 [ 774.675995][T16518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.684461][T16518] R13: 00007fc6b0d58038 R14: 00007fc6b0d57fa0 R15: 00007ffef6c76f88 [ 774.693301][T16518] [ 774.722876][T16520] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3931'. [ 774.736590][T16520] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3931'. [ 774.806334][T16521] delete_channel: no stack [ 775.010964][T16530] netlink: 'syz.0.3933': attribute type 10 has an invalid length. [ 775.041385][T16530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3933'. [ 776.599132][T16566] device wlan0 entered promiscuous mode [ 776.648841][T16564] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 776.706431][T16564] syzkaller0: linktype set to 769 [ 776.762304][T16569] netlink: 'syz.2.3945': attribute type 25 has an invalid length. [ 776.785820][T16569] netlink: 'syz.2.3945': attribute type 29 has an invalid length. [ 776.869742][T16564] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 777.977746][T16598] netlink: 'syz.5.3957': attribute type 21 has an invalid length. [ 778.001805][T16598] netlink: 'syz.5.3957': attribute type 1 has an invalid length. [ 778.039970][T16598] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3957'. [ 778.082895][T16603] FAULT_INJECTION: forcing a failure. [ 778.082895][T16603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.159157][T16603] CPU: 0 PID: 16603 Comm: syz.1.3959 Not tainted syzkaller #0 [ 778.166874][T16603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.177443][T16603] Call Trace: [ 778.180849][T16603] [ 778.183901][T16603] dump_stack_lvl+0x188/0x250 [ 778.188636][T16603] ? show_regs_print_info+0x20/0x20 [ 778.193989][T16603] ? load_image+0x400/0x400 [ 778.198813][T16603] ? __lock_acquire+0x7d10/0x7d10 [ 778.204281][T16603] should_fail+0x38c/0x4c0 [ 778.209012][T16603] _copy_from_user+0x2e/0x170 [ 778.214097][T16603] iovec_from_user+0x142/0x370 [ 778.219007][T16603] __import_iovec+0x70/0x490 [ 778.223663][T16603] import_iovec+0x6f/0xa0 [ 778.228712][T16603] ___sys_recvmsg+0x4e9/0x5c0 [ 778.233541][T16603] ? __sys_recvmsg+0x280/0x280 [ 778.238552][T16603] ? __lock_acquire+0x7d10/0x7d10 [ 778.243971][T16603] __x64_sys_recvmsg+0x1f9/0x2c0 [ 778.249317][T16603] ? ___sys_recvmsg+0x5c0/0x5c0 [ 778.254315][T16603] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 778.260462][T16603] ? lockdep_hardirqs_on+0x94/0x140 [ 778.265823][T16603] do_syscall_64+0x4c/0xa0 [ 778.270291][T16603] ? clear_bhb_loop+0x30/0x80 [ 778.275443][T16603] ? clear_bhb_loop+0x30/0x80 [ 778.280358][T16603] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 778.287527][T16603] RIP: 0033:0x7f0b0fa07799 [ 778.292351][T16603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.312952][T16603] RSP: 002b:00007f0b0dc61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 778.321602][T16603] RAX: ffffffffffffffda RBX: 00007f0b0fc80fa0 RCX: 00007f0b0fa07799 [ 778.330039][T16603] RDX: 0000000040000000 RSI: 0000200000000e80 RDI: 0000000000000003 [ 778.338941][T16603] RBP: 00007f0b0dc61090 R08: 0000000000000000 R09: 0000000000000000 [ 778.347317][T16603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.355541][T16603] R13: 00007f0b0fc81038 R14: 00007f0b0fc80fa0 R15: 00007ffce0161c08 [ 778.364065][T16603] [ 778.409113][T16605] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3960'. [ 778.479287][T16607] netlink: 'syz.0.3961': attribute type 10 has an invalid length. [ 778.507939][T16607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3961'. [ 778.626648][T16615] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 778.653554][T16615] syzkaller0: linktype set to 769 [ 778.892342][T16625] netlink: 'syz.4.3964': attribute type 25 has an invalid length. [ 778.979982][T16625] netlink: 'syz.4.3964': attribute type 29 has an invalid length. [ 779.067160][T16615] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 779.896395][T16650] bond0: (slave bridge0): Error: Slave device does not support XDP [ 797.667788][ T4233] Bluetooth: hci5: command 0x0409 tx timeout [ 798.067908][ T4233] Bluetooth: hci7: command 0x0409 tx timeout [ 798.082813][ T4233] Bluetooth: hci6: command 0x0409 tx timeout [ 798.171219][ T4233] Bluetooth: hci9: command 0x0409 tx timeout [ 798.217707][ T4233] Bluetooth: hci8: command 0x0409 tx timeout [ 799.767780][ T1108] Bluetooth: hci5: command 0x041b tx timeout [ 800.167927][ T1108] Bluetooth: hci6: command 0x041b tx timeout [ 800.177673][ T1108] Bluetooth: hci7: command 0x041b tx timeout [ 800.217830][ T1108] Bluetooth: hci9: command 0x041b tx timeout [ 800.317670][ T1108] Bluetooth: hci8: command 0x041b tx timeout [ 801.817794][ T1108] Bluetooth: hci5: command 0x040f tx timeout [ 802.221634][ T1108] Bluetooth: hci7: command 0x040f tx timeout [ 802.239345][ T1108] Bluetooth: hci6: command 0x040f tx timeout [ 802.317834][ T1108] Bluetooth: hci9: command 0x040f tx timeout [ 802.417753][ T1108] Bluetooth: hci8: command 0x040f tx timeout [ 803.917817][ T1108] Bluetooth: hci5: command 0x0419 tx timeout [ 804.321133][ T1108] Bluetooth: hci6: command 0x0419 tx timeout [ 804.337469][ T1108] Bluetooth: hci7: command 0x0419 tx timeout [ 804.417801][ T1108] Bluetooth: hci9: command 0x0419 tx timeout [ 804.470812][ T1108] Bluetooth: hci8: command 0x0419 tx timeout [ 810.171436][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 821.217735][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 840.217874][T13529] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.817831][ T1108] Bluetooth: hci11: command 0x0409 tx timeout [ 858.867787][ T1108] Bluetooth: hci10: command 0x0409 tx timeout [ 859.018703][ T1108] Bluetooth: hci12: command 0x0409 tx timeout [ 859.117796][ T1108] Bluetooth: hci13: command 0x0409 tx timeout [ 859.217712][ T1108] Bluetooth: hci14: command 0x0409 tx timeout [ 860.871178][T15267] Bluetooth: hci11: command 0x041b tx timeout [ 860.967732][T15267] Bluetooth: hci10: command 0x041b tx timeout [ 861.117951][T15267] Bluetooth: hci12: command 0x041b tx timeout [ 861.217789][T15267] Bluetooth: hci13: command 0x041b tx timeout [ 861.267733][T15267] Bluetooth: hci14: command 0x041b tx timeout [ 862.970842][T15267] Bluetooth: hci11: command 0x040f tx timeout [ 863.018037][T15267] Bluetooth: hci10: command 0x040f tx timeout [ 863.217784][T15267] Bluetooth: hci12: command 0x040f tx timeout [ 863.270698][T15267] Bluetooth: hci13: command 0x040f tx timeout [ 863.367600][T15267] Bluetooth: hci14: command 0x040f tx timeout [ 865.017919][ T1108] Bluetooth: hci11: command 0x0419 tx timeout [ 865.117807][ T1108] Bluetooth: hci10: command 0x0419 tx timeout [ 865.267814][T15267] Bluetooth: hci12: command 0x0419 tx timeout [ 865.371218][T15267] Bluetooth: hci13: command 0x0419 tx timeout [ 865.417736][T15267] Bluetooth: hci14: command 0x0419 tx timeout [ 884.667359][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 884.676470][ C1] rcu: 0-....: (1 GPs behind) idle=943/1/0x4000000000000000 softirq=49249/49250 fqs=2078 [ 884.689434][ C1] (detected by 1, t=10503 jiffies, g=65645, q=1209) [ 884.697577][ C1] Sending NMI from CPU 1 to CPUs 0: [ 884.703328][ C0] NMI backtrace for cpu 0 [ 884.703349][ C0] CPU: 0 PID: 16635 Comm: syz.4.3968 Not tainted syzkaller #0 [ 884.703371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 884.703383][ C0] RIP: 0010:__lock_acquire+0x107e/0x7d10 [ 884.703418][ C0] Code: 00 84 c0 0f 85 28 5b 00 00 41 01 de 83 3d 91 01 2d 0c 00 4c 8b 7c 24 18 0f 85 f9 02 00 00 48 83 7c 24 70 00 0f 84 34 02 00 00 <48> 8b 44 24 78 48 8d 58 f8 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 [ 884.703434][ C0] RSP: 0018:ffffc90000007100 EFLAGS: 00000002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 884.703452][ C0] RAX: 0000000000000000 RBX: 000000006bbf904b RCX: 00000000d1f0fead [ 884.703466][ C0] RDX: 000000008a86c2f9 RSI: 00000000f40f0ab6 RDI: ffffffff901d40c0 [ 884.703479][ C0] RBP: ffffc90000007350 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 884.703494][ C0] R10: dffffc0000000000 R11: fffffbfff203a819 R12: 00000000317fc64f [ 884.703508][ C0] R13: ffff8880211a3b80 R14: 000000004fe2bad8 R15: ffff8880211a46e0 [ 884.703522][ C0] FS: 00007fd37ba896c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 884.703540][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 884.703553][ C0] CR2: 00007fd37ba68d58 CR3: 000000005fa0d000 CR4: 00000000003506f0 [ 884.703570][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 884.703583][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 884.703596][ C0] Call Trace: [ 884.703605][ C0] [ 884.703633][ C0] ? verify_lock_unused+0x140/0x140 [ 884.703674][ C0] ? perf_trace_lock+0xe4/0x390 [ 884.703697][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 884.703716][ C0] ? llist_add_batch+0x85/0xa0 [ 884.703742][ C0] lock_acquire+0x19e/0x400 [ 884.703763][ C0] ? rcu_lock_acquire+0x9/0x30 [ 884.703787][ C0] ? rcu_lock_release+0x9/0x20 [ 884.703807][ C0] ? read_lock_is_recursive+0x10/0x10 [ 884.703828][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 884.703854][ C0] rcu_lock_acquire+0x2a/0x30 [ 884.703873][ C0] ? rcu_lock_acquire+0x9/0x30 [ 884.703892][ C0] perf_event_output_forward+0xbc/0x2e0 [ 884.703913][ C0] ? perf_get_page_size+0x430/0x430 [ 884.703934][ C0] ? tracing_gen_ctx_irq_test+0xb3/0x130 [ 884.703960][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 884.703980][ C0] __perf_event_overflow+0x364/0x530 [ 884.704003][ C0] perf_tp_event+0x383/0xbf0 [ 884.704025][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 884.704043][ C0] ? __perf_event_overflow+0x415/0x530 [ 884.704075][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 884.704107][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 884.704130][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 884.704153][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 884.704174][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 884.704197][ C0] ? __irq_exit_rcu+0x147/0x230 [ 884.704216][ C0] ? irq_exit_rcu+0x20/0x20 [ 884.704235][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 884.704253][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 884.704275][ C0] trace_hardirqs_on+0x57/0x80 [ 884.704293][ C0] asm_sysvec_irq_work+0x16/0x20 [ 884.704320][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 884.704342][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 f2 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 884.704358][ C0] RSP: 0018:ffffc90000007b00 EFLAGS: 00000206 [ 884.704373][ C0] RAX: b87b4dda15495000 RBX: 1ffff92000000f64 RCX: b87b4dda15495000 [ 884.704387][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 884.704401][ C0] RBP: ffffc90000007bd8 R08: ffff8880b903b30b R09: 1ffff11017207661 [ 884.704415][ C0] R10: dffffc0000000000 R11: ffffed1017207662 R12: ffffffff8c322f00 [ 884.704429][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 884.704451][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.704472][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 884.704491][ C0] ? __iterate_interfaces+0x3c7/0x500 [ 884.704512][ C0] ? __sanitizer_cov_trace_const_cmp4+0x1b/0x80 [ 884.704536][ C0] __rcu_read_unlock+0x78/0xd0 [ 884.704554][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 884.704576][ C0] ieee80211_iterate_active_interfaces_atomic+0x132/0x140 [ 884.704599][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 884.704618][ C0] ? hw_scan_work+0xed0/0xed0 [ 884.704635][ C0] __hrtimer_run_queues+0x4f2/0xb70 [ 884.704782][ C0] ? hrtimer_interrupt+0x8d0/0x8d0 [ 884.704832][ C0] hrtimer_run_softirq+0x176/0x240 [ 884.704859][ C0] handle_softirqs+0x339/0x830 [ 884.704890][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 884.704916][ C0] ? do_softirq+0x210/0x210 [ 884.704938][ C0] __irq_exit_rcu+0x13b/0x230 [ 884.704956][ C0] ? irq_exit_rcu+0x20/0x20 [ 884.704979][ C0] irq_exit_rcu+0x5/0x20 [ 884.704995][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 884.705018][ C0] [ 884.705025][ C0] [ 884.705031][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.705054][ C0] RIP: 0010:stack_depot_save+0x0/0x440 [ 884.705078][ C0] Code: 18 18 48 89 0e 8b 44 18 0c eb 02 31 c0 5b 41 5e 41 5f c3 48 c7 c7 80 6c 93 8c 49 89 f7 4c 89 f6 e8 c5 5b 00 00 4c 89 fe eb bd <55> 41 57 41 56 41 55 41 54 53 48 83 ec 28 65 48 8b 04 25 28 00 00 [ 884.705096][ C0] RSP: 0018:ffffc90002ecf398 EFLAGS: 00000246 [ 884.705114][ C0] RAX: 000000000000000b RBX: ffff888147e06000 RCX: b87b4dda15495001 [ 884.705129][ C0] RDX: 0000000000000c40 RSI: 000000000000000b RDI: ffffc90002ecf3a0 [ 884.705143][ C0] RBP: ffffc90002ecf5c0 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 884.705158][ C0] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: ffff888147e07000 [ 884.705173][ C0] R13: dffffc0000000000 R14: 0000000000000c40 R15: ffffc90002ecf3a0 [ 884.705203][ C0] __kasan_kmalloc+0xcc/0xf0 [ 884.705225][ C0] ? __kasan_kmalloc+0xb5/0xf0 [ 884.705243][ C0] ? tomoyo_realpath_from_path+0x118/0x610 [ 884.705261][ C0] ? tomoyo_check_open_permission+0x1eb/0x410 [ 884.705282][ C0] ? security_file_open+0x5e/0xa0 [ 884.705302][ C0] ? do_dentry_open+0x322/0xf80 [ 884.705330][ C0] ? path_openat+0x26f5/0x2fa0 [ 884.705348][ C0] ? do_filp_open+0x1e2/0x410 [ 884.705366][ C0] ? do_sys_openat2+0x150/0x4b0 [ 884.705381][ C0] ? __x64_sys_openat+0x135/0x160 [ 884.705397][ C0] ? do_syscall_64+0x4c/0xa0 [ 884.705413][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 884.705455][ C0] tomoyo_realpath_from_path+0x118/0x610 [ 884.705481][ C0] tomoyo_check_open_permission+0x1eb/0x410 [ 884.705504][ C0] ? tomoyo_check_path_number_acl+0x280/0x280 [ 884.705526][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 884.705563][ C0] ? tomoyo_file_open+0xe9/0x170 [ 884.705581][ C0] security_file_open+0x5e/0xa0 [ 884.705602][ C0] do_dentry_open+0x322/0xf80 [ 884.705630][ C0] path_openat+0x26f5/0x2fa0 [ 884.705670][ C0] ? do_filp_open+0x410/0x410 [ 884.705690][ C0] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 884.705722][ C0] do_filp_open+0x1e2/0x410 [ 884.705743][ C0] ? vfs_tmpfile+0x300/0x300 [ 884.705925][ C0] ? _raw_spin_unlock+0x24/0x40 [ 884.705953][ C0] ? alloc_fd+0x598/0x630 [ 884.705974][ C0] do_sys_openat2+0x150/0x4b0 [ 884.705997][ C0] ? do_sys_open+0xe0/0xe0 [ 884.706016][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.706043][ C0] __x64_sys_openat+0x135/0x160 [ 884.706064][ C0] do_syscall_64+0x4c/0xa0 [ 884.706082][ C0] ? clear_bhb_loop+0x30/0x80 [ 884.706100][ C0] ? clear_bhb_loop+0x30/0x80 [ 884.706119][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 884.706140][ C0] RIP: 0033:0x7fd37d850799 [ 884.706162][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.706178][ C0] RSP: 002b:00007fd37ba89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 884.706198][ C0] RAX: ffffffffffffffda RBX: 00007fd37daca090 RCX: 00007fd37d850799 [ 884.706213][ C0] RDX: 0000000000000200 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 884.706227][ C0] RBP: 00007fd37d8e6c99 R08: 0000000000000000 R09: 0000000000000000 [ 884.706241][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 884.706252][ C0] R13: 00007fd37daca128 R14: 00007fd37daca090 R15: 00007ffe6a155f58 [ 884.706277][ C0] [ 885.691794][ T4228] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10600 jiffies s: 33913 root: 0x1/. [ 885.714613][ T4228] rcu: blocking rcu_node structures (internal RCU debug): [ 885.723322][ T4228] Task dump for CPU 0: [ 885.727973][ T4228] task:syz.4.3968 state:R running task stack:25264 pid:16635 ppid: 13476 flags:0x0000400c [ 885.741040][ T4228] Call Trace: [ 885.745223][ T4228] [ 885.749444][ T4228] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 885.756519][ T4228] ? rcu_lock_release+0x5/0x20 [ 885.762099][ T4228] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 885.769085][ T4228] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 885.778499][ T4228] ? rcu_nmi_exit+0x6f/0xf0 [ 885.783261][ T4228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 885.791211][ T4228] ? rcu_is_watching+0x11/0xa0 [ 885.796332][ T4228] ? sysvec_apic_timer_interrupt+0x80/0xc0 [ 885.803076][ T4228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 885.810180][ T4228] ? stack_depot_fetch+0x80/0x80 [ 885.815690][ T4228] ? __kasan_kmalloc+0xcc/0xf0 [ 885.821055][ T4228] ? __kasan_kmalloc+0xb5/0xf0 [ 885.826224][ T4228] ? tomoyo_realpath_from_path+0x118/0x610 [ 885.832601][ T4228] ? tomoyo_check_open_permission+0x1eb/0x410 [ 885.839193][ T4228] ? security_file_open+0x5e/0xa0 [ 885.844728][ T4228] ? do_dentry_open+0x322/0xf80 [ 885.850171][ T4228] ? path_openat+0x26f5/0x2fa0 [ 885.855998][ T4228] ? do_filp_open+0x1e2/0x410 [ 885.861232][ T4228] ? do_sys_openat2+0x150/0x4b0 [ 885.866503][ T4228] ? __x64_sys_openat+0x135/0x160 [ 885.872009][ T4228] ? do_syscall_64+0x4c/0xa0 [ 885.876953][ T4228] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 885.883518][ T4228] ? tomoyo_realpath_from_path+0x118/0x610 [ 885.890537][ T4228] ? tomoyo_check_open_permission+0x1eb/0x410 [ 885.897070][ T4228] ? tomoyo_check_path_number_acl+0x280/0x280 [ 885.903735][ T4228] ? rcu_nmi_exit+0x6f/0xf0 [ 885.908603][ T4228] ? tomoyo_file_open+0xe9/0x170 [ 885.915108][ T4228] ? security_file_open+0x5e/0xa0 [ 885.920460][ T4228] ? do_dentry_open+0x322/0xf80 [ 885.926526][ T4228] ? path_openat+0x26f5/0x2fa0 [ 885.932364][ T4228] ? do_filp_open+0x410/0x410 [ 885.939435][ T4228] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 885.946735][ T4228] ? do_filp_open+0x1e2/0x410 [ 885.952689][ T4228] ? vfs_tmpfile+0x300/0x300 [ 885.958090][ T4228] ? _raw_spin_unlock+0x24/0x40 [ 885.964018][ T4228] ? alloc_fd+0x598/0x630 [ 885.969137][ T4228] ? do_sys_openat2+0x150/0x4b0 [ 885.975184][ T4228] ? do_sys_open+0xe0/0xe0 [ 885.981133][ T4228] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 885.988874][ T4228] ? __x64_sys_openat+0x135/0x160 [ 885.996235][ T4228] ? do_syscall_64+0x4c/0xa0 [ 886.001508][ T4228] ? clear_bhb_loop+0x30/0x80 [ 886.006697][ T4228] ? clear_bhb_loop+0x30/0x80 [ 886.011682][ T4228] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 886.018522][ T4228]