last executing test programs: 2m34.513250679s ago: executing program 4 (id=1437): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x3, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000004007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2m34.259522183s ago: executing program 4 (id=1439): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100010000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x0, 0x1, 0x5, 0x73fa6f4e12b91e30, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x4000040) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4098, 0x1002}], 0x1}, 0x101a0) close(r4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB='\n\x00\x00\x00( \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="540785667bb384eeb49e2d7ff20904abf6a4955f4641e74b4b135d971ae418bf6e70f3f5900e92e2d0bad23bbe17f867ba5ce922edc59d5061c2bcce5883", @ANYRES64=0x0], 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfdef) openat$cgroup_devices(r10, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd5, 0x8000000000000000}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) 2m33.227587642s ago: executing program 4 (id=1449): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x80, 0x9, 0x8, 0x7, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7229784) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x9e, 0xe, 0x0, 0x6, 0x0, 0x8087, 0x80a00, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x800, 0x56b}, 0x10001, 0x5, 0x6, 0x7, 0x8, 0x6, 0x2ef, 0x0, 0x0, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x7, r0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x0, 0x0, 0xc2bb, 0x3}, 0x0, 0xbdffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8a9) socket$kcm(0x29, 0x5, 0x0) 2m31.647588318s ago: executing program 4 (id=1455): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@caif, 0x80, &(0x7f0000000000)=[{&(0x7f0000000140)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYBLOB="289ba897cb6307061ac2357909ff5b86bc7ba8cf3e061ed5ce31d09c64a91d415ee33667590da7c4759f83a0be5c5625a5cf8cebbbb8b427c51285c7243d399c27290f776f80a09c4bc1885dc4d254dbceb15b23a27bce97dd1e00188fb0cab2e603cbba43393c3453f0f88e27f0034e1e68dd4cc8baee42ca9d4cf7ae8fed57ea6083db3ae05365254913ce2e6c3e580bced1942a5ac18c72003cf6f6c02ef1e6554f2cdb3c5321181abd4db3b971b9ae0c3ba5bffbcd9b9c6ef8da682a7c75d6a36f557ef80deed50a63d7221cfdb2d47476fec369fb13350ad2df345f"], 0x10b8}, 0x2) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12000) recvmsg$kcm(r2, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0}, 0x40000002) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) socket$kcm(0x10, 0x2, 0x10) 2m31.177553698s ago: executing program 4 (id=1456): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r4}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x43, &(0x7f0000000000), 0xff7b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x9600a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r6, 0x4) r8 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x4400, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x11, 0x0, &(0x7f0000000100), 0x0, 0x9766, 0x1000, &(0x7f0000000c40)=""/4096, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x8, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001cc0)=[r6, r6, r8, r6, r6], &(0x7f0000001d00)=[{0x5, 0x1, 0x10, 0x4}, {0x4, 0x3, 0xc, 0x2}], 0x10, 0xfffffffa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e40)={{r6}, 0x0, &(0x7f0000001e00)=r9}, 0x20) 2m30.101027207s ago: executing program 4 (id=1460): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x94450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x38, 0x40080}, 0x810) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7"], 0xfdef) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xfed0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async, rerun: 64) close(r7) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) 2m14.574749266s ago: executing program 32 (id=1460): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x5d31, 0x94450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x18, 0x1, 0x1, [r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}], 0x38, 0x40080}, 0x810) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7"], 0xfdef) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r4}, 0xfed0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async, rerun: 64) close(r7) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) 8.781349174s ago: executing program 3 (id=2255): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xf, 0x22, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000007000000000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900001000000055090100b4fbffff9400000000000000186600000a0000000000000000000000180000000800000000000000810c000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000018590000010000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000700)=[r1], &(0x7f0000000740)=[{0x2, 0x1, 0xc, 0x8}, {0x0, 0x3, 0xc, 0x2}, {0x0, 0x3, 0xf, 0xc}], 0x10, 0x101}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000840)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x400c0) close(0xffffffffffffffff) r5 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000000000000000000000100000008000000000000001400000000000000000000000200000004000000", @ANYRES32], 0x68}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)=ANY=[], 0x8b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 7.383162171s ago: executing program 3 (id=2256): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x38}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x14, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8000080}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r0, 0x0, 0x1, 0x5, &(0x7f00000001c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r2, r0, 0xf, 0x20, 0x0, @void, @void, @void, @value, r6}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d00000000000000000000008500000005", @ANYRES32=r7], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 6.311296739s ago: executing program 0 (id=2263): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), &(0x7f00000002c0)=r1}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 6.124674349s ago: executing program 3 (id=2264): openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10006, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3, 0x81, 0x40, 0x6, 0x0, 0x9, 0x10600, 0xa9696f021dc20a87, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x64, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x3, 0x4, 0x9, 0x7, 0x3, 0x3c, 0x0, 0x3ff, 0x0, 0x800}, r3, 0x2, r0, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xd0}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) r5 = syz_clone(0x1000, &(0x7f0000000080)="63fc8afa50", 0x5, &(0x7f0000000100), &(0x7f0000000340), 0x0) r6 = perf_event_open$cgroup(&(0x7f00000011c0)={0x5, 0x80, 0x0, 0x8, 0xaa, 0x1, 0x0, 0xffffffffffffffff, 0x20008, 0xe, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0}, 0x23377aedef665294, 0x5, 0xc8, 0x9, 0x4, 0x0, 0xb6b, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001280)={r5, r6, 0x0, 0x1, &(0x7f0000001240)='\x00'}, 0x30) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000a40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xdd, 0xdd, 0x9, [@typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @datasec={0x1, 0x9, 0x0, 0xf, 0x1, [{0x5, 0xb, 0x7}, {0x3, 0xa, 0x9846}, {0x4, 0x0, 0x5}, {0x1, 0x5, 0x3ff}, {0x5, 0x800}, {0x4, 0x8001, 0x401}, {0x4, 0x4, 0x707}, {0x5, 0x9, 0x2}, {0x4, 0x2, 0xf}], "d2"}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x6}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x4, 0xa7}, {0x3, 0x1}]}, @restrict={0x1}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x5f, 0x2e, 0x2e, 0x30, 0x30, 0x2e]}}, &(0x7f0000000c40)=""/244, 0x101, 0xf4, 0x1, 0x100}, 0x28) 5.982324509s ago: executing program 0 (id=2266): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10a44d, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93424fc60", 0x8c0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 5.711389977s ago: executing program 0 (id=2268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="626174616476303239005d15efbcb3e05041e9112887cd697233aaf058c5699b14ecfd2655fdc2f7c38674ba558b66a864dca9f5940397c44ffdf30ba50f505cc5860c8f0f61be91027034d484c6fe876420ee65bac53962ed249dd943bf8504343822cdd86dc73f4c4681"], 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305828, &(0x7f0000000040)=0x20000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="8eeb010018000000000000001400000014000000060000000200000001000006040000000600000000000000000061616100"], &(0x7f00000007c0)=""/160, 0x32, 0xa0, 0x1}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x3) r5 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r5, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xd000000000000000}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r0, 0x0, 0x1, 0x17, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2020) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.numa_stat\x00', 0x275a, 0x0) 4.403321245s ago: executing program 5 (id=2275): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x29, 0x5, 0x542a, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x1f4, 0xd28, 0x0, &(0x7f0000000a80)="ff410800b083dcc1010b3efc8864", 0x0, 0x2fe, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) sendmsg$kcm(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000440)="2e00000024008f866b29924a6f130000005e14060800000000000000000f0000000280a71802dd0000", 0x29}, {&(0x7f00000010c0)="018d4561b6", 0x5}], 0x2}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000000d40)={&(0x7f0000000240)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010100}}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000002c0)="2f9d9ef90108a2c7c89c5a89fbc405ab16af384898d626d4236e195db8e450505b2dccc33b58448b93e7cf18473aff1feb1f9f9317ac30a2057cc9d9b313f29ea68092ed8e35b561aeb06784ca29d4ee08b7184f878f3733627fd95f939cb2561ed14a985055773e8762edeebe5f3cca52d898af8accb00d404cfd9ac0a71bd03d7347fe7c5138aa59ef78888eb2be6934d6c5ac71efb7fde87a68d3034c054aaee89e1efc60de0fc209d8ae9746d949a2679bf8f79b6d15d9d008a88d47d8eb18308190b82aec8eaf7dcafd28e867914f321a85a8dbfa65048e8822561ca40b", 0xe0}, {&(0x7f00000003c0)="8c99f6671d5156dc778cd9d1089961f5ecfde8a39cd3a45f60269b5d41ba539e90af08f68e4d0b0f73ef77b072e3e225a985f3d6b0b4227c381ccb8bc111f00dd7e9d899f96e1652b5059121c4db3057e4e343850699e97f457dbf87cd7ddf6790d742a8a943543109fc0e48c1d1f88f25d32eef7c063604d3da", 0x7a}, {&(0x7f00000005c0)="66155e52586d15ed555403b8a183284a5219a6d515639dbce16fe5a00abb3769e5479b9819e7b4e0566fc3ed7934fec081c3428050308999178b", 0x3a}, {&(0x7f0000000780)="e5cf177754b8aad016bc5264d177623ae89227badfdd45e816e74c3ecf1f214124514acd382011b8f5f5397e7587d85cbb7dde1aa2d378ae62bc000200000abdc5741e1cacd6a1cd49df2951fd75b195d248450743e07f6619370d431f32460ee1f5b188a0582a9c906ccc62d9d4d4d3b4baa542af9b6d26fd3167728702de9cce6b8357b72f1e20d5cbe2e189dc3eee79073e6c12e7f3bb57", 0x99}, {&(0x7f0000000840)="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", 0xfa}, {&(0x7f0000000940)="3bd0706aab325a92851f6ae69f80ea2274b231d68a3dcced73272b", 0x1b}, {&(0x7f0000000980)="f490e6d0802c8d69e93922a202d718ff9aae61221490c20a5032b6d35b841977840425aada9599ddca22a1824df67547cfc278b04faf24b64dbeb6afb3cf03c125b360881b22f605ec62d75902f115b2f4edf4cd0e8e284486492ea39cd03983ffa482986f4e51eaa36da83aed2ee2fcac4ff59e73d4f6d18e273790ca9fda8d91381c36de94cdc899b9e7d4ebbefe0293924959a54969897c7e370c7d94e2f180538024a118a7f52a8b94a6fdac8d295d4dd7aa9a1a1c0b6190", 0xba}, {&(0x7f0000000ac0)="0bec49f3c69166c9363e10eede33f8d139355146bc4325ba2443de1d998abb74a93ceeb65429bcb49b4742f03b217d688c130a21da448ccde51b4005a3d88c634a65059a222fb8d2631d991fc29efcc8837d374b605c48aa5500601ea3de64529e443ffccc15d4aa166e5ed9bbb60e8a8ba33a4c50e70734b7d38756d2610e9434ea319f319d73c200a24021db88135e70dbf00a228f2cb45d71d2e5d41110e05283cc86caf6751b2967aa8875c28c138e6168f9f55c9bf92f4ee8cb13ca91d94b250b7bee88520d259093c362aaafafa88109e7806a", 0xd6}, {&(0x7f0000000bc0)="c0a8d274dc7059c671434c1d4ba678edc16af54e2378202d6598f7138ccba2b1f6cd63fe636336a1ecc832a76ba8e8ca251bf89f41bbdc4e3a87a9493540938813c08edd82575dbae514ba49f2c9a1cb6cc356a853dc1d15f906d5c36a2e6610e004be1ee3", 0x65}], 0x9, &(0x7f0000000d00)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff2}}], 0x30}, 0x40040) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc, 0xffffffffffffd059}, 0x0, 0x2000003, 0x0, 0x8, 0x0, 0x48e7, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 3.824063068s ago: executing program 5 (id=2276): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x0, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x2, 0xfffffffd, 0x8, 0x4}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0xffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0x1e, 0x4, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r6 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36de77c620243ba2511d", 0x19, 0x0, &(0x7f00000007c0), &(0x7f0000000800)="c64a872dd706c0090ce36fa79aa8c3728714772f7ab5b6a3bfd0a315c9650a9fabb65be4cfc36b30e06c73694d1cab5ca138865a49973ad4cfbbe994d1d10a271ae892173fa232b1043fa87749862a38ba661180d01e11edb8bbd9011abf4a7c8f6346f9170499004ed81c43300a72972206064002ec3799035e73ab908a02cfab18b594c18565b138cf550722a0db358dae8248dede3aa0545372f3f5557165b7123be7ffd2b9f7e75fc9937f2111b621f0209f282189d5caea90b75b9b64d7d68dd781f0670d47c312e154f6158d4e983262fc041718") syz_clone(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)="c04a07fc8b805e531e1da65d63b864955d1356754edd0b9647ef82f4e9af3cab6695316b12e72f42983d5e5f45871183da") sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x98, 0x20048040}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0xf, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)}, 0x0) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x10c002, 0xac5d, 0x0, 0x2, 0x0, 0x2, 0x1}, 0x0, 0xffffefffffffffff, r4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/time\x00') ioctl$SIOCSIFHWADDR(r8, 0x40305839, &(0x7f0000000280)={'bond_slave_1\x00', @multicast}) 3.724069089s ago: executing program 1 (id=2277): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, 0x0}, 0x408d0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000002c0)=""/95, 0x5f}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40000020) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x8001, 0x1ff, 0x3, 0x69100, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000c700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x25, 0x801, 0x80, &(0x7f0000000200)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000440)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, 0x0}, 0x408d0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/226, 0xe2}, {&(0x7f0000000280)=""/63, 0x3f}, {&(0x7f00000002c0)=""/95, 0x5f}], 0x3, &(0x7f00000005c0)=""/229, 0xe5}, 0x40000020) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r1}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x19, 0x8001, 0x1ff, 0x3, 0x69100, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)}, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000c700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x25, 0x801, 0x80, &(0x7f0000000200)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) (async) 3.667514381s ago: executing program 2 (id=2278): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10a44d, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93424fc60", 0x8c0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40040, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)=0x1) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 3.272970085s ago: executing program 1 (id=2279): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x3, 0x7}, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x80, 0x0, 0x9, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x122, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) close(r2) r3 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)) recvmsg$unix(r1, 0x0, 0x40003000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000014c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0xfffffe15}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000a80)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, 0x0, 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.000039183s ago: executing program 1 (id=2280): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f00000006c0), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001c40)={&(0x7f0000000200)=@ieee802154={0x24, @long={0x3, 0x2}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)="85dddfefeb3d6603256416820fd782c0ba7d72170a70209932b2d58a8d95c9bcf71e74435de7ca1571d174360541796a6983a317c7", 0x35}, {&(0x7f00000003c0)="ff8c8999f9f8558725ae29aa8121046222510f67085db99bbbab625645b73963668fc3378ada7e887b0cd3d984d601e932944c160ff453cebca3d17e85ff814c7d9cc3682f3dfd15cbd04ac8dfe18bdcb4e5b05a913efa6ae00289fce158a7a82ea11d72d49af03262583bc8a6f4033ef5d2b67db87343f06f7bad01cc3b82cf4e8df7401f5d4562a099883c", 0x8c}, {&(0x7f0000000480)="0913c13c12c7", 0x6}, {&(0x7f00000004c0)="030d84dd6e3a3af14f1e9067b8dedee8c4f047188a336783e92c0ba1040556ba638364d650ef8c6539604f47df440eebb574b95c3c8e0d68acb38981e4e21b08ec28857c8c53de88c25362450b22a91abe6e28c48d5a78098affde1609eb6a170e0765de2aaa599faf9493bfcad525d9b722d991bd7d2f371943c6168a6b0df9616751a63fa399c460a42e9f085dff62e03cf34a5d3df1c48d56dcfc225afc98fb0cb6982b073c4db1f3e3a4f98f1f8b3538a62a82215a50372163d0acacfc", 0xbf}, {&(0x7f0000000580)}], 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="98000000000000000f010000c20900002ceff5d904fd6da49e510cc41b782c6120821c25665dda0e353e1fbb0fc1a67d0b2721b11b95be96d1d5e3a287db470336e46529fb3cd8f5bd2fb462754f75b2c2ae25f26f2dc76dfb935f27398ed4679c8fb2e865249782207eb6e7d0f01828024d9041b28db42248de78c223337596fb12d28980e625ccf31f9b97f967d17a4ee2000000000000f8000000000000000d010000040000008583b8cf2460e112511d526ea1990c74da18bc7eca23cbf373b656e669bce0cf1088e424362ce88fad5449e165aa8bbba092d641563ce3a6a6be2877263d768b1dbadf5253fdba7ed7237763e16a91eb16f4b7704f137ff51dae1e252ae9e672f9880fd84f6e0606ae59ddc0bb5dc80134226b16ab8ef9becf3ae3d30b6d2a7e1958002ad972a72f3c6b8d30db292b8a4d9685ff3ba5581d0f99f1262545327389cc6577fc9027a3fd993282fe0113e0b753ab92cb15c5f005af22884f4f6dafcc5652feaea306cd9a9ecfe5e0d02e50599ce60f304284b5265af64e00d9f1fad800000000000000b800000000000000ec0300000008000061dfba0fa157fd745557bd1c816b61718b6ce2ec0dc94a7300e8ae9448953b495e0fa69e632f3e9c21541a125859ac17a52e4901eebac5fc9e8073bbf6f85a07d362498ca6c38cba5cbde38fc22e69128bbc32601fa5dc290717e157338861225579eb55fc0325fc1c4f7abed995cc42b2e5f5be0b4bb1abe86a0dec363dc89da4d746c8d6fa9689bcbceb31938230de127213ca29e1fa95f47536af98f3cac1692cfd832823490010100000000000003a00000000000000cb1ed452ffbe040ca27fb181f334bb9652abae109da455b7698682dd82ca52865513cd0a0494d87eeea47c0bcb07426e36ec9449c885fd07924c68eb1200692c8c209401bc7ebd77ee4b80a3a8cf96ed81460ac2996bc602e238bf99156b886591941d85f1cdb036047daf8bae32cf6d1ecb09259b9eb1108f9a97f96d2dbd6addc68e6f5447669f6ee55cc5e60dcf5f84a60b24222f5bf8b153fd3bdd1d26faf2fde1860d9407093e045da115296e3c98eb13e5a25eac4d68f9f4a950dbcfc4ee865f3014bfa3c6401b6d328febb2ac6ec5c4ce9430d5e215529d998b86a9024e62016868d1d8e0f99f91d851aba80550e99fe7e4c04ce9f12fb586bb6a2ea3d3bee99a1cdab9f24f175bc94389e5b7beb191cddb0e97547aa8855fdad1f576f31bace33209ba004663445217669e5ef37f92e76305bfb1f195d4b97658381d976177e1e04d8539acea69778404278f72be931ecd21f5ba0815ee7e3ddb5195ee9427c11645fd9218a729c54837f3d7b4ff43eadb43cb5eda0a4b492a7e18af3d4d1c63c182ade152144fbd54647bbe44cec066aec10e916ef6f86dc601b833c8bf6530e8ee2d2e8e4f2c90cf847f05b5029f398382ea5ec65a85c90286b4da1f84f8dc2f155e94fcfd4289e49a3adf6a8dea8e6eb0e1f8e15373c6dfa691e0f66fb47e9491ce5656d14995f493590b4cdb08c4f5232e96c48962c04264366537b00845c40dc864cb49623ee7dec0a88f29baecc018f7096d0df0f196863bcaac7cbddc7f86f7016166dfc2277875ccbdbbf1a779bcc576ec77f6c783f5791172bea973e1f9f934e8a02dc78438c1641a1b8a9b2a83891d9f5980d43711d9f3ae461093ddd12d9739b996e2b3f871a4409da4c5656bfd67189b85ac8f9bbd49eb820a487fb3c2ba03571616516cec4e9cd196e4e8bf89402dbbff62bebe9008ded8d07ce46c39fcdcef9aa03d5dee3a79d282fe9baff110674ee842fb57ea1099d388900633b9eedc75e634fcd1f3d3a629aa947be025ee2f93f7afb7a20517a5f8fc3fd6d5504fdd3e1859d4ae0615870194d6aeef8a7faa530c26b21a8d4c092d611558fc2d6c9a212a77e9b0a1cf504a96aba3705b315dbff3b319b7a3af2eef59cfab63df3724db4080dc4832aa90714b510d54680d54fe006a49d07bc42fbf245a78519dbe167d5048722bfac9fa11a58e342ee2eb649e27e932b2dc952304b5a675e476d834fb23c35e1dc898a53f14eca17525a840be1971b3a96f65c0ed80d7ce206c43ca5ded9c132df9b1c97d6a6e4d3f65b34fd7108d6f898a83b014b376326ef8362a97328367e64e02c672f79d9dda264111cb6dd77c8ff2ddcfa1949843994209b890133179ef2f9e0fddbd63d3d29293f928bf10b214813020c28c6b1629c278027e514b13336149e6655fab00e566be45d5acde5b8ce2ced5ec317dc5dc1e18ced7e4dcab3120434fa866e497435bf3c720ea2dfe9d8bc0534927c5c10204572e9f48d84d54960d3c197ec7808c5cc08a97a21f276e29281a45efdfe3dbabbfde9e93f5fda2dcc79f37831a7ea7e76147783d92aca990327a0256699bfd92ad35c7dc0fc8f35a6bbedef075be6dede3e624ecb9499ae87514621c93729977870f1f8141e929762c21b294f993949758bbc02571928c3e6c6f73f14c6747734d547d9f94c631eea49e3aafddfabb8b988faa6c6a9441d9fc49d705d46fcb7260fba7ae21d0ed33337a7466fa0440005aa43d3da3cd37391a211a253d17958c96ea0f3e117d9f631e02b7a7752ba069ef3401e1100aa43b3f22b6e143173ae243ade076e93b4ac65ba157ebcd2cb7ec8667b719df339542ba17d7386d1851313869ad54e7fff17132eafedea2a6e7f033eb254e007a536b3c063958549cd0dc39ffa2f176ce2d84b12aaf1c9ecf6d5a5512ebc4460f8befe5f5014ddc16ab13828372f027434d78e17c10aefadaf62ff06c287af6c66ba2895b17ad9cd99da411bf26a5c9027c4579e65fb429e8dba6cb86108aca1264eea5eb440c0d4b3153add50b09979d8d56397d1501257a4932d8eb7b67d247a2c612a854e125c17193bf93b36eca885cd97e3c5ec3a74a9573b21e151961cb3f53f420fa4b351a7084cbb892da50d1c7e902988b88737c9848dc6efb9cae9b07221333b52ed9e324d69487678449f658a701b219547f1e3e7bf30e1bb7f3782e2795fd35f02e666ec0a5177be993cf63335297d53b0c3fabe42a6029be07fb812291f4766af4cb6860f2b23d716233db9c52a165e4593a028f220fab814c02b0fc599d5c2ce17aed86292df7c7707730cf3e8e5ce6e51f729fdaa26e9feec5ce0ecc2ba4d56ffcde4e5d90b500c84a5d79dea3d9df2e29355e2ea96145cc372ca45fbed63f9705939a846a1905876dee2c8edc6f608bb433929b26139eb5412dbfd03cd47f9c230df7679fc78a30c5a20e85f099ca9f92af5479e4806cb76470d1eee058f13640c11c83d2a056028b416c74a6b5f4dfc9b1c93f8cdd036cdd103359758ad7efbaf0ca9d5a0d8f62df89abc14ee29328946ebc663ff3d1198ad054f0d9b8eec34b909e779bbc3d88e1ac62a20a632ff46f67c965e3541eb7cb087e546cbc1252a2cc41cf399f3a3ba75ea025489cec9594355894f4944e7c066e1bbe0883a9fc931c463c028695bd97c90c9db1892958996774ede147d6fa05baeae616c7cafe3651aa0888f7559fe03600f9ca09477c56ed123983dfb57b1bb6998018fb2e7cff056f5ed19bd713fabbddcf0edb740e045fe9ad6f2f6015125dd4228f294c7736c8b5160d173ae103b90f3ce0eace599252fd649019be519b672b699d9d35a33d36c1139f89496e33a9e9b84d9582d912e68da3935c6b696779e658bab3c33f101c5f9e4a9575a0f93349b06e76b05239edc8b518c1e0d705a59b541530085499282e4f19adbd5a76634e904e9d5f3858bf42bd8cb41e08c734a1839d55984a65f43281f8bda4ef7eb40b17e0f4308fcfeba9afcad64dd542c972d3da7675cfb96bc9dffb79dd44d4ad70cdd85c03c73a0f105458ba790decbf5f09d3a1b78fc65a0d8b68cbdaa65e390c81bb51d30aa91a7b0a3147ff502003c7f57034fe13e5b6dfc477f541e956b8083be5fd55687e8e277f0953e8dac3f6157b2b3abdeffc8a8917a4369fd845e19b637e750f6ce9d6a35884ad06ffb012863be0b659cb38e1b08d1990e209af1546ce427ccc5ed99c656b75e555819ad809a88e8d2c876dad6bf7bc99e3d8589408c3c81b3f7773a3b885b2e94bb6ceb8048585ee13d35f3155677da3f1a679142a8beddfcf9a04eea112cf866522cb48512fe940d39ff97542155de3b7aa4934a84739913562fb2e33be5ffc2a81ffb10d80a1b7e4ea7f998803bd5a392c5fee8bc1b66d9f0a3e76d208d3cd926715299e4986c6204e58d986ab1195425aba4f61696c039627f790bff0df8682a5afdc8e783ecda376d6eaeab5aa6c83a6afc02810915cca93483d4bd459c5714757727611bf8ff9e984c5ca2a069f117fa4cf94c6045493565770786b5e7b31a4922fc8b12b497345bd94de2c50d94ce635b10b51452733b0b84a1b346dcf0bfebf49955eca70f8cb6349fa37064cf8503c78a81883029b31e7575ada261daef6352cb697ed1492753f29b9c59cedca4e70def4e56f5348a6265d95e5813bf58d0da47dc72923830dd1c502419b19f599ccb5009fc56c1ae6868618d671c94c1e24308c63fbfcd1457e5acd7e53d59d23b548627cf751091ed8484ea0c59d313fd2fb43a0f1bec238336cc5ecb5902708cb63baede7e5fe790d9b961360309d0a8f5bd2febf054dfc1c2912b8ad8476005abaf36e6d6e5d7261809ab48bf742c57021930387072c84fe111d464d360a46f5c7404e6ec35734f8941a22e580adfd3e04d86868bce45ab064fbe03639228fdd9eb18302ff531d60389e10734f2a6deafda67c86433b1867970f9229aeb862b6c8847b5c1fd977598bc8048aee26bc4752f3d35240f297bc706eff11c5f5f3d8d190350cfc817c4ce2823d73a2ec7b61f71ad59cc91e8087d6ebaf766445a4a25473c044f6815caa36307726f19a9072d65d8e2cf1f38793f27ed56f55a1a4b32cf4557e3a7344e937e080679f8b6cdcb9cee76a0a2569502db0cc44b643aa53fd863180c159c727d57e95721ab3f2501c93a42dbb85f8ef50b0f4f617dae73e38a30b90f467492b4fe871b5d70675b2673b94255259dd0ce983570ec524a1b4fbe3497126126afad119f013df9e1f6f9411c6158e11af0e7f402bb727db674ca06d456bffe4dbea7054db67b8ded16c6b17f051a6752a084aee497df6f5d92d130e38d850d68356b26b69589bf610d42cda440a55085e3c24b5cfa39b6dcb8cdb18f728e696490734dccc7b43698823a083bb7e80413f102a0fd217c089222c6d495ffdcf7ad6cba20a587f826204ed38b33d313cc1e4a6a46e37c31f41d7081aeee191c823dadfeecda4f31d4bd7d16ac3e26a10b0b36ea3fd7d6d32edfc4bd19f3e3bb2b04bc6e51332083944514fd1c5b05403cf2a8d29161aae68b480a751bc581047a10c7f082621bd4236ff18cb9b9f07613ae6a3f8cd3c4652fbbbbe15e332e62e7132255a8a48f43f05f79cf79cd408345f46d7c0bdcf813be869832a81f8ab14081f4aa493a05c55326ac31f9f2d4ab8fb0005fc28025fddb9398b5fd9855fae19d6aaa2fe7a40bfbc66fbc117954005d5d59574f9b8a062e1ebd7147b4907628a01f256479a4f5099accf644481b30d4046ad031412059dd24726d42486bad29da277af3b8222412d7420d2e9cfa238e8e26edb35340637e518cd72b30f5d0ab41b706fa9f825eadc8829fbed4121835fdf4b4dedde6ae81124a961a0d0deeb8cfc96f0e1701f59ad4ff465a73b075a333822b2958a964ddde7a6c29109a6d5607961bda13d0b49f8265605dfe84a04cf34fefdde96775fe7ea2b0d201ada7ba6231d847835dbd2bfd8758dfd4e3d0c98c15fd627ceff38e958f423291c9561fb871b565530ea352e398617ceaeb4300cf76ffa9989b8373d70a2672b2f21b201264fed6eddd965536ca0c6f4ffd7b88b25bf2ef90c3f65617161de0b88bb5370cfa7af640d983e82517fe9da91d7191198813382fec22ab8e64c3daaaf8097e82bb702de7ccbe46e3eb23ec4752c2ffca5ec66f8b979181b5b872e0bc22079bc3f94da448dd0fd47b945a8b6bee963c353360f5fdfa11ffd283ac058656668f03f253e4d9493b5686442f31627b8cc6713281a6921d47034c52c1d1f50202a9d27a5c2f831a97cd9bc3dc5a40b8230ffda2d0b140df852cb1f5900c34668ba061ecff5645d4d20014044e671b06ddfae23cba2d1b3c337b854efef8a2b8a2f15c61a01e567c8cf0aaa14cb3801ed575ea773082f08448a3829b9d47d20658b88b0327004999eb5d58a4270def6553d8cff961c57ccef36553c3e0733915c98a51f1d29b530d521128184f8db2e48eab1804a77ee4c445cfd69fdb313bc1b99478f647ee64880a8067b01e286a5e0385c3d14d4df54f4957c05eb6af5687c98ee28df043d59841dfa9e8cc323234606a648ebe03878367e161c9fc34cc7f54f51b38e93e4f0b2e91fcec1f1bd20ef675b4786c08e9d2d3f84cda8c3a72367ff7a6b273a2007f41b9708e9b3d8f1eec2a24c6328e43a5e1d9caca50c68ddf4649fda1062124bf211203dd2695dcdfa832a75c7c81a4f39d64afd2d8508f4104d2bfc11aa0dbac5e7e01af4bfcd76b887c505a88b213f1518c3705150d3d00000000000000010010000d354613dc27b5381deed4651707c4e91c40cdb692bbae2c58a3b89dd2c93b6b4d962635d58e1af3780b62997520488efae969f7ed336e7c60a4a87a7187627359d5021921a4974b7a2b59de595681b76b92f1d4aaf96b7b2d7a857d79d8d16926537e3311b8ca76aa2e7db97bddea3adf0bec0928b9bdcaf6bc5d441f8209ed9a7dff527277f9f37c4f600189b2b2373046909a952c9d63288e98fca8582b856138bc27758443f0c93b67c49a306047533ced6cd5ee008ed94af08441ca1fc0000000000b0000000000000000c01000043190000320f93ac56c8f390cec436eac350b4145cad05a13a8cf044acc1c1786053167acbe12af9ac0d381310eea155af6bc8a0bccabbefd40035f65b55c43400a71c500b97cfb14a89fb7e08e30d87fdbc3bb6cdca6e920450c1dadc28c174ad072cafe056ee6c2d5152e8836cde4d47d02a7dbacd57fa58ab6bb7d4233f25b1be90d720bbb16ec70af50f3aae004053e70eea2e07d14c43718e28a6ebf43ed700000050000000000000000b010000579c000010c204054ceeb3c4c07243b96eb9e4c761ec0f4b304464fad710dda83be49b397f545b7ffee4accc7a806aeb30f7a90f8fc6fd63a9da774ed219772c6cc1c0007000000000000000070100000100000099f082260e94dc9ae97d95d87b6cd6448e042f2230ebe7870d048ee5f8b37b17b9b1b0be2b9132491042b28aec8a6ee350986714c03be3888e3781c0fdc20295c11004feb143a11293addb1ae8589b7a0d"], 0x1498}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000", 0x3}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000003000)={&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000001c80)=""/73, 0x49}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/1, 0x1}, {&(0x7f0000002d40)=""/253, 0xfd}, {&(0x7f0000002e40)=""/85, 0x55}], 0x5, &(0x7f0000002f40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x40002001) socket$kcm(0x2, 0x1, 0x84) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x7, @perf_config_ext={0xf, 0x5}, 0x0, 0xc78, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r9, &(0x7f0000000040), 0x0}, 0x20) socket$kcm(0x2, 0x1000000000000002, 0x0) 2.999281273s ago: executing program 2 (id=2281): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)="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", 0xfa}, {&(0x7f0000000700)="11cb24c5ff41349a92429e043edfc7c50e5d349f3d32f600f521d8da077244c95a294dc33638003c3d55118bfb3bd86a47a7f16f01dbc0662a16cf015dac04b477497297081c6f4d477bc6ef13d594f8229069d898bd6028a2e7fc7ad4c97bb90569fe49f84dad21fbaa28d522d0bbb93c7e353dac44d3e61c2013b55cb161bf3c730eba1a168182584177c84747b3ded148dc7d90652be0bebb2ca625430078ce212e5b8844acfd922a46ffb5f128746be9e215233679978e87bb77b27acf7984f88f5f2669d4ad45c087815e0464cf2de03787114f6d3aefa633335a08b80d5ac9af8fa7", 0xe5}, {&(0x7f0000000800)="825354fb9069c357429dec24adeb15a32299588340f5a42002f0098d4ac7512a1923cad07351189e3a4c525aeea2bed596edbbc2974127cd3f5e143eea", 0x3d}, {&(0x7f00000009c0)="b5fc40aa0075a764c8dd50def9a649c3207de30073abac688f96399bcd94520a3ae9245ee725b5a5fe9117b088169734b5ed607c47d5bb36ec1d151b60b8133a6179a2407d7f504c90193a35d6eb7469a4218fb8f9f8b6bddbf283e6a26d3f3911fd4f26ba807a0bf8328a3fc5396d577a62bcd989570982e51de1aa14861ae014a93f8180a9c0f61f20e04cf4eae1e70131e9459c6ae3ba35375c970dc230dd1b4f6f86964a24208563183eea810a5d35930ca2e08242aed8254be494f380d238a0b4e56dac425972b670fb6f2a7359f16cda9b878017e062859ea79605538a6c2cc731cf0076c3aab4733d6bcb8acbcbe89ac9e631b5a46724f538ead039c875c263ff4f63bbba7e75df8a93c308668cac9f5bd7b828a290e143c5add608ef18ee486b1a9bf3a3a50bdb5f55c9ea8cfc303010e7ee0ac771225617f2bcb12a7654f19f5b0e9aca9321bd534e57b8085b3a53a9b2c248ab76dddc716dd628b1bfb5ad8bf4d162fd64cc6185c162d46a4fe1ffacd2be34f1556bc9935c3487b5d34152cfaf1d502b134ef6796874aebcc81023134afc63c65f1e69d999a10bdc9129060b1657241f386b7408dce1a94dfe2e04cc37f80a6194941e32556b03639ead5c54ea946014f6b5a2db49c0d43f8d6446d9296d24107aa012f93f1b270584386c8f8caff582ca449bc1de0f9de11228a37aac9e7afabc3a1399a63f78d08c526af9cd4a01e2849fab0787570b286ea8f6be07077115842d04875676018bb9e0a830c49b106b407d05f0b0c37a2a8871728961bebcf593af992526a6f404afc600a462ff8d4513c37c45b9b0924717311689e083dcda28a85fa87a601b6e049ce4541e59271188c7bbd518b79a482ea2b62036a03af2939e682e19146d0e53733fe7d1886432826c1b51aaf4693da233bd9aa46b543d49286a57317baf10366a50a1939b49f3df9a533fc50d0bb0fe21e20003cc14ff11bb5217761b1aba4a4d55bf4db10303931fd4e36cc2c37ec55a87e5acf4174632d85fb66164a0e8e8cde5c783ea6344305bec06e3200328366d7d09fa6f692aba26dca8830eedb83182ae39c4d0bf005ed478fd1ab19dae6498f54b7b10f9d907cf8340fa082a43c9238e636a4960e3ccf42974b2cad0f2f7947b2fb0dc7b72f0de249cf6044de75650a2428ad78267a907ec05f0b172bfed4a8fe6d617a3f56a09fb6716f27807097b3066ec9b3e5a4f0832f36c83c7a71ba4f7bc0d46fcb7f2cb8c69ac20a6b237770ed0bc2a44dffe6efdbdf804a0693e848427d6dc4fd554d9840d0d5b1edf9194d219a93f35e85e067bb8aeea840b4a8a130364dc46bfd0bc0cc116edbecb65abacd6d166c979cc724114794a85699b4af9287e81a3586e5cb23018f37896c018293603fc1f2a952952c72b0f2169f90ce030c4e6b0c3629a3486a8effc94523d7994611e8fa2962f2fb98a2c5bece7364ee531cf3153947d07cd691e143b5cc0ede0e0dc25f08fa9aacd00cf48b7a810fcb7d18f5adb83dfee6890dacf552a642408dea55f45b78b9f02ac93e5600ffaca4ee104d23ea1bda093456982fe1258435d30d7f92794161083bf221be7b00039376d5db1c288549089696d0e8188c3d4bc571db23c34f8bc3d2d274b2f23a9016f8f7820d88f97942464ec08502f3e29e62763226399d11f3dbd9fa23611a81db39d861a5e90beaef619ca5889a72fdf325d8bedcf868c922479b036ed6d1bcce3770c595d1734a15a28e658d9dddb32cbb0e2b425c58aae5d2581301bc97db2cea258396953ff808443db2057d349ad74cc0dd9905eb5dafa93b39ffbb6343d7d60761ea05ee946a5d4a4e7a6393cf59b9735d2c473686073902c9dda95e3a699d4f72357c8ee600b31a1b730848ed880a235d38b3670e5d189930206c3a86d1e7848d0196c93342311994c16e2bd348f1fa005301319babb44e217e69707a3bf6e2ab100f718570b8ce966e40a3e63a381ce407eb6b2c942533a5f061503f28598d28fa21a5995b2417b0fa27fc6ec8b4712dfcadf7b9d85d6d6acf69abf24fffdcb598c6c9439363036a7acb1410e0a4edbe16a67c3b11a79e072732d9febec795943e09a13f63f4420636d657bec880ebbec57cb14f29a5fc850975e620308a800b809ff4997bcb84461c2af9c975c0ed840986fceb82f6ec7e66be2e74d115012cdaa4c6a77f0e7527e05a6620b0fe329efea139ffdc0f05a0e83f13364731d3a8d41212699796708c25df2bf1aaa95f422b8801ab68c1b520ab03c65be9c6652f935256bf68dc1852855443c3cce3d07ea67499b4dbe4f6d86334d31a3665e51f49aad1ae624da581d73a684e8839b931a40aaa1e557dad4a10ef407f63532dcaac45da41a591c23908a6a390cd12af818462eba5c414627db1e9c4a15cd90195080877f0fe3ee58d5be4ede1d55d6f7f3eea37d18f9584c1e57acea797c67009d6abef74c1b888861fa36025b42092b9577d956512366904f861766eb7b012e937bef60395787681880d587492a6cca6351db1e87555c5a7a726acc4f34e22836d0561ec5d1fac6508e9ac119aa9c3ee15336de8ef0a11e40ec217246821b3d86071fb5f925a64934eb5e23ff1456d15f52cbcf83bffa97238cdba58dbc02cf5d75b8009ef9673baaddfaead98aa940e257ebff6589416180de8a82b99c445ba84850904121623713bf6f42cd3a9b311568030e8d76507732b2564d1dbc7bbeeae22f0bad17f99204259ccc87986b0667e0344376a3ed1f2a5332d8588419fb1285da62dd6ddb933ebddcd1da346e954a6399423b54c5053e6cc6f29d8b7f88f8ea06fa89a4e3be302996108efb4aa87e541c8739a056e78e76fe2988f41598ceb0d16e09929e7632cf4c03f2328de0f872f78de50f2e345eb33ffa8746f5c557d0e61454b88c03072bb378d69e0fc3929e9407393eb16c3a7e2d86ad9303df1f7c672d1ed310048ba6680dfb543e0795521c125059eef6e0934e622ba7140fda5f9c628c3b035c59d22873019c944268cd4470300cc14ea78cc547fb2a9d77eb2fc262f04ddcc066274195919dc53446bce74d50317c71ba05f3d4b6ea742972378e9c87f57f12d5257271f8b3b09d776afde597c8690342418b5b69eeeb643b8c4b2bd1382916746f906fa7958c03625b2027202dda61c68bee7f373985622ff87e806615ade379e5f0ae75391e9ac9a38beb52647884cc25308d45c0d7f56ddbf936e156c4e672f9b00afab2ec2edffc6a2db050ba7994cf1a61d1824cde617ff20670d46703f2ad925c505e3ee8b3fa4efe0eac04aa5bb3162df43e9ead2d5095e123c1c61366718189c9b6be9857f8d3b8508463608ba30d5389fc83d18285b25569d7c10776b61a978c97717860b57d23b8e8967dcec49f78a7e3c4cb13beeb09422ad311dc424ddff198697fcb220e5153926b1dad879a8818addb4c3b6572e173f77bb15d1928f2e80dbcd47c3d07115c828ca29eb1ca002efa830e122f6b9bdfff0414e13d2c65e6132fcebc278cb1b51399aaf4fef1490bebf0344cb2ec62498365ee2136cdbcbad36a9bca32060cf7b68ce096d0320e6bf1f8097cf8ae39034cf67daa69f2b826b1c73ed5a21f70dace75ee39a4d1088e13adfeb3ba5e489b8ce3f83770a0f4963f179642fac22e5b35d9a56fb99f30e7d0e636d2baf5d7a2f16b34d4f1c3a4283fe71c0149d8cf8179a8558a659a097edf4f8d492967dc4beffa9630d8a6ff8616dd7b4479129864980b1fbbb6b0a2de825dc94947cad2db44eb9da9823c7617b7a65669a7c62448f3960d900ac8fb72f47888fb324f2c256497f7c3159495dc56b4709e5878c23a62ee5b44ab7b539afd1c9633189f934d5fdfe675c724cb9cc33debdb56a09ba8a14daca0a6842890838a1afd7f8a7dfe91d3ffd1369483e7d12036f134ff3c94c6f41ff3150a84a62ffcdcd258cf8e0176c8620508412ac11b8e6f7379de46016d4f39be36c45ba6111502cb21cdf0a803e4ea5dc913799d1a17105ad4e17f7675edaa8326f0d72d1ca1478ec07b28430819538a60671569066aafd95ea6483c1a76385a047f0965ff3454f8fb80b925455f1a4e3a6f94bc6b0d2f89b356172d05698f654a397881d2f53efb3780826ccb9bfecc4d1301001c6b11c49745d87fdfef4651bfaf31b5b564d4a7ff89e9e50f07fd7f119492b1318dcf80ceeb9fb188c5229ad0691d925f2837f551ade29afc6965125f4208eb0c767d4cb13b587be4ddadab1540cbaf608e51a9c660e2c67bb32aeeee8575c0f903553c0cd0de0f6aaf81866cbeac30c21e5b9c631673340f7751391c08f3916203781ad96a2b118e196713d0087025442aa19fdf15bd4506813176ea9bab6fd5e0d12a58d2820341add9e94f131f648e4f63c246362b02db640fe051e2aaaa98b76c7995cd72ded0e8af23bd6ed206620fe6a78897a994329721a14dbda5ba2c3d0af6176b5a889b3498bf2043fea86a6ac0e9e8fcf1a310fea000063fd0b799693739bd65dbb846710ab76b7efbd1e6533dcbb96fe8caea14c3381563d7719cd2651d80ce0a628e649162191b137101bed6f8e7ab378fac1ff5fa41cfef3470db6db107ea127aa61b251cc301208b49d5bfc41684179c6782862fe78c578255b7f8f870eba8d65d894334b7e9f86a3882fe888b38f542a66172961b029b02e533bcb4142550d5236bbcfdb570a2f1aef93790ba6db88af0758f2f379ba433623005f83f7bbd5f93b222d8fa122b2ef9efdd50b4d5d014d7417f107dd2fbf185c54098c283cbf2f7fa5824ebd589daa7758ac54924cee9a732eeb765e82fee94d1836085ce9916e46c565766a863b7d02f092bc307135d6d869262d399e119bf7ac494cb67726791ba81c7f0de6dec59e0f8f8b5e6a9e3d19afc6b1f81e8013b962d9c7101ab0240236fc8b81fc9d6a5f0cb619d3af450c2a9b3ccd2aed77e7e30478a4fffd93df83b853f34b951c229aed6a4318a57de15a4e8722fc4013df65a99560aef03f78baed345de19410de7295ff7825ad1b8de5a0855c9499b29f80802cd732bea7e07c9fb43ff3994fb2b1c280e61f6c04c3f887d1c3fbd5bae672c46e9cc12e89d689d20a46f034b05c2b3d9cc5822413812bea1105e70d324324f2cea2192e43ac358c8ebcf2903be0fe161a4ae35b8da6a4934742dde67ecde1f8f633074355c020f46bebfd50e7418367063754314a09715e241f211183997a25961fd460b550b476fe276f2fe6f68233c0bcbf66a4dcba09bd3aa9b8805a3c6598dc527c479cc80bdbad9f2874a11223db5341a96de9a61c5bc855ddaf514b0e7e2ccf7c390855b68d40fd05641e83f19308741a2e93b993c8b7e0571ea2c61e8940a0d439e4f205c54f12a95e890332552c6f2b9ee0c4fe6e9a9b68adedf4d47dfc68cbd5f1d6fbd2170dcbb9ce7cf01ea79abba969dfdc43d13ef6e05d698ce30f87370666865a4401d6048a48327f15d6de3ae4f1feecd0831c686a0bcbaac4ab801f99ec255f358fa56db0ca630d7b72316d58b9c36efe3ed6a2ce9f1cc9576cafe0bdb462646e9e4cfd016e515b049d0e8ff25d1923e7d5a640871a41e2eb0de33a2a753baeedd541d40112975f30e36ce5ae2968a57ecb571e48335a9bbfe8f97e9624824c587a93375307a2d8ba2b193116cabba3822a309e01c1b9483c384ce317a4af1b82b65e915aa241ddbabeae055301617bd3c6ef1e916bcadd4e497f9a834a4bd602c69ecf1caca24599d7ab3f015384c8b7cd5", 0x1000}], 0x4}, 0x90) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0xd6f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x51004400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a3, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000600)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x2, 0x0, 0x0, 0x20}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x28, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={&(0x7f0000000400)='./file0\x00', r2}, 0x18) setsockopt$sock_attach_bpf(r4, 0x28, 0x3c, 0x0, 0x0) close(r3) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) socket$kcm(0x28, 0x5, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) 2.77934334s ago: executing program 5 (id=2282): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x326684230b85cfdc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000000)="857403218eaeafd87c8b65a8b809cb1ae3", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff3999}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x326684230b85cfdc) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000000)="857403218eaeafd87c8b65a8b809cb1ae3", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff3999}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) (async) 2.508235577s ago: executing program 0 (id=2283): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 2.506162788s ago: executing program 1 (id=2284): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x16584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x7fff}, 0x7602, 0x5, 0x0, 0x0, 0x5, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895c679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d120ea257bba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2bc30a96767f500b9e26e3b12854da63083320d8bfe49d85e0842803dc59d6375bce2b8a93caf39c0ba767880bbb9bf9407e6a6c0f9a43d1ab51dabf9423b482e848fbe1653ff0c6161fa43543546ce17a42e6cddadaf0767d84407478ffe2d0b567d81201efc81e800d4c0874235ff5cd7f5f0ee71cc2b0193bfc9290627ceaeb0b02931a817688f3a51fa2861e70cbab50a5d434ed8d8841694dba46f3d5a95ae86e4d471684ccf427b2ba53a157b2a7cf7a4c10051bb77822190a14c2ab1f271a7cf9c240b99"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x28, 0xffffbfff}, {0x6, 0x1, 0x0, 0x80007}]}) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r4], 0x10) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, 0x80, &(0x7f0000003a80)=[{&(0x7f00000007c0)=""/27, 0x1b}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/241, 0xf1}, {&(0x7f00000026c0)=""/190, 0xbe}, {&(0x7f0000002780)=""/104, 0x68}, {&(0x7f0000002800)=""/106, 0x6a}, {&(0x7f0000002880)=""/253, 0xfd}, {&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/255, 0xff}], 0x9, &(0x7f0000004000)=""/4096, 0x1000}, 0xa5744362d174e09e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000900000000000000000000000105000000080000000100000000000010040000000000000000000800000000000300000002000000000000000000"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x300}, 0x50) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff020000000000000000fffffff50000", 0x28}], 0x1}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="180004ff06000000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1800}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf8ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0x22044880) 1.712366046s ago: executing program 0 (id=2285): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x10c0, 0x0, 0xc2ba, 0x0, 0x53ba, 0x0, 0x0, 0x0, 0x362}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90524fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.655577388s ago: executing program 5 (id=2286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x30, 0x1, 0x0, 0xfffff030}]}) 1.544803472s ago: executing program 3 (id=2287): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000080"], 0x48) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xca, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0xb, [@restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @float={0x3, 0x0, 0x0, 0x10, 0xc}, @float={0x3}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x5}, @restrict={0x2, 0x0, 0x0, 0xb, 0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x5, 0x1}]}, {0x0, [0x0, 0x30, 0x5f, 0x61, 0x2e, 0x0, 0x30, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/143, 0x6f, 0x8f, 0x1, 0xc84}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000080)=@raw=[@ldst={0x2, 0x1, 0x6, 0x1, 0x4, 0x18, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000000c0)='GPL\x00', 0x5, 0x60, &(0x7f0000000180)=""/96, 0x40f00, 0x4e, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000440)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x9, 0x8ef, 0x80008000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000540)=[r0, r5], &(0x7f0000000580)=[{0x4, 0x3, 0x1, 0xc}, {0x2, 0x4, 0x5, 0x8}, {0x3, 0x2, 0x1, 0xb}], 0x10, 0x7}, 0x94) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESHEX=r6, @ANYRES8=r5, @ANYRES16=r1], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x86dd, 0x26, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.489003014s ago: executing program 2 (id=2288): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r0}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'tunl0\x00', @multicast}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x57, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000440)=r3) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@enum={0x4, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x9}, {0x5, 0x2}]}, @fwd={0xf}, @enum64={0xc, 0x4, 0x0, 0x13, 0x1, 0x5, [{0x5, 0x4, 0x10001}, {0x9, 0x400, 0x6}, {0xe, 0x4, 0x2}, {0x2, 0x80000000, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x0]}}, &(0x7f0000000680)=""/105, 0x81, 0x69, 0x0, 0x9}, 0x28) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000480)=@raw=[@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f00000004c0)='GPL\x00', 0x8, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x69, '\x00', r3, 0x1b, r5, 0x8, &(0x7f0000000740)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x4, 0x8, 0x2}, 0x10, r4, 0x0, 0x4, &(0x7f00000007c0)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000800)=[{0x4, 0x1, 0x1, 0xa}, {0x3, 0x2, 0x7, 0xa}, {0x0, 0x3, 0x10}, {0x0, 0x3, 0x3, 0xb}], 0x10, 0x10}, 0x94) r7 = socket$kcm(0x29, 0x7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3a, 0x13, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf21e, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf675}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0x6, 0xb0, &(0x7f0000000b80)=""/176, 0x41000, 0x8, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x0, 0xf, 0xd4, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r1, r1, r1], &(0x7f0000000d00)=[{0x2, 0x2, 0x8, 0x9}, {0x2, 0x2, 0x1, 0x1}, {0x4, 0x2, 0x4, 0x2}, {0x5, 0x1, 0x9, 0xb}, {0x0, 0x5, 0xe, 0x1}], 0x10, 0xfffffffb}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e80)=@generic={&(0x7f0000000e40)='./file0\x00', 0x0, 0x8}, 0x18) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000900)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb9f}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x20000000}, @ldst={0x0, 0x1, 0x4, 0x7, 0xc, 0x1, 0xfa4139f72052ccb8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x4, 0x8, 0xf, 0x9, 0x7}, @alu={0x7, 0x1, 0x5, 0x8, 0x9, 0x18, 0x10}], &(0x7f00000009c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x21, '\x00', r3, 0x1c, r5, 0x8, &(0x7f0000000a00)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000a40)={0x1, 0xe, 0x9, 0x9}, 0x10, 0x2d074, r8, 0x3, &(0x7f0000000ec0)=[r9, r1, r1, r1, r1, r1, r1, r1, 0xffffffffffffffff, r1], &(0x7f0000000f00)=[{0x0, 0xfffffffa, 0x0, 0x3}, {0x2, 0x5}, {0x5, 0x1, 0xa}], 0x10, 0xfffffff6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@bloom_filter={0x1e, 0x2, 0x7, 0x0, 0x200, 0xffffffffffffffff, 0x2, '\x00', r3, r5, 0x2, 0x0, 0x3, 0xb}, 0x50) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000001080)={'team_slave_1\x00'}) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000010c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0xa0000, 0x0) ioctl$TUNSETPERSIST(r13, 0x400454cb, 0x0) openat$cgroup_procs(r12, &(0x7f0000001180)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000011c0)={0x9, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001200)={r14, 0x40, 0x14}, 0xc) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r8, 0x0, 0x5b, 0x8e, &(0x7f0000001240)="b08b248c2821dd7b9017fcc81ca9cbacb44d879deb17ee2be82bf9754b50899658e96656c1b168585e940b0558590329f3cd33b1e1e2749c666000bec9b0f8b06eb612a8d6d5d6dc17b92cfbb2c071212dfb36107cc89f19caf4f6", &(0x7f00000012c0)=""/142, 0x800, 0x0, 0x3f, 0xd1, &(0x7f0000001380)="73e9ef76d795d5f9f4eccbf6e52a323af390918ca9c19c13cb6cbab39ecabcf9d99a88616590aa316903f79a128006e95fdc5f869a2de352ebbede341ff3b3", &(0x7f00000013c0)="6c250a630b19f9a0f1cb0a669763904970d9d0b47273187e08dc140d7c27ee10dac0a0080970dccbbb8cd3420cb9f8e85ffd60b49ee78cc6a9234c3a7758f7f1464d3e651e3df7294a27c4992aa288bd8469c0d71516c50240e0a42bd7f5ddb75c462e816405baca079304bd91da32f2437eac842f0d83403f6ea80159a85f2ed12285e633823ee9ed18d5f5d08606ef7e9f383bd46fd2585227028f42c732c77f5e50079244e8971f6474f5506e84e3a4d4846c706adcceb06b6db762470b4309c6d63ddb8c71b61b420222e7dd78f2d9", 0x4, 0x0, 0x40}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000016c0)={r5, 0x20, &(0x7f0000001680)={&(0x7f0000001540)=""/136, 0x88, 0x0, &(0x7f0000001600)=""/121, 0x79}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001740)=@generic={&(0x7f0000001700)='./file0\x00', 0x0, 0x38}, 0x18) sendmsg$kcm(r7, &(0x7f0000001a40)={&(0x7f0000001780)=@qipcrtr={0x2a, 0x4, 0xffffbffe}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001800)="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", 0xfb}, {&(0x7f0000001900)="d04caa24ae5c8483de66ee74e8871f5bd4334eabde45f71ff437fad38301eb9c685f32c49f51a4709598e6187ebcf34ffc7abb62c9f6bfd6efa1534767f150ad7c96d3f98074ef781d341a48e4f10d8bcea215ba694c14e6f8d91b270be0917449d87e892cd58ab032f8226f7c83c915033c835ac4c16914673e754dcb3d334949eb618eb8fc06c0691f6f05bf411a8cf1203bbb5d5e99ff4fb12d05bc0159c16545a9045bd373f366d53a912fbaad3619547985e96ae6da0e2818b7e7735e3052b3aaf9a00e841d69b2fa9fa36eb66b3457b3fbae58ea54809153b6738b13315554de8e47a6f5fd30d437b9a2fd7ddcac1324074f", 0xf5}], 0x2}, 0x40080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x9, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c00)={@map=r9, 0xb, 0x1, 0x7, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001b40)=[0x0, 0x0], &(0x7f0000001b80)=[0x0, 0x0], &(0x7f0000001bc0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c40)={@ifindex=r3, r6, 0x6, 0x0, 0x0, @void, @value=r10, @void, @void, r15}, 0x20) 1.41141129s ago: executing program 0 (id=2289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x3, [@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @local]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$kcm(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) sendmsg$inet(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000400)='UA', 0x2}], 0x1}, 0x4000089) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 1.388643465s ago: executing program 1 (id=2290): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) socket$kcm(0xa, 0x3, 0x73) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0xfc}, 0x80, &(0x7f0000000140), 0xea}, 0x0) (async) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e817782db4cb904021d0800067c7c09e8fe0ba10a0007000200142603600e1208001e0003070401a8000600200e02400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ebef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x2002c040) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1a99f0c1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r4}, 0x8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003010000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086e3", 0x0, 0xfe1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000280), 0x0, 0x77, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="040200"/28], 0x50) sendmsg$kcm(r0, 0x0, 0x8040) 1.337951356s ago: executing program 5 (id=2291): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x3, 0x7}, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x80, 0x0, 0x9, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x122, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) close(r2) r3 = socket$kcm(0x1e, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)) recvmsg$unix(r1, 0x0, 0x40003000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa}, 0x48) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000014c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, 0x0, 0xfffffe15}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = socket$kcm(0xf, 0x3, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000a80)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r7}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, 0x0, 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x94) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.207423744s ago: executing program 2 (id=2292): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)="ea", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000c9000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0}, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)="ea", 0x1}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000000), 0x98) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000c9000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.076336011s ago: executing program 1 (id=2293): r0 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040017010a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0xb, 0x4000000}, 0x0, 0xffffffffffffffff, r0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x6, 0x0, &(0x7f0000000d40)='syzkaller\x00', 0xd04, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x215, 0x3ff, 0xfffffffa, 0x0, 0xfffffffffffffffd, 0x1, 0xffff, 0x0, 0x10}, 0x0, 0xfffffffffefffffe, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x18}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, @perf_config_ext={0x6, 0x1}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r4, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e1d, @loopback}, 0xfffffffffffffdee, 0x0, 0x0, &(0x7f0000003a00), 0x20}, 0x400080e) setsockopt$sock_attach_bpf(r3, 0x10f, 0x32, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000040), 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000b2c34504edf5108060b924228b73577231dd0ab39f96e91c2f40234c2e00b87380a64e5f110063f3f1f9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000000500"/28], 0x50) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1c0000005e007f029e3b470d649bc33b02ed1c376c81bb9f72ab2539", 0x1c}], 0x1}, 0x0) 1.060563625s ago: executing program 5 (id=2294): mkdir(0x0, 0xbe9bac6d2d0f4e0b) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_config_ext={0x7ff, 0x3}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0xe1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0xfffffffc, 0x0, 0x6}]}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000340)=r6, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) 691.725473ms ago: executing program 3 (id=2295): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) 369.057312ms ago: executing program 3 (id=2296): r0 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6b, &(0x7f0000000000)=r2, 0x1c) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) socket$kcm(0x2, 0x200000000000003, 0x106) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x9, 0x9, 0xfffff014}, {0x6, 0x0, 0x0, 0xa}]}) 198.786738ms ago: executing program 2 (id=2297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x440000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x4, 0x100, 0x4808, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000280)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 0s ago: executing program 2 (id=2298): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="040200000004000000080000000100020080000000bb788fc900b0e4d2af29d93d2cd07907472985083dfac3019bfb9d6c5ffccb55cc2278488ee2946003c0222242315ed849e888fa13cdf0b3a8b0a4602e96c32c7d2051e137ad6bffc6b414a650217a2ba47627bc4d810ba4c73dd1e0c6f3e06a7048bfdf630adb3ee9e66007661cc4a8e4a09620e8688a48f69f91fa8a2f71ee055470d9e6ddcbb15262770230d119a5", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0x11, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x80000000, 0x68, &(0x7f0000000780)=""/104, 0x40f00, 0xe5, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x8, 0xdece, 0x33849682}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000880)=[r0, r0, r0, r0, r0], &(0x7f00000008c0)=[{0x4, 0x3, 0xa, 0x2}, {0x0, 0x2, 0xb, 0x5}, {0x3, 0x4, 0x0, 0x2}, {0x4, 0x3, 0xb, 0x5}, {0x4, 0x4}, {0x5, 0x3, 0x7, 0x9}, {0x5, 0x5, 0xe, 0x6}], 0x10, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x21, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x99}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x2, 0x1, 0x0, 0x4, 0x9, 0x18, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='syzkaller\x00', 0x3, 0x49, &(0x7f0000000b80)=""/73, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0x7, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r0, r0, r0, r0, r0], 0x0, 0x10, 0x697}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r3 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r3) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000040000000400000010", @ANYRESHEX=r6, @ANYRES8=r5], 0x50) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$OBJ_GET_PROG(0x9, &(0x7f00000000c0)=@generic={0x0, 0x11}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 132 bytes leftover after parsing attributes in process `syz.1.792'. [ 215.496576][ T7153] netlink: 'syz.1.792': attribute type 10 has an invalid length. [ 215.637189][ T7156] netlink: 'syz.4.793': attribute type 10 has an invalid length. [ 216.852084][ T7194] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 217.253761][ T7208] netlink: 180 bytes leftover after parsing attributes in process `syz.4.810'. [ 217.703388][ T7141] wlan1: Trigger new scan to find an IBSS to join [ 218.141242][ T7214] netlink: 'syz.0.813': attribute type 7 has an invalid length. [ 218.197105][ T7214] netlink: 148 bytes leftover after parsing attributes in process `syz.0.813'. [ 218.434232][ T7239] netlink: 'syz.1.818': attribute type 29 has an invalid length. [ 218.473428][ T7239] netlink: 'syz.1.818': attribute type 29 has an invalid length. [ 218.494784][ T7243] netlink: 'syz.1.818': attribute type 29 has an invalid length. [ 218.516100][ T7242] netlink: 'syz.1.818': attribute type 29 has an invalid length. [ 218.525779][ T7239] netlink: 'syz.1.818': attribute type 29 has an invalid length. [ 218.543714][ T7242] netlink: 'syz.1.818': attribute type 29 has an invalid length. [ 218.562305][ T7239] netlink: 'syz.1.818': attribute type 29 has an invalid length. [ 218.605171][ T7142] wlan1: Creating new IBSS network, BSSID 1a:cc:83:5c:2d:14 [ 218.881193][ T7254] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.822'. [ 218.966699][ T7254] netlink: 132 bytes leftover after parsing attributes in process `syz.3.822'. [ 220.248867][ T7276] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.828'. [ 220.663295][ T7122] wlan1: Trigger new scan to find an IBSS to join [ 221.053415][ T7302] validate_nla: 3 callbacks suppressed [ 221.053429][ T7302] netlink: 'syz.2.838': attribute type 3 has an invalid length. [ 221.143655][ T7302] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.838'. [ 221.564259][ T7308] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.841'. [ 221.627977][ T7305] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.840'. [ 222.885344][ T7342] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.852'. [ 223.062991][ T7347] netlink: 'syz.0.850': attribute type 39 has an invalid length. [ 223.355522][ T7352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.851'. [ 223.616998][ T7373] netlink: 'syz.3.856': attribute type 3 has an invalid length. [ 223.714099][ T7141] wlan1: Trigger new scan to find an IBSS to join [ 223.753066][ T7373] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.856'. [ 224.594983][ T7383] netlink: 'syz.4.860': attribute type 10 has an invalid length. [ 224.603772][ T7383] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 224.685120][ T7122] wlan1: Creating new IBSS network, BSSID 0a:52:f2:b3:b2:ae [ 225.085619][ T7394] device batadv0 entered promiscuous mode [ 225.240112][ T7397] netlink: 'syz.2.866': attribute type 1 has an invalid length. [ 225.262157][ T7397] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.866'. [ 225.756941][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.765609][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.825808][ T7414] device bridge_slave_1 left promiscuous mode [ 225.850553][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.894576][ T7414] device bridge_slave_0 left promiscuous mode [ 225.901183][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.374537][ T7426] netlink: 'syz.0.872': attribute type 3 has an invalid length. [ 226.495987][ T7426] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.872'. [ 227.347641][ T7435] netlink: 'syz.3.877': attribute type 3 has an invalid length. [ 227.357641][ T7435] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.877'. [ 227.441055][ T7435] netlink: 'syz.3.877': attribute type 21 has an invalid length. [ 227.460509][ T7435] netlink: 'syz.3.877': attribute type 6 has an invalid length. [ 227.486450][ T7435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.877'. [ 227.581466][ T7440] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.878'. [ 227.928003][ T7442] device veth1_macvtap left promiscuous mode [ 228.335849][ T7459] netlink: 'syz.0.885': attribute type 10 has an invalid length. [ 228.412233][ T7459] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 228.426596][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.435375][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.459389][ T7471] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 228.478811][ T7458] netlink: 'syz.0.885': attribute type 10 has an invalid length. [ 228.539335][ T7474] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 228.590885][ T7458] device veth0_vlan left promiscuous mode [ 228.615180][ T7458] device veth0_vlan entered promiscuous mode [ 228.645217][ T7458] team0: Device veth0_vlan failed to register rx_handler [ 228.711138][ T7469] device netdevsim0 left promiscuous mode [ 228.723229][ T7469] bridge0: port 3(netdevsim0) entered disabled state [ 228.800266][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.819317][ T7469] device bridge_slave_0 left promiscuous mode [ 228.840519][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.011832][ T7490] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.122145][ T7122] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 229.159437][ T7122] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 229.770561][ T7516] netlink: 'syz.3.901': attribute type 2 has an invalid length. [ 230.029977][ T7537] netlink: 'syz.0.904': attribute type 3 has an invalid length. [ 230.043055][ T7516] device 0 entered promiscuous mode [ 230.058013][ T7537] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.904'. [ 230.077258][ T7534] netlink: 132 bytes leftover after parsing attributes in process `syz.1.905'. [ 230.306213][ T7541] netlink: 'syz.4.906': attribute type 2 has an invalid length. [ 230.316364][ T7544] netlink: 'syz.4.906': attribute type 2 has an invalid length. [ 230.779610][ T7552] netlink: 463 bytes leftover after parsing attributes in process `syz.2.911'. [ 230.952691][ T7549] device bridge_slave_1 left promiscuous mode [ 230.967875][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.989967][ T7549] device bridge_slave_0 left promiscuous mode [ 231.018946][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.986288][ T7596] validate_nla: 4 callbacks suppressed [ 231.986320][ T7596] netlink: 'syz.4.921': attribute type 10 has an invalid length. [ 232.126414][ T7596] team0: Device hsr_slave_0 failed to register rx_handler [ 232.232438][ T7604] netlink: 'syz.0.923': attribute type 17 has an invalid length. [ 232.281437][ T7603] netlink: 'syz.0.923': attribute type 2 has an invalid length. [ 232.364678][ T7603] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 232.452264][ T7603] netlink: 'syz.0.923': attribute type 4 has an invalid length. [ 232.548521][ T7603] netlink: 208056 bytes leftover after parsing attributes in process `syz.0.923'. [ 232.688498][ T7618] netlink: 'syz.1.925': attribute type 3 has an invalid length. [ 232.707776][ T7618] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.925'. [ 232.866730][ T7618] netlink: 'syz.1.925': attribute type 21 has an invalid length. [ 232.903196][ T7618] netlink: 'syz.1.925': attribute type 6 has an invalid length. [ 232.911191][ T7618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.925'. [ 233.090364][ T7635] netlink: 126324 bytes leftover after parsing attributes in process `syz.3.931'. [ 233.100563][ T7630] delete_channel: no stack [ 233.337148][ T7640] device veth1_macvtap left promiscuous mode [ 233.705401][ T7641] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 233.741969][ T7641] syzkaller1: linktype set to 804 [ 233.800917][ T7641] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 234.371612][ T7675] netlink: 'syz.1.944': attribute type 17 has an invalid length. [ 235.390528][ T7701] netlink: 'syz.4.949': attribute type 19 has an invalid length. [ 235.570141][ T7701] netlink: 36 bytes leftover after parsing attributes in process `syz.4.949'. [ 235.949627][ T7705] device veth1_macvtap left promiscuous mode [ 237.189919][ T7729] netlink: 14 bytes leftover after parsing attributes in process `syz.3.958'. [ 237.263177][ T7729] device hsr_slave_0 left promiscuous mode [ 237.298636][ T7729] device hsr_slave_1 left promiscuous mode [ 237.497680][ T7742] netlink: 132 bytes leftover after parsing attributes in process `syz.4.960'. [ 237.773864][ T7749] netlink: 'syz.2.963': attribute type 29 has an invalid length. [ 237.797331][ T7749] netlink: 'syz.2.963': attribute type 29 has an invalid length. [ 237.839922][ T7750] netlink: 'syz.2.963': attribute type 29 has an invalid length. [ 237.937679][ T7749] netlink: 'syz.2.963': attribute type 16 has an invalid length. [ 237.964468][ T7749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.963'. [ 237.988982][ T7750] netlink: 'syz.2.963': attribute type 10 has an invalid length. [ 238.950741][ T7763] netlink: 'syz.4.968': attribute type 3 has an invalid length. [ 239.296333][ T7763] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.968'. [ 239.449354][ T7774] netlink: 'syz.4.968': attribute type 10 has an invalid length. [ 239.508211][ T7774] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.968'. [ 240.409003][ T7798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.979'. [ 240.629612][ T7793] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 240.686892][ T7793] syzkaller1: linktype set to 804 [ 240.733703][ T7793] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 241.288887][ T7809] netlink: 'syz.3.983': attribute type 29 has an invalid length. [ 241.343286][ T7809] netlink: 'syz.3.983': attribute type 29 has an invalid length. [ 241.353460][ T7816] netlink: 'syz.3.983': attribute type 29 has an invalid length. [ 241.509876][ T7813] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.984'. [ 241.678581][ T4290] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 241.697822][ T4290] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 242.527679][ T7831] netlink: 132 bytes leftover after parsing attributes in process `syz.2.988'. [ 244.036728][ T4290] Bluetooth: hci2: unexpected event 0x0b length: 151 > 11 [ 244.216521][ T7884] validate_nla: 3 callbacks suppressed [ 244.216537][ T7884] netlink: 'syz.0.1000': attribute type 13 has an invalid length. [ 244.287864][ T7884] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1000'. [ 244.821650][ T7884] erspan0: refused to change device tx_queue_len [ 245.008577][ T7888] netlink: 'syz.4.1002': attribute type 28 has an invalid length. [ 245.559568][ T7907] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1009'. [ 246.443209][ T4290] Bluetooth: hci3: unexpected event 0x0b length: 151 > 11 [ 247.211524][ T7956] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1018'. [ 247.277782][ T7959] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1019'. [ 247.310813][ T7956] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 247.323617][ T7956] CPU: 0 PID: 7956 Comm: syz.1.1018 Not tainted syzkaller #0 [ 247.331032][ T7956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.341109][ T7956] Call Trace: [ 247.344403][ T7956] [ 247.347344][ T7956] dump_stack_lvl+0x188/0x24e [ 247.352045][ T7956] ? show_regs_print_info+0x12/0x12 [ 247.357265][ T7956] ? load_image+0x410/0x410 [ 247.361804][ T7956] sysfs_warn_dup+0x8a/0xa0 [ 247.366336][ T7956] sysfs_do_create_link_sd+0xc0/0x110 [ 247.371731][ T7956] device_add+0x83b/0x1050 [ 247.376175][ T7956] wiphy_register+0x1d8b/0x2aa0 [ 247.381071][ T7956] ? cfg80211_event_work+0x40/0x40 [ 247.386205][ T7956] ? minstrel_ht_alloc+0x894/0xa20 [ 247.391340][ T7956] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 247.397431][ T7956] ieee80211_register_hw+0x2d48/0x39f0 [ 247.402944][ T7956] ? ieee80211_register_hw+0xf41/0x39f0 [ 247.408512][ T7956] ? ieee80211_register_hw+0xf41/0x39f0 [ 247.414091][ T7956] ? ieee80211_tasklet_handler+0x20/0x20 [ 247.419740][ T7956] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 247.425658][ T7956] ? __debug_object_init+0xed/0x440 [ 247.430890][ T7956] ? memset+0x1e/0x40 [ 247.434895][ T7956] ? __hrtimer_init+0x189/0x270 [ 247.439769][ T7956] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 247.445536][ T7956] ? memcpy+0x3c/0x60 [ 247.449550][ T7956] hwsim_new_radio_nl+0xab7/0xc90 [ 247.454618][ T7956] genl_family_rcv_msg_doit+0x22f/0x350 [ 247.460186][ T7956] ? end_current_label_crit_section+0x170/0x170 [ 247.466453][ T7956] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 247.472374][ T7956] ? bpf_lsm_capable+0x5/0x10 [ 247.477074][ T7956] ? security_capable+0x85/0xb0 [ 247.481952][ T7956] genl_rcv_msg+0x601/0x790 [ 247.488064][ T7956] ? genl_bind+0x360/0x360 [ 247.492507][ T7956] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 247.498885][ T7956] netlink_rcv_skb+0x1ef/0x440 [ 247.503674][ T7956] ? genl_bind+0x360/0x360 [ 247.508113][ T7956] ? netlink_ack+0x1160/0x1160 [ 247.512903][ T7956] ? down_read+0x1a8/0x2d0 [ 247.517347][ T7956] genl_rcv+0x24/0x40 [ 247.521357][ T7956] netlink_unicast+0x7ad/0x920 [ 247.526158][ T7956] netlink_sendmsg+0x8ad/0xbd0 [ 247.530953][ T7956] ? netlink_getsockopt+0x550/0x550 [ 247.536183][ T7956] ? apparmor_socket_sendmsg+0x8a/0x330 [ 247.541757][ T7956] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.547059][ T7956] ? security_socket_sendmsg+0x7c/0xa0 [ 247.552541][ T7956] ? netlink_getsockopt+0x550/0x550 [ 247.557771][ T7956] ____sys_sendmsg+0x5ed/0x9a0 [ 247.562566][ T7956] ? __sys_sendmsg_sock+0x30/0x30 [ 247.567608][ T7956] ? __import_iovec+0x306/0x510 [ 247.572496][ T7956] ? import_iovec+0x6f/0xa0 [ 247.577029][ T7956] ___sys_sendmsg+0x2a2/0x360 [ 247.581728][ T7956] ? __sys_sendmsg+0x2a0/0x2a0 [ 247.586571][ T7956] __se_sys_sendmsg+0x1c3/0x2b0 [ 247.591448][ T7956] ? __x64_sys_sendmsg+0x80/0x80 [ 247.596428][ T7956] ? lockdep_hardirqs_on+0x94/0x140 [ 247.601654][ T7956] do_syscall_64+0x4c/0xa0 [ 247.606088][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 247.610778][ T7956] ? clear_bhb_loop+0x60/0xb0 [ 247.615494][ T7956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.621427][ T7956] RIP: 0033:0x7f633579e159 [ 247.625867][ T7956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.645670][ T7956] RSP: 002b:00007f633663f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.654117][ T7956] RAX: ffffffffffffffda RBX: 00007f6335a26180 RCX: 00007f633579e159 [ 247.662118][ T7956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000013 [ 247.670108][ T7956] RBP: 00007f633583506b R08: 0000000000000000 R09: 0000000000000000 [ 247.678102][ T7956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.686095][ T7956] R13: 00007f6335a26218 R14: 00007f6335a26180 R15: 00007ffda987dc68 [ 247.694106][ T7956] [ 247.913226][ T7953] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1018'. [ 247.936644][ T7953] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 247.970198][ T7977] netlink: 'syz.3.1026': attribute type 3 has an invalid length. [ 247.982046][ T7977] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1026'. [ 247.993130][ T7953] CPU: 0 PID: 7953 Comm: syz.1.1018 Not tainted syzkaller #0 [ 248.000541][ T7953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.010611][ T7953] Call Trace: [ 248.013907][ T7953] [ 248.016854][ T7953] dump_stack_lvl+0x188/0x24e [ 248.021548][ T7953] ? show_regs_print_info+0x12/0x12 [ 248.026762][ T7953] ? load_image+0x410/0x410 [ 248.031308][ T7953] sysfs_warn_dup+0x8a/0xa0 [ 248.035843][ T7953] sysfs_do_create_link_sd+0xc0/0x110 [ 248.041239][ T7953] device_add+0x83b/0x1050 [ 248.045676][ T7953] wiphy_register+0x1d8b/0x2aa0 [ 248.050541][ T7953] ? cfg80211_event_work+0x40/0x40 [ 248.055650][ T7953] ? minstrel_ht_alloc+0x894/0xa20 [ 248.060759][ T7953] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 248.066824][ T7953] ieee80211_register_hw+0x2d48/0x39f0 [ 248.072287][ T7953] ? ieee80211_register_hw+0xf41/0x39f0 [ 248.077823][ T7953] ? ieee80211_register_hw+0xf41/0x39f0 [ 248.083369][ T7953] ? ieee80211_tasklet_handler+0x20/0x20 [ 248.088997][ T7953] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 248.094891][ T7953] ? __debug_object_init+0xed/0x440 [ 248.100085][ T7953] ? memset+0x1e/0x40 [ 248.104061][ T7953] ? __hrtimer_init+0x189/0x270 [ 248.108908][ T7953] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 248.114664][ T7953] ? memcpy+0x3c/0x60 [ 248.118751][ T7953] hwsim_new_radio_nl+0xab7/0xc90 [ 248.123798][ T7953] genl_family_rcv_msg_doit+0x22f/0x350 [ 248.129343][ T7953] ? end_current_label_crit_section+0x170/0x170 [ 248.135595][ T7953] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 248.141500][ T7953] ? bpf_lsm_capable+0x5/0x10 [ 248.146182][ T7953] ? security_capable+0x85/0xb0 [ 248.151034][ T7953] genl_rcv_msg+0x601/0x790 [ 248.155544][ T7953] ? genl_bind+0x360/0x360 [ 248.159958][ T7953] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 248.166297][ T7953] netlink_rcv_skb+0x1ef/0x440 [ 248.171052][ T7953] ? genl_bind+0x360/0x360 [ 248.175468][ T7953] ? netlink_ack+0x1160/0x1160 [ 248.180235][ T7953] ? down_read+0x1a8/0x2d0 [ 248.184649][ T7953] genl_rcv+0x24/0x40 [ 248.188620][ T7953] netlink_unicast+0x7ad/0x920 [ 248.193384][ T7953] netlink_sendmsg+0x8ad/0xbd0 [ 248.198149][ T7953] ? netlink_getsockopt+0x550/0x550 [ 248.203339][ T7953] ? apparmor_socket_sendmsg+0x8a/0x330 [ 248.208881][ T7953] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 248.214161][ T7953] ? security_socket_sendmsg+0x7c/0xa0 [ 248.219612][ T7953] ? netlink_getsockopt+0x550/0x550 [ 248.224809][ T7953] ____sys_sendmsg+0x5ed/0x9a0 [ 248.229575][ T7953] ? __sys_sendmsg_sock+0x30/0x30 [ 248.234595][ T7953] ? __import_iovec+0x306/0x510 [ 248.239451][ T7953] ? import_iovec+0x6f/0xa0 [ 248.243974][ T7953] ___sys_sendmsg+0x2a2/0x360 [ 248.248651][ T7953] ? __sys_sendmsg+0x2a0/0x2a0 [ 248.253448][ T7953] __se_sys_sendmsg+0x1c3/0x2b0 [ 248.258293][ T7953] ? __x64_sys_sendmsg+0x80/0x80 [ 248.263236][ T7953] ? lockdep_hardirqs_on+0x94/0x140 [ 248.268432][ T7953] do_syscall_64+0x4c/0xa0 [ 248.272845][ T7953] ? clear_bhb_loop+0x60/0xb0 [ 248.277526][ T7953] ? clear_bhb_loop+0x60/0xb0 [ 248.282197][ T7953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.288085][ T7953] RIP: 0033:0x7f633579e159 [ 248.292492][ T7953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.312096][ T7953] RSP: 002b:00007f6336660028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.320508][ T7953] RAX: ffffffffffffffda RBX: 00007f6335a26090 RCX: 00007f633579e159 [ 248.328470][ T7953] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000013 [ 248.336431][ T7953] RBP: 00007f633583506b R08: 0000000000000000 R09: 0000000000000000 [ 248.344395][ T7953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.352359][ T7953] R13: 00007f6335a26128 R14: 00007f6335a26090 R15: 00007ffda987dc68 [ 248.360345][ T7953] [ 248.827125][ T4290] Bluetooth: hci1: unexpected event 0x0b length: 151 > 11 [ 248.869364][ T7990] netlink: 'syz.1.1030': attribute type 21 has an invalid length. [ 249.045114][ T7998] netlink: 'syz.4.1034': attribute type 29 has an invalid length. [ 249.105127][ T7998] netlink: 'syz.4.1034': attribute type 29 has an invalid length. [ 251.502871][ T8071] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1051'. [ 251.512622][ T8075] netlink: 'syz.1.1052': attribute type 21 has an invalid length. [ 251.553017][ T8075] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1052'. [ 251.951382][ T8090] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1055'. [ 252.820206][ T47] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 252.835936][ T8123] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 252.864896][ T47] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 253.099398][ T8131] netlink: 'syz.3.1066': attribute type 2 has an invalid length. [ 253.181610][ T8131] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1066'. [ 253.382395][ T8134] netlink: 'syz.2.1068': attribute type 21 has an invalid length. [ 253.398823][ T8134] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1068'. [ 253.701628][ T8140] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1070'. [ 253.794562][ T8140] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 253.957701][ T8145] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1071'. [ 254.558320][ T8168] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1079'. [ 254.653146][ T8174] raw_sendmsg: syz.3.1077 forgot to set AF_INET. Fix it! [ 254.686410][ T7122] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.076351][ T8195] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1084'. [ 255.127369][ T8195] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 255.545649][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.552021][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.657486][ T8211] netlink: 'syz.3.1089': attribute type 2 has an invalid length. [ 256.084883][ T8226] netlink: 'syz.0.1090': attribute type 10 has an invalid length. [ 256.312796][ T8226] team0: Port device geneve1 added [ 256.732316][ T8234] device syzkaller0 entered promiscuous mode [ 256.740766][ T8234] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 256.778553][ T8234] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 256.792731][ T8234] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1094'. [ 257.407201][ T8248] netlink: 'syz.0.1099': attribute type 29 has an invalid length. [ 257.512935][ T8250] netlink: 'syz.0.1099': attribute type 16 has an invalid length. [ 257.520811][ T8250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1099'. [ 257.583911][ T8248] netlink: 'syz.0.1099': attribute type 29 has an invalid length. [ 257.601837][ T8259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.618979][ T8259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.733733][ T8259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.751411][ T8259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.332236][ T8251] netlink: 'syz.0.1099': attribute type 10 has an invalid length. [ 258.347597][ T8249] netlink: 'syz.0.1099': attribute type 29 has an invalid length. [ 258.398306][ T8267] netlink: 'syz.4.1103': attribute type 33 has an invalid length. [ 258.420561][ T8267] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1103'. [ 259.956060][ T8320] netlink: 'syz.4.1116': attribute type 39 has an invalid length. [ 260.314990][ T8330] netlink: 'syz.1.1118': attribute type 3 has an invalid length. [ 261.229655][ T8356] netlink: 'syz.3.1128': attribute type 29 has an invalid length. [ 261.246427][ T8354] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1127'. [ 264.822650][ T8356] validate_nla: 1 callbacks suppressed [ 264.822661][ T8356] netlink: 'syz.3.1128': attribute type 29 has an invalid length. [ 264.850205][ T8385] netlink: 'syz.2.1135': attribute type 10 has an invalid length. [ 264.850397][ T8373] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 264.867682][ T8373] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 264.877992][ T8373] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 264.897058][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.904543][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.952770][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.960158][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.969603][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.976806][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.038610][ T8385] team0: Port device bridge0 added [ 266.119574][ T8426] netlink: 'syz.4.1149': attribute type 10 has an invalid length. [ 266.266780][ T8438] netlink: 'syz.2.1152': attribute type 17 has an invalid length. [ 266.284993][ T8438] netlink: 'syz.2.1152': attribute type 16 has an invalid length. [ 266.301950][ T8438] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1152'. [ 266.358263][ T8440] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1153'. [ 266.565314][ T8447] delete_channel: no stack [ 266.925134][ T8465] netlink: 'syz.1.1159': attribute type 3 has an invalid length. [ 266.947568][ T8465] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1159'. [ 267.268857][ T8478] netlink: 'syz.1.1162': attribute type 1 has an invalid length. [ 268.969426][ T8514] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 269.419456][ T8502] delete_channel: no stack [ 269.509002][ T8524] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.1179'. [ 269.673483][ T8539] netlink: 'syz.2.1180': attribute type 21 has an invalid length. [ 269.815952][ T8542] device lo entered promiscuous mode [ 269.934829][ T8548] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.1186'. [ 270.261420][ T8559] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1190'. [ 270.278720][ T8559] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 270.286886][ T8559] netlink: 'syz.4.1190': attribute type 1 has an invalid length. [ 270.296897][ T8559] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1190'. [ 270.305997][ T8559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.465244][ T8565] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1192'. [ 270.629533][ T8566] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 270.958986][ T8564] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1191'. [ 271.143778][ T8560] delete_channel: no stack [ 272.588389][ T8607] netlink: 'syz.0.1206': attribute type 39 has an invalid length. [ 272.944334][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.160377][ T8623] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 273.208379][ T8623] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 273.217936][ T8627] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1212'. [ 273.252929][ T8614] delete_channel: no stack [ 273.360775][ T8633] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1214'. [ 273.373734][ T8633] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 273.407723][ T8633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.186651][ T8648] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1218'. [ 274.222421][ T8648] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.1218'. [ 274.267532][ T8648] netlink: 'syz.3.1218': attribute type 10 has an invalid length. [ 274.423987][ T8648] team0: Port device geneve1 added [ 274.443062][ T8660] netlink: 'syz.0.1223': attribute type 2 has an invalid length. [ 274.529761][ T8662] netlink: 'syz.4.1225': attribute type 10 has an invalid length. [ 274.554859][ T8662] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.562305][ T8662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.587650][ T8664] syz.2.1224[8664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.587787][ T8664] syz.2.1224[8664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.615622][ T8662] team0: Port device bridge0 added [ 274.664300][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.698224][ T8664] netlink: 'syz.2.1224': attribute type 41 has an invalid length. [ 274.727012][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1224'. [ 275.422398][ T8689] netlink: 103 bytes leftover after parsing attributes in process `syz.0.1228'. [ 275.457495][ T8701] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1236'. [ 275.659043][ T8709] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.1238'. [ 275.756443][ T8709] openvswitch: netlink: Flow actions attr not present in new flow. [ 275.827431][ T8718] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1239'. [ 276.718810][ T8742] netlink: 'syz.4.1249': attribute type 2 has an invalid length. [ 276.732638][ T8742] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1249'. [ 278.931195][ T8764] netlink: 'syz.1.1254': attribute type 3 has an invalid length. [ 278.940784][ T8764] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1254'. [ 279.048105][ T8764] netlink: 'syz.1.1254': attribute type 3 has an invalid length. [ 279.111905][ T8762] device lo entered promiscuous mode [ 279.136960][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 279.140655][ T8764] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1254'. [ 279.202786][ T8773] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1258'. [ 279.212609][ T8773] device hsr_slave_0 left promiscuous mode [ 279.231840][ T8773] device hsr_slave_1 left promiscuous mode [ 279.241172][ T8774] netlink: 'syz.4.1257': attribute type 1 has an invalid length. [ 279.255628][ T8774] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1257'. [ 279.425961][ T8780] : port 1(team0) entered blocking state [ 279.435438][ T8780] : port 1(team0) entered disabled state [ 279.445887][ T8780] device team0 entered promiscuous mode [ 279.456950][ T8780] device team_slave_0 entered promiscuous mode [ 279.465928][ T8780] device team_slave_1 entered promiscuous mode [ 279.475761][ T8780] device bond0 entered promiscuous mode [ 279.495498][ T8780] device bond_slave_0 entered promiscuous mode [ 279.504370][ T8780] device bond_slave_1 entered promiscuous mode [ 279.511208][ T8780] device dummy0 entered promiscuous mode [ 279.539108][ T8780] device macvlan0 entered promiscuous mode [ 279.552446][ T8780] device bridge0 entered promiscuous mode [ 279.581198][ T8782] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1261'. [ 279.608290][ T8783] device team0 left promiscuous mode [ 279.623170][ T8783] device team_slave_0 left promiscuous mode [ 279.629675][ T8783] device team_slave_1 left promiscuous mode [ 279.644553][ T8783] device bond0 left promiscuous mode [ 279.657186][ T8783] device bond_slave_0 left promiscuous mode [ 279.673100][ T8783] device bond_slave_1 left promiscuous mode [ 279.688077][ T8783] device dummy0 left promiscuous mode [ 279.702208][ T8783] device macvlan0 left promiscuous mode [ 279.717115][ T8783] device bridge0 left promiscuous mode [ 279.748229][ T8783] : port 1(team0) entered disabled state [ 280.087221][ T8789] netlink: 'syz.1.1263': attribute type 2 has an invalid length. [ 280.866956][ T8820] netlink: 'syz.4.1270': attribute type 16 has an invalid length. [ 280.911115][ T8820] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1270'. [ 280.953033][ T8820] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 281.151157][ T8827] device lo entered promiscuous mode [ 281.189768][ T8826] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1269'. [ 281.295280][ T8835] FAULT_INJECTION: forcing a failure. [ 281.295280][ T8835] name failslab, interval 1, probability 0, space 0, times 0 [ 281.372975][ T8835] CPU: 0 PID: 8835 Comm: syz.2.1272 Not tainted syzkaller #0 [ 281.380425][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 281.390607][ T8835] Call Trace: [ 281.393914][ T8835] [ 281.396860][ T8835] dump_stack_lvl+0x188/0x24e [ 281.401567][ T8835] ? show_regs_print_info+0x12/0x12 [ 281.406792][ T8835] ? load_image+0x410/0x410 [ 281.411338][ T8835] ? perf_trace_lock+0xf8/0x390 [ 281.416322][ T8835] ? __lock_acquire+0x138a/0x7c40 [ 281.421388][ T8835] should_fail_ex+0x390/0x4c0 [ 281.426109][ T8835] should_failslab+0x5/0x20 [ 281.430669][ T8835] slab_pre_alloc_hook+0x59/0x300 [ 281.435751][ T8835] kmem_cache_alloc_node+0x5a/0x310 [ 281.440978][ T8835] ? tipc_own_addr+0x45/0x2a0 [ 281.445687][ T8835] ? __alloc_skb+0xf9/0x7d0 [ 281.450220][ T8835] __alloc_skb+0xf9/0x7d0 [ 281.454583][ T8835] tipc_msg_create+0x46/0x4b0 [ 281.459301][ T8835] ? tipc_own_addr+0x45/0x2a0 [ 281.464020][ T8835] tipc_group_proto_xmit+0xcd/0x870 [ 281.469260][ T8835] tipc_group_cong+0x4d4/0x5d0 [ 281.474073][ T8835] ? tipc_group_update_bc_members+0x4f0/0x4f0 [ 281.480193][ T8835] ? net_generic+0x1e/0x240 [ 281.484734][ T8835] ? net_generic+0x1e/0x240 [ 281.489279][ T8835] tipc_group_bc_cong+0x14e/0x210 [ 281.494347][ T8835] tipc_send_group_bcast+0x36b/0xad0 [ 281.499668][ T8835] ? __lock_acquire+0x138a/0x7c40 [ 281.504747][ T8835] ? tipc_wait_for_connect+0x650/0x650 [ 281.510260][ T8835] ? perf_trace_lock+0xf8/0x390 [ 281.515149][ T8835] ? wait_woken+0x1c0/0x1c0 [ 281.519685][ T8835] ? perf_trace_lock+0xf8/0x390 [ 281.524578][ T8835] __tipc_sendmsg+0x313/0x2c00 [ 281.529370][ T8835] ? mark_lock+0x94/0x320 [ 281.533746][ T8835] ? rht_lock+0x150/0x150 [ 281.538145][ T8835] ? aa_sk_perm+0x950/0x950 [ 281.542676][ T8835] ? verify_lock_unused+0x140/0x140 [ 281.547904][ T8835] ? verify_lock_unused+0x140/0x140 [ 281.553145][ T8835] ? perf_trace_lock+0xf8/0x390 [ 281.558069][ T8835] ? mark_lock+0x94/0x320 [ 281.562435][ T8835] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 281.568460][ T8835] ? __local_bh_enable_ip+0x136/0x1c0 [ 281.573871][ T8835] ? lockdep_hardirqs_on+0x94/0x140 [ 281.579109][ T8835] ? __local_bh_enable_ip+0x136/0x1c0 [ 281.584511][ T8835] ? _local_bh_enable+0xa0/0xa0 [ 281.589402][ T8835] tipc_sendmsg+0x51/0x70 [ 281.593768][ T8835] sock_write_iter+0x2d5/0x3e0 [ 281.598609][ T8835] ? sock_read_iter+0x3a0/0x3a0 [ 281.603498][ T8835] ? common_file_perm+0x171/0x1c0 [ 281.608566][ T8835] vfs_write+0x482/0x9a0 [ 281.612848][ T8835] ? file_end_write+0x250/0x250 [ 281.617739][ T8835] ? __fget_files+0x3fc/0x460 [ 281.622462][ T8835] ? __fdget_pos+0x1d4/0x360 [ 281.627087][ T8835] ? ksys_write+0x70/0x260 [ 281.631626][ T8835] ksys_write+0x14d/0x260 [ 281.635993][ T8835] ? __ia32_sys_read+0x80/0x80 [ 281.640798][ T8835] ? lockdep_hardirqs_on+0x94/0x140 [ 281.646036][ T8835] do_syscall_64+0x4c/0xa0 [ 281.650476][ T8835] ? clear_bhb_loop+0x60/0xb0 [ 281.655178][ T8835] ? clear_bhb_loop+0x60/0xb0 [ 281.659882][ T8835] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 281.665807][ T8835] RIP: 0033:0x7f8ebaf9e159 [ 281.670252][ T8835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.689884][ T8835] RSP: 002b:00007f8ebbdbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.698333][ T8835] RAX: ffffffffffffffda RBX: 00007f8ebb226090 RCX: 00007f8ebaf9e159 [ 281.706346][ T8835] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000008 [ 281.714344][ T8835] RBP: 00007f8ebbdbe090 R08: 0000000000000000 R09: 0000000000000000 [ 281.722349][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.730350][ T8835] R13: 00007f8ebb226128 R14: 00007f8ebb226090 R15: 00007ffef4f72e58 [ 281.738362][ T8835] [ 282.314397][ T8852] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1277'. [ 282.770049][ T8875] TCP: TCP_TX_DELAY enabled [ 282.798668][ T8873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1284'. [ 283.026554][ T8879] device syzkaller0 entered promiscuous mode [ 283.807190][ T8892] cgroup: fork rejected by pids controller in /syz4 [ 283.840982][ T8890] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1289'. [ 287.003814][ T8955] tap0: tun_chr_ioctl cmd 1074025675 [ 287.009454][ T8955] tap0: persist enabled [ 287.016508][ T8961] tap0: tun_chr_ioctl cmd 1074025675 [ 287.021903][ T8961] tap0: persist disabled [ 287.026440][ T8990] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 287.038241][ T8990] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 287.091398][ T9018] netlink: 9343 bytes leftover after parsing attributes in process `syz.2.1294'. [ 287.117977][ T8890] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 287.136913][ T8890] CPU: 0 PID: 8890 Comm: syz.1.1289 Not tainted syzkaller #0 [ 287.144359][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.154437][ T8890] Call Trace: [ 287.157747][ T8890] [ 287.160700][ T8890] dump_stack_lvl+0x188/0x24e [ 287.165419][ T8890] ? show_regs_print_info+0x12/0x12 [ 287.170658][ T8890] ? load_image+0x410/0x410 [ 287.175216][ T8890] sysfs_warn_dup+0x8a/0xa0 [ 287.179760][ T8890] sysfs_do_create_link_sd+0xc0/0x110 [ 287.185138][ T8890] device_add+0x83b/0x1050 [ 287.189586][ T8890] wiphy_register+0x1d8b/0x2aa0 [ 287.194463][ T8890] ? cfg80211_event_work+0x40/0x40 [ 287.199577][ T8890] ? minstrel_ht_alloc+0x894/0xa20 [ 287.204688][ T8890] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 287.210757][ T8890] ieee80211_register_hw+0x2d48/0x39f0 [ 287.216222][ T8890] ? ieee80211_register_hw+0xf41/0x39f0 [ 287.221761][ T8890] ? ieee80211_register_hw+0xf41/0x39f0 [ 287.227312][ T8890] ? ieee80211_tasklet_handler+0x20/0x20 [ 287.232956][ T8890] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 287.238854][ T8890] ? __debug_object_init+0xed/0x440 [ 287.244053][ T8890] ? memset+0x1e/0x40 [ 287.248035][ T8890] ? __hrtimer_init+0x189/0x270 [ 287.252888][ T8890] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 287.258635][ T8890] ? memcpy+0x3c/0x60 [ 287.262616][ T8890] hwsim_new_radio_nl+0xab7/0xc90 [ 287.267653][ T8890] genl_family_rcv_msg_doit+0x22f/0x350 [ 287.273196][ T8890] ? end_current_label_crit_section+0x170/0x170 [ 287.279442][ T8890] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 287.285339][ T8890] ? bpf_lsm_capable+0x5/0x10 [ 287.290013][ T8890] ? security_capable+0x85/0xb0 [ 287.294862][ T8890] genl_rcv_msg+0x601/0x790 [ 287.299371][ T8890] ? genl_bind+0x360/0x360 [ 287.303782][ T8890] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 287.310128][ T8890] netlink_rcv_skb+0x1ef/0x440 [ 287.314889][ T8890] ? genl_bind+0x360/0x360 [ 287.319329][ T8890] ? netlink_ack+0x1160/0x1160 [ 287.324099][ T8890] ? down_read+0x1a8/0x2d0 [ 287.328523][ T8890] genl_rcv+0x24/0x40 [ 287.332500][ T8890] netlink_unicast+0x7ad/0x920 [ 287.337272][ T8890] netlink_sendmsg+0x8ad/0xbd0 [ 287.342036][ T8890] ? netlink_getsockopt+0x550/0x550 [ 287.347228][ T8890] ? apparmor_socket_sendmsg+0x8a/0x330 [ 287.352773][ T8890] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 287.358057][ T8890] ? security_socket_sendmsg+0x7c/0xa0 [ 287.363510][ T8890] ? netlink_getsockopt+0x550/0x550 [ 287.368707][ T8890] ____sys_sendmsg+0x5ed/0x9a0 [ 287.373477][ T8890] ? __sys_sendmsg_sock+0x30/0x30 [ 287.378497][ T8890] ? __import_iovec+0x306/0x510 [ 287.383395][ T8890] ? import_iovec+0x6f/0xa0 [ 287.387916][ T8890] ___sys_sendmsg+0x2a2/0x360 [ 287.392599][ T8890] ? __sys_sendmsg+0x2a0/0x2a0 [ 287.397376][ T8890] ? trace_call_bpf+0xbf/0x6b0 [ 287.402160][ T8890] __se_sys_sendmsg+0x1c3/0x2b0 [ 287.407006][ T8890] ? ct_nmi_exit+0x145/0x1c0 [ 287.411597][ T8890] ? __x64_sys_sendmsg+0x80/0x80 [ 287.416544][ T8890] ? lockdep_hardirqs_on+0x94/0x140 [ 287.421748][ T8890] do_syscall_64+0x4c/0xa0 [ 287.426159][ T8890] ? clear_bhb_loop+0x60/0xb0 [ 287.430833][ T8890] ? clear_bhb_loop+0x60/0xb0 [ 287.435505][ T8890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.441402][ T8890] RIP: 0033:0x7f633579e159 [ 287.445818][ T8890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.465426][ T8890] RSP: 002b:00007f6336660028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.473926][ T8890] RAX: ffffffffffffffda RBX: 00007f6335a26090 RCX: 00007f633579e159 [ 287.481895][ T8890] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000006e [ 287.489865][ T8890] RBP: 00007f633583506b R08: 0000000000000000 R09: 0000000000000000 [ 287.497832][ T8890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.505796][ T8890] R13: 00007f6335a26128 R14: 00007f6335a26090 R15: 00007ffda987dc68 [ 287.513775][ T8890] [ 287.730407][ T6030] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.809897][ T9027] device lo left promiscuous mode [ 287.892267][ T6030] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.141347][ T9038] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 288.207581][ T6030] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.345590][ T6030] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.557841][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.602214][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.611682][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.643083][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.650826][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 288.658411][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.888190][ T7139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 289.493872][ T9075] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1307'. [ 289.525244][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 289.574517][ T9075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.090878][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 290.422086][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.450166][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.470525][ T9043] device bridge_slave_0 entered promiscuous mode [ 290.489670][ T9105] netlink: 'syz.2.1311': attribute type 10 has an invalid length. [ 290.566247][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.584163][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.608795][ T9043] device bridge_slave_1 entered promiscuous mode [ 290.746147][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 290.798245][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.990435][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.083062][ T9119] netlink: 'syz.3.1314': attribute type 13 has an invalid length. [ 291.143958][ T9119] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1314'. [ 291.192619][ T9128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1316'. [ 291.260591][ T9119] erspan0: refused to change device tx_queue_len [ 291.287971][ T9119] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 291.823826][ T9043] team0: Port device team_slave_0 added [ 291.848763][ T9128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1316'. [ 291.869122][ T9130] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1316'. [ 291.908003][ T9043] team0: Port device team_slave_1 added [ 292.081692][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.127131][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.248205][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.342198][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.387636][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.428609][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.824375][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 292.880984][ T9043] device hsr_slave_0 entered promiscuous mode [ 292.919806][ T9043] device hsr_slave_1 entered promiscuous mode [ 292.950363][ T9043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.982484][ T9043] Cannot create hsr debugfs directory [ 293.211493][ T9167] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1321'. [ 293.630189][ T6030] device hsr_slave_0 left promiscuous mode [ 293.641493][ T6030] device hsr_slave_1 left promiscuous mode [ 293.826256][ T6030] device bridge_slave_0 left promiscuous mode [ 293.837398][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.942335][ T6030] device veth0_macvtap left promiscuous mode [ 293.953413][ T6030] device veth1_vlan left promiscuous mode [ 293.969616][ T6030] device veth0_vlan left promiscuous mode [ 294.688697][ T6030] team0 (unregistering): Port device geneve1 removed [ 294.903269][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 295.164588][ T6030] team0 (unregistering): Port device macvlan0 removed [ 296.449991][ T6030] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 296.635519][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 296.844339][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 296.919500][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.983211][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 297.142706][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.297744][ T6030] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 298.087202][ T6030] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 298.215233][ T6030] team0 (unregistering): Port device bridge0 removed [ 298.361703][ T6030] bond0 (unregistering): Released all slaves [ 298.536681][ T9195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1330'. [ 299.705554][ T9043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.744481][ T9043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.790371][ T9043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.812243][ T9043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.016129][ T9043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.092398][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 300.109950][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 300.145816][ T9043] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.242530][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 300.282584][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 300.312063][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.319348][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.347568][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.373865][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.396308][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.403553][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.450732][ T9256] netlink: 'syz.2.1346': attribute type 12 has an invalid length. [ 300.485046][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.498090][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.541062][ T9256] netlink: 'syz.2.1346': attribute type 29 has an invalid length. [ 300.574845][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.595113][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.616952][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.654787][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.676235][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.687186][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.702755][ T9256] netlink: 'syz.2.1346': attribute type 29 has an invalid length. [ 300.716222][ T9262] netlink: 'syz.2.1346': attribute type 29 has an invalid length. [ 300.734128][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.755277][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.841672][ T9274] netlink: 'syz.0.1350': attribute type 16 has an invalid length. [ 300.854621][ T9274] netlink: 'syz.0.1350': attribute type 3 has an invalid length. [ 300.865998][ T9274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1350'. [ 300.936749][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.956614][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.976194][ T9274] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1350'. [ 301.006530][ T9043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.173450][ T9285] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 301.709398][ T9310] netlink: 'syz.3.1355': attribute type 4 has an invalid length. [ 302.098793][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.111490][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.181881][ T9043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.604755][ T9338] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1360'. [ 302.742153][ T9343] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1360'. [ 303.251393][ T9360] netlink: 'syz.0.1364': attribute type 10 has an invalid length. [ 303.450331][ T9360] team0: Device wg1 is of different type [ 303.589099][ T4289] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 303.639403][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.721649][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.067326][ T9043] device veth0_vlan entered promiscuous mode [ 304.084668][ T9043] device veth1_vlan entered promiscuous mode [ 304.091993][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.104486][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.113568][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.135184][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.145253][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.174175][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.214708][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.244946][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.271688][ T9043] device veth0_macvtap entered promiscuous mode [ 304.294464][ T9043] device veth1_macvtap entered promiscuous mode [ 304.377752][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.420085][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.463546][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.501052][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.531090][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.579383][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.619138][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.645428][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.673949][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.729404][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.769827][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.802178][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.835588][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.876173][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.891276][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.902699][ T9043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.923023][ T9043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.942409][ T9043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.951999][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.962722][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.033508][ T9043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.042262][ T9043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.095224][ T9043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.116961][ T9043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.124525][ T9402] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1377'. [ 305.623270][ T4290] Bluetooth: hci2: command 0x0409 tx timeout [ 306.108883][ T9411] netlink: 'syz.0.1389': attribute type 3 has an invalid length. [ 306.134285][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.146522][ T9412] netlink: 'syz.0.1389': attribute type 3 has an invalid length. [ 306.152449][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.183970][ T9413] netlink: 'syz.0.1389': attribute type 3 has an invalid length. [ 306.202015][ T7141] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 306.204079][ T9412] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1389'. [ 306.230288][ T9411] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1389'. [ 306.284374][ T7141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.294720][ T9413] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1389'. [ 306.320196][ T7141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.374102][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 307.050077][ T9446] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1383'. [ 307.136203][ T9450] netlink: 15039 bytes leftover after parsing attributes in process `syz.3.1384'. [ 307.741849][ T9462] FAULT_INJECTION: forcing a failure. [ 307.741849][ T9462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.816957][ T9462] CPU: 1 PID: 9462 Comm: syz.0.1388 Not tainted syzkaller #0 [ 307.824661][ T9462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.834761][ T9462] Call Trace: [ 307.838053][ T9462] [ 307.840997][ T9462] dump_stack_lvl+0x188/0x24e [ 307.845712][ T9462] ? show_regs_print_info+0x12/0x12 [ 307.850945][ T9462] ? load_image+0x410/0x410 [ 307.855493][ T9462] ? __lock_acquire+0x7c40/0x7c40 [ 307.860547][ T9462] ? lockdep_hardirqs_on+0x94/0x140 [ 307.865777][ T9462] should_fail_ex+0x390/0x4c0 [ 307.870495][ T9462] _copy_from_user+0x2c/0x170 [ 307.875205][ T9462] __sys_bpf+0x2ea/0x780 [ 307.879476][ T9462] ? bpf_link_show_fdinfo+0x380/0x380 [ 307.884891][ T9462] ? lock_chain_count+0x20/0x20 [ 307.889776][ T9462] __x64_sys_bpf+0x78/0x90 [ 307.894220][ T9462] do_syscall_64+0x4c/0xa0 [ 307.898653][ T9462] ? clear_bhb_loop+0x60/0xb0 [ 307.903346][ T9462] ? clear_bhb_loop+0x60/0xb0 [ 307.908046][ T9462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.913971][ T9462] RIP: 0033:0x7f7b2b19e159 [ 307.918413][ T9462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.938038][ T9462] RSP: 002b:00007f7b2bfa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 307.946449][ T9462] RAX: ffffffffffffffda RBX: 00007f7b2b425fa0 RCX: 00007f7b2b19e159 [ 307.954415][ T9462] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 307.962377][ T9462] RBP: 00007f7b2bfa2090 R08: 0000000000000000 R09: 0000000000000000 [ 307.970343][ T9462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.978306][ T9462] R13: 00007f7b2b426038 R14: 00007f7b2b425fa0 R15: 00007ffc51ef7298 [ 307.986283][ T9462] [ 308.440810][ T9491] device wlan1 entered promiscuous mode [ 308.489303][ T9491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1398'. [ 308.807898][ T9495] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1399'. [ 309.317428][ T9487] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 309.591860][ T9515] netlink: 'syz.4.1403': attribute type 10 has an invalid length. [ 309.757285][ T9515] team0: Device wg1 is of different type [ 309.924580][ T9525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1405'. [ 310.852671][ T9549] netlink: 'syz.4.1415': attribute type 21 has an invalid length. [ 310.876318][ T9549] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1415'. [ 310.897245][ T9549] netlink: 'syz.4.1415': attribute type 4 has an invalid length. [ 310.911552][ T9549] netlink: 'syz.4.1415': attribute type 5 has an invalid length. [ 310.924134][ T9549] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1415'. [ 311.081392][ T9554] netlink: 'syz.4.1417': attribute type 29 has an invalid length. [ 311.123946][ T9554] netlink: 'syz.4.1417': attribute type 29 has an invalid length. [ 311.130899][ T9556] netlink: 'syz.3.1416': attribute type 2 has an invalid length. [ 311.133793][ T9558] netlink: 'syz.4.1417': attribute type 29 has an invalid length. [ 311.149473][ T9554] netlink: 'syz.4.1417': attribute type 29 has an invalid length. [ 311.153148][ T9556] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1416'. [ 311.166564][ T9558] netlink: 'syz.4.1417': attribute type 29 has an invalid length. [ 311.292645][ T9562] netlink: 'syz.3.1419': attribute type 1 has an invalid length. [ 311.336051][ T9562] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1419'. [ 311.902317][ T9583] netlink: 'syz.3.1426': attribute type 10 has an invalid length. [ 311.933081][ T9583] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1426'. [ 312.120630][ T9586] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1427'. [ 312.297913][ T9587] device pim6reg1 entered promiscuous mode [ 312.412476][ T9593] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 312.478048][ T9593] team0: Port device geneve1 added [ 313.209598][ T9619] netlink: 'syz.2.1435': attribute type 3 has an invalid length. [ 313.249462][ T9619] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1435'. [ 313.472223][ T9617] : port 1(vlan0) entered blocking state [ 313.493731][ T9617] : port 1(vlan0) entered disabled state [ 313.516539][ T9617] device vlan0 entered promiscuous mode [ 317.013319][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.019763][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.421184][ T9692] netlink: 'syz.4.1456': attribute type 10 has an invalid length. [ 317.571585][ T9692] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 317.588575][ T9696] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1458'. [ 318.648979][ T9726] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1463'. [ 318.921303][ T9732] netlink: 'syz.1.1466': attribute type 3 has an invalid length. [ 319.040160][ T9732] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 319.100825][ T9732] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1466'. [ 319.342449][ T9738] netlink: 'syz.0.1467': attribute type 27 has an invalid length. [ 319.413237][ T9738] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1467'. [ 319.621754][ T9744] netlink: 'syz.3.1469': attribute type 2 has an invalid length. [ 319.690249][ T9744] netlink: 'syz.3.1469': attribute type 1 has an invalid length. [ 319.718356][ T9745] netlink: 'syz.3.1469': attribute type 15 has an invalid length. [ 319.719420][ T9744] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1469'. [ 319.802067][ T9745] netlink: 'syz.3.1469': attribute type 7 has an invalid length. [ 319.916878][ T9747] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1470'. [ 320.027761][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 320.436950][ T9764] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1474'. [ 320.890457][ T9776] netlink: 'syz.0.1477': attribute type 3 has an invalid length. [ 320.934632][ T9776] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1477'. [ 321.280473][ T9794] netlink: 'syz.0.1481': attribute type 4 has an invalid length. [ 321.306282][ T9794] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1481'. [ 321.748277][ T9806] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1486'. [ 321.784502][ T9807] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 323.038081][ T9839] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.045447][ T9839] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.164372][ T9841] device bridge_slave_1 left promiscuous mode [ 323.185281][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.398026][ T9841] device bridge_slave_0 left promiscuous mode [ 323.415575][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.513314][ T9841] team0: Port device bridge0 removed [ 324.535530][ T9860] validate_nla: 6 callbacks suppressed [ 324.535562][ T9860] netlink: 'syz.1.1499': attribute type 9 has an invalid length. [ 324.556378][ T9860] __nla_validate_parse: 3 callbacks suppressed [ 324.556412][ T9860] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.1499'. [ 324.966483][ T9872] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 324.977158][ T9874] netlink: 'syz.1.1502': attribute type 27 has an invalid length. [ 324.986424][ T9874] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1502'. [ 324.986488][ T9872] syzkaller1: linktype set to 773 [ 325.026134][ T9872] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1512'. [ 325.507619][ T9902] netlink: 197788 bytes leftover after parsing attributes in process `syz.3.1508'. [ 326.377161][ T9929] netlink: 58351 bytes leftover after parsing attributes in process `syz.1.1516'. [ 327.205208][ T9950] sctp: [Deprecated]: syz.3.1523 (pid 9950) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.205208][ T9950] Use struct sctp_sack_info instead [ 327.367294][ T9951] sctp: [Deprecated]: syz.3.1523 (pid 9951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.367294][ T9951] Use struct sctp_sack_info instead [ 330.039428][T10000] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1536'. [ 332.555457][T10036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.594193][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.749660][T10042] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.768119][T10057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1547'. [ 332.771645][T10042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.819660][T10036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.854412][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.888535][T10057] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1547'. [ 332.912491][T10036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.929229][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.964340][T10036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1545'. [ 332.985741][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.024400][T10058] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1547'. [ 333.050949][T10036] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1545'. [ 333.065373][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.103996][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.121132][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.144766][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.176899][T10036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.579825][T10070] bridge_slave_1: default FDB implementation only supports local addresses [ 333.760160][T10069] netlink: 'syz.0.1550': attribute type 16 has an invalid length. [ 333.957385][T10077] netlink: 'syz.3.1553': attribute type 3 has an invalid length. [ 334.207242][ T4289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.233897][ T4289] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.242343][ T4289] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.252336][ T4289] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.272877][ T4289] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.280270][ T4289] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.538580][T10091] netlink: 'syz.3.1556': attribute type 27 has an invalid length. [ 334.777202][T10091] bond0: (slave bond_slave_0): Releasing backup interface [ 335.149547][T10100] netlink: 'syz.2.1559': attribute type 10 has an invalid length. [ 335.439245][T10086] chnl_net:caif_netlink_parms(): no params data found [ 335.599616][T10086] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.606970][T10086] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.615840][T10086] device bridge_slave_0 entered promiscuous mode [ 335.675205][T10086] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.690745][T10086] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.702460][T10086] device bridge_slave_1 entered promiscuous mode [ 335.823830][T10086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.851189][T10086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.919708][T10127] __nla_validate_parse: 37 callbacks suppressed [ 335.919745][T10127] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1566'. [ 335.973102][T10128] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1564'. [ 336.104023][T10086] team0: Port device team_slave_0 added [ 336.343196][ T4290] Bluetooth: hci4: command 0x0409 tx timeout [ 336.376843][T10086] team0: Port device team_slave_1 added [ 336.414004][T10086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.421019][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.466676][T10086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.536482][T10086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.553148][T10086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.599811][T10086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.653898][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 336.753639][T10150] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 336.890536][T10086] device hsr_slave_0 entered promiscuous mode [ 337.099506][T10173] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1573'. [ 337.129147][T10086] device hsr_slave_1 entered promiscuous mode [ 337.168919][T10086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.184024][T10086] Cannot create hsr debugfs directory [ 338.422926][ T4290] Bluetooth: hci4: command 0x041b tx timeout [ 338.716184][T10203] netlink: 'syz.0.1578': attribute type 4 has an invalid length. [ 338.798880][T10205] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1578'. [ 339.050973][T10086] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.094876][T10209] netlink: 'syz.3.1579': attribute type 1 has an invalid length. [ 339.161098][T10209] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1579'. [ 339.162577][T10086] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.256125][T10086] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.313508][T10086] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.798336][T10086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.863022][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.871045][ T7142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.932118][T10086] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.947568][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.971770][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.988057][ T6030] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.995280][ T6030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.007200][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 340.053981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 340.073633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 340.086685][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.093890][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.126187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 340.219200][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 340.247897][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 340.341106][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 340.408957][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.503539][ T4290] Bluetooth: hci4: command 0x040f tx timeout [ 340.617104][T10238] device syzkaller0 entered promiscuous mode [ 340.640642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.680826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 341.262382][T10257] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1591'. [ 342.586292][ T4290] Bluetooth: hci4: command 0x0419 tx timeout [ 343.064960][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 343.074138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 343.082500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 343.091624][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 343.101753][T10086] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 343.132392][T10257] sysfs: cannot create duplicate filename '/class/ieee80211/.! 57>7H' [ 343.163629][T10257] CPU: 1 PID: 10257 Comm: syz.0.1591 Not tainted syzkaller #0 [ 343.171153][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 343.181216][T10257] Call Trace: [ 343.184491][T10257] [ 343.187424][T10257] dump_stack_lvl+0x188/0x24e [ 343.192106][T10257] ? show_regs_print_info+0x12/0x12 [ 343.197307][T10257] ? load_image+0x410/0x410 [ 343.201824][T10257] sysfs_warn_dup+0x8a/0xa0 [ 343.206330][T10257] sysfs_do_create_link_sd+0xc0/0x110 [ 343.211706][T10257] device_add+0x83b/0x1050 [ 343.216126][T10257] wiphy_register+0x1d8b/0x2aa0 [ 343.220984][T10257] ? cfg80211_event_work+0x40/0x40 [ 343.226089][T10257] ? minstrel_ht_alloc+0x894/0xa20 [ 343.231199][T10257] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 343.237266][T10257] ieee80211_register_hw+0x2d48/0x39f0 [ 343.242733][T10257] ? ieee80211_register_hw+0xf41/0x39f0 [ 343.248277][T10257] ? ieee80211_register_hw+0xf41/0x39f0 [ 343.253820][T10257] ? ieee80211_tasklet_handler+0x20/0x20 [ 343.259451][T10257] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 343.265356][T10257] ? __debug_object_init+0xed/0x440 [ 343.270557][T10257] ? memset+0x1e/0x40 [ 343.274531][T10257] ? __hrtimer_init+0x189/0x270 [ 343.279381][T10257] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 343.285110][T10257] ? memcpy+0x3c/0x60 [ 343.289094][T10257] hwsim_new_radio_nl+0xab7/0xc90 [ 343.294128][T10257] genl_family_rcv_msg_doit+0x22f/0x350 [ 343.299675][T10257] ? end_current_label_crit_section+0x170/0x170 [ 343.305931][T10257] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 343.311827][T10257] ? bpf_lsm_capable+0x5/0x10 [ 343.316502][T10257] ? security_capable+0x85/0xb0 [ 343.321359][T10257] genl_rcv_msg+0x601/0x790 [ 343.325870][T10257] ? genl_bind+0x360/0x360 [ 343.330280][T10257] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 343.336614][T10257] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 343.342601][T10257] netlink_rcv_skb+0x1ef/0x440 [ 343.347367][T10257] ? genl_bind+0x360/0x360 [ 343.351783][T10257] ? netlink_ack+0x1160/0x1160 [ 343.356547][T10257] ? genl_bind+0x360/0x360 [ 343.360960][T10257] genl_rcv+0x24/0x40 [ 343.364936][T10257] netlink_unicast+0x7ad/0x920 [ 343.369703][T10257] netlink_sendmsg+0x8ad/0xbd0 [ 343.374467][T10257] ? netlink_getsockopt+0x550/0x550 [ 343.379661][T10257] ? apparmor_socket_sendmsg+0x8a/0x330 [ 343.385209][T10257] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 343.390488][T10257] ? security_socket_sendmsg+0x7c/0xa0 [ 343.395946][T10257] ? netlink_getsockopt+0x550/0x550 [ 343.401146][T10257] ____sys_sendmsg+0x5ed/0x9a0 [ 343.405914][T10257] ? __sys_sendmsg_sock+0x30/0x30 [ 343.410954][T10257] ? __import_iovec+0x306/0x510 [ 343.415814][T10257] ? import_iovec+0x6f/0xa0 [ 343.420322][T10257] ___sys_sendmsg+0x2a2/0x360 [ 343.425009][T10257] ? __sys_sendmsg+0x2a0/0x2a0 [ 343.429788][T10257] ? ktime_get+0x7b/0x270 [ 343.434140][T10257] __se_sys_sendmsg+0x1c3/0x2b0 [ 343.438994][T10257] ? __x64_sys_sendmsg+0x80/0x80 [ 343.443939][T10257] ? lockdep_hardirqs_on+0x94/0x140 [ 343.449165][T10257] do_syscall_64+0x4c/0xa0 [ 343.453597][T10257] ? clear_bhb_loop+0x60/0xb0 [ 343.458288][T10257] ? clear_bhb_loop+0x60/0xb0 [ 343.462962][T10257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.468858][T10257] RIP: 0033:0x7f7b2b19e159 [ 343.473271][T10257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.492872][T10257] RSP: 002b:00007f7b2bfa2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.501292][T10257] RAX: ffffffffffffffda RBX: 00007f7b2b425fa0 RCX: 00007f7b2b19e159 [ 343.509258][T10257] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 343.517242][T10257] RBP: 00007f7b2b23506b R08: 0000000000000000 R09: 0000000000000000 [ 343.525216][T10257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.533185][T10257] R13: 00007f7b2b426038 R14: 00007f7b2b425fa0 R15: 00007ffc51ef7298 [ 343.541168][T10257] [ 343.723393][T10280] ref_ctr_offset mismatch. inode: 0x695 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 344.012404][T10286] netlink: 'syz.0.1600': attribute type 27 has an invalid length. [ 344.270468][T10286] bond0: (slave bond_slave_0): Releasing backup interface [ 344.407473][T10298] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1604'. [ 344.769445][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.782761][ T6030] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.817137][T10086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.948282][T10321] netlink: 'syz.2.1608': attribute type 3 has an invalid length. [ 344.957565][T10321] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1608'. [ 345.372466][T10334] syzkaller0: create flow: hash 1988820691 index 1 [ 345.424009][T10335] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1612'. [ 345.453410][T10335] bridge_slave_1: default FDB implementation only supports local addresses [ 345.510195][ T4319] syzkaller0: tun_net_xmit 76 [ 345.516513][ T4319] syzkaller0: tun_net_xmit 48 [ 345.547391][ T4320] syzkaller0: tun_net_xmit 76 [ 345.683362][ T4319] syzkaller0: tun_net_xmit 76 [ 345.758054][T10328] syzkaller0: delete flow: hash 1988820691 index 1 [ 346.822569][T10354] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1618'. [ 346.874382][T10361] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1618'. [ 348.822265][T10377] can: request_module (can-proto-0) failed. [ 350.083861][T10370] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1621'. [ 350.139005][T10392] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1626'. [ 350.350182][T10408] netlink: 'syz.0.1629': attribute type 2 has an invalid length. [ 350.399036][T10408] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1629'. [ 350.715159][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 350.725727][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 350.761477][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 350.771566][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.794334][T10086] device veth0_vlan entered promiscuous mode [ 350.817233][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.833725][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.838641][T10420] netlink: 'syz.0.1631': attribute type 9 has an invalid length. [ 350.855570][T10086] device veth1_vlan entered promiscuous mode [ 350.909195][T10420] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1631'. [ 350.914127][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 350.944839][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 350.970114][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.987075][ T7139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.023385][T10086] device veth0_macvtap entered promiscuous mode [ 351.052032][T10086] device veth1_macvtap entered promiscuous mode [ 351.094233][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.114913][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.142233][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.173976][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.197780][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.215267][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.229433][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.242713][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.257379][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.271870][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.289968][T10086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.310479][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.321150][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.362044][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.390428][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.410670][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.431541][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.462032][T10086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.481740][T10086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.530953][T10086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.542411][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.564501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.594675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 351.612320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 351.649033][T10086] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.670063][T10086] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.679354][T10086] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.689464][T10086] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.186041][ T7139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.237581][T10432] netlink: 'syz.1.1634': attribute type 2 has an invalid length. [ 353.247993][T10432] netlink: 'syz.1.1634': attribute type 8 has an invalid length. [ 353.267156][T10432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1634'. [ 353.427718][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.471686][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.520194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.547934][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.565501][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.603445][ T7122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 353.669408][T10450] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1640'. [ 356.146161][T10468] netlink: 'syz.0.1642': attribute type 27 has an invalid length. [ 356.192250][T10476] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'. [ 356.271574][T10468] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1642'. [ 356.582137][T10492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.589470][T10492] IPv6: NLM_F_CREATE should be set when creating new route [ 356.596770][T10492] IPv6: NLM_F_CREATE should be set when creating new route [ 356.604069][T10492] IPv6: NLM_F_CREATE should be set when creating new route [ 357.231112][T10502] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1651'. [ 357.277024][T10502] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1651'. [ 357.649856][T10522] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1657'. [ 357.815581][T10523] netlink: 14566 bytes leftover after parsing attributes in process `syz.1.1657'. [ 358.276614][T10538] netlink: 22 bytes leftover after parsing attributes in process `syz.5.1661'. [ 358.294840][T10530] netlink: 'syz.0.1659': attribute type 10 has an invalid length. [ 358.506334][ T7139] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 358.527521][ T7139] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 358.672558][T10530] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 358.722571][T10534] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1659'. [ 358.913769][T10534] team0: Port device bond0 removed [ 358.949490][T10534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.027771][T10534] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 359.058385][T10534] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 359.074869][T10534] bond0 (unregistering): Released all slaves [ 359.094882][T10535] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1659'. [ 359.153653][T10550] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1665'. [ 359.463751][T10575] netlink: 'syz.5.1670': attribute type 2 has an invalid length. [ 359.562562][T10577] netlink: 'syz.5.1670': attribute type 10 has an invalid length. [ 359.615585][T10577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1670'. [ 360.476543][T10563] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1669'. [ 360.506526][T10575] device 0 entered promiscuous mode [ 360.527611][T10577] netlink: 'syz.5.1670': attribute type 10 has an invalid length. [ 360.542000][T10577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1670'. [ 360.930883][T10603] netlink: 'syz.5.1676': attribute type 3 has an invalid length. [ 360.963991][T10603] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1676'. [ 362.180267][T10645] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 362.297312][T10645] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1688'. [ 362.842482][T10656] netlink: 'syz.5.1691': attribute type 21 has an invalid length. [ 363.432278][T10688] netlink: 'syz.5.1699': attribute type 1 has an invalid length. [ 363.493299][T10688] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.1699'. [ 363.924616][T10689] device syzkaller0 entered promiscuous mode [ 363.986701][T10693] netlink: 'syz.0.1700': attribute type 6 has an invalid length. [ 364.003767][T10693] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1700'. [ 364.047930][T10695] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1699'. [ 364.908702][T10719] netlink: 8964 bytes leftover after parsing attributes in process `syz.0.1704'. [ 366.496766][T10731] device veth1_macvtap left promiscuous mode [ 366.991311][T10764] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.1711'. [ 367.056785][T10764] net_ratelimit: 31 callbacks suppressed [ 367.056798][T10764] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 367.190693][T10778] netlink: 'syz.2.1715': attribute type 21 has an invalid length. [ 367.208182][T10778] netlink: 'syz.2.1715': attribute type 6 has an invalid length. [ 367.247109][T10778] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1715'. [ 367.381195][T10786] netlink: 'syz.1.1716': attribute type 2 has an invalid length. [ 367.991033][T10798] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.1719'. [ 368.010742][T10798] openvswitch: netlink: Flow actions attr not present in new flow. [ 368.026940][T10801] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 368.058199][T10801] syzkaller1: linktype set to 773 [ 368.076131][T10798] Q6\bY4: renamed from lo [ 368.150809][T10805] netlink: 'syz.5.1722': attribute type 8 has an invalid length. [ 368.213710][T10805] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1722'. [ 368.277406][T10812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1724'. [ 368.368288][T10811] netlink: 'syz.3.1724': attribute type 16 has an invalid length. [ 368.430778][T10811] netlink: 'syz.3.1724': attribute type 25 has an invalid length. [ 368.453456][T10811] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1724'. [ 368.620305][T10834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1729'. [ 368.640127][T10834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1729'. [ 368.707783][T10835] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1729'. [ 368.788586][T10845] netlink: 'syz.3.1731': attribute type 10 has an invalid length. [ 369.978832][T10845] team0: Device veth0_vlan failed to register rx_handler [ 370.070260][T10846] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 370.116817][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.144691][T10846] team0: Port device bond0 added [ 370.446014][T10861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1737'. [ 370.533369][T10871] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1738'. [ 370.767586][T10884] netlink: 'syz.3.1741': attribute type 21 has an invalid length. [ 370.797503][T10885] netlink: 8964 bytes leftover after parsing attributes in process `syz.3.1741'. [ 371.330184][T10903] netlink: 'syz.1.1746': attribute type 21 has an invalid length. [ 374.174556][T10908] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 374.194124][T10915] validate_nla: 1 callbacks suppressed [ 374.194139][T10915] netlink: 'syz.2.1749': attribute type 41 has an invalid length. [ 375.385427][T10955] netlink: 'syz.0.1760': attribute type 13 has an invalid length. [ 375.418043][T10955] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.1760'. [ 376.815794][T10982] netlink: 'syz.2.1765': attribute type 1 has an invalid length. [ 376.848086][T10986] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1766'. [ 377.539826][T11006] netlink: 'syz.1.1773': attribute type 13 has an invalid length. [ 377.563669][T11006] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.1773'. [ 377.693179][T11014] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1775'. [ 377.861435][T11020] netlink: 'syz.1.1778': attribute type 39 has an invalid length. [ 377.978501][T11023] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 377.998329][T11023] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 378.009475][T11024] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 378.044559][T11024] netlink: 'syz.0.1777': attribute type 29 has an invalid length. [ 378.072981][T11027] netlink: 'syz.1.1778': attribute type 21 has an invalid length. [ 378.080983][T11027] IPv6: NLM_F_CREATE should be specified when creating new route [ 378.099865][T11027] IPv6: Can't replace route, no match found [ 378.290634][T11037] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1780'. [ 378.513094][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.519535][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.039229][T11054] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1786'. [ 379.437270][T11059] validate_nla: 22 callbacks suppressed [ 379.437289][T11059] netlink: 'syz.3.1787': attribute type 13 has an invalid length. [ 379.451028][T11059] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.1787'. [ 379.978472][T11082] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 380.013347][T11082] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1792'. [ 380.053448][T11081] netlink: 'syz.0.1792': attribute type 1 has an invalid length. [ 380.081791][T11081] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1792'. [ 380.322582][T11091] netlink: 'syz.0.1796': attribute type 29 has an invalid length. [ 380.332672][T11091] netlink: 'syz.0.1796': attribute type 29 has an invalid length. [ 380.354972][T11091] netlink: 'syz.0.1796': attribute type 29 has an invalid length. [ 380.365071][T11091] netlink: 'syz.0.1796': attribute type 29 has an invalid length. [ 380.375950][T11091] netlink: 'syz.0.1796': attribute type 29 has an invalid length. [ 381.281868][T11098] netlink: 'syz.5.1799': attribute type 41 has an invalid length. [ 381.535239][T11119] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1803'. [ 381.564329][T11118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1805'. [ 381.583681][T11118] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1805'. [ 381.709822][ T7138] wlan1: Trigger new scan to find an IBSS to join [ 381.716456][T11104] : renamed from pim6reg1 [ 381.981718][T11114] device syzkaller0 entered promiscuous mode [ 382.889376][T11143] delete_channel: no stack [ 383.085845][T11156] netlink: 130181 bytes leftover after parsing attributes in process `syz.5.1813'. [ 384.641721][T11158] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1814'. [ 384.650995][T11158] device hsr_slave_0 left promiscuous mode [ 384.702357][T11157] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1814'. [ 384.743378][ T7138] wlan1: Trigger new scan to find an IBSS to join [ 384.921943][T11169] netlink: 'syz.0.1817': attribute type 3 has an invalid length. [ 384.932567][T11171] netlink: 'syz.5.1828': attribute type 10 has an invalid length. [ 384.944540][T11169] netlink: 'syz.0.1817': attribute type 1 has an invalid length. [ 384.952970][T11171] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1828'. [ 385.018753][T11169] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1817'. [ 385.091242][T11173] netlink: 'syz.2.1827': attribute type 17 has an invalid length. [ 385.137124][T11173] netlink: 'syz.2.1827': attribute type 16 has an invalid length. [ 385.224092][T11173] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1827'. [ 385.519338][T11177] netlink: 'syz.3.1818': attribute type 41 has an invalid length. [ 385.792291][T11190] netlink: 'syz.2.1822': attribute type 10 has an invalid length. [ 385.802453][T11190] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1822'. [ 385.890821][T11190] device bond0 entered promiscuous mode [ 385.898045][T11190] device bond_slave_0 entered promiscuous mode [ 385.905158][T11190] device bond_slave_1 entered promiscuous mode [ 385.911866][T11190] device dummy0 entered promiscuous mode [ 386.089347][T11190] team0: Port device bond0 removed [ 386.154566][T11192] netlink: 'syz.1.1824': attribute type 11 has an invalid length. [ 386.977381][T11222] netlink: 'syz.2.1831': attribute type 3 has an invalid length. [ 387.131049][T11222] __nla_validate_parse: 1 callbacks suppressed [ 387.131158][T11222] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1831'. [ 387.699281][T11241] netlink: 'syz.1.1835': attribute type 29 has an invalid length. [ 388.677718][ T7122] wlan1: Trigger new scan to find an IBSS to join [ 388.981458][T11267] team0 (unregistering): Port device team_slave_0 removed [ 389.048187][T11267] team0 (unregistering): Port device team_slave_1 removed [ 389.081871][T11267] team0 (unregistering): Port device macvlan0 removed [ 389.144589][T11267] team0 (unregistering): Port device geneve1 removed [ 389.493060][T11295] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1850'. [ 389.533170][T11295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.680205][ T47] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 390.325481][T11318] validate_nla: 5 callbacks suppressed [ 390.325519][T11318] netlink: 'syz.0.1855': attribute type 6 has an invalid length. [ 392.324309][T11336] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1856'. [ 392.522676][T11343] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1861'. [ 392.625117][T11348] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1859'. [ 392.747865][T11348] team0: Port device team_slave_0 removed [ 392.760883][T11348] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 392.809538][T11355] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1863'. [ 393.033588][T11362] netlink: 'syz.1.1864': attribute type 2 has an invalid length. [ 393.065697][T11362] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1864'. [ 393.418026][T11383] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.1866'. [ 393.682139][T11391] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.1866'. [ 394.066359][T11412] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1874'. [ 394.265983][T11425] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 394.653119][T11438] netlink: 'syz.2.1878': attribute type 3 has an invalid length. [ 394.692149][T11438] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1878'. [ 397.066499][T11475] delete_channel: no stack [ 397.134391][T11475] delete_channel: no stack [ 399.854678][T11500] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 399.872546][T11500] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1893'. [ 400.106125][T11513] Dead loop on virtual device ip6_vti0, fix it urgently! [ 400.126844][T11513] netlink: 'syz.0.1897': attribute type 27 has an invalid length. [ 400.142319][T11513] netlink: 'syz.0.1897': attribute type 4 has an invalid length. [ 400.177666][T11513] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1897'. [ 400.375896][T11522] netlink: 'syz.1.1900': attribute type 2 has an invalid length. [ 400.403169][T11522] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1900'. [ 400.488601][T11525] device veth1_macvtap entered promiscuous mode [ 400.545947][ T7133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.606640][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1902'. [ 400.623444][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1902'. [ 400.648849][T11527] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1902'. [ 400.681754][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1902'. [ 400.727115][T11527] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1902'. [ 400.760110][T11527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1902'. [ 400.780777][T11527] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1902'. [ 401.359676][T11551] netlink: 'syz.5.1909': attribute type 10 has an invalid length. [ 401.583422][T11565] Dead loop on virtual device ip6_vti0, fix it urgently! [ 401.621477][T11565] netlink: 'syz.3.1912': attribute type 27 has an invalid length. [ 401.662502][T11565] netlink: 'syz.3.1912': attribute type 4 has an invalid length. [ 401.839735][T11570] netlink: 'syz.2.1916': attribute type 5 has an invalid length. [ 401.848697][T11567] netlink: 'syz.0.1915': attribute type 2 has an invalid length. [ 403.092704][T11595] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 403.199997][T11601] device veth1_macvtap entered promiscuous mode [ 403.246437][ T7121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 403.902670][T11621] netlink: 'syz.3.1929': attribute type 2 has an invalid length. [ 404.086120][T11624] Dead loop on virtual device ip6_vti0, fix it urgently! [ 404.258132][ T4290] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 404.258182][ T4290] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 405.324068][T11672] validate_nla: 3 callbacks suppressed [ 405.324100][T11672] netlink: 'syz.2.1944': attribute type 27 has an invalid length. [ 405.374129][T11672] netlink: 'syz.2.1944': attribute type 4 has an invalid length. [ 405.384578][T11672] __nla_validate_parse: 85 callbacks suppressed [ 405.384607][T11672] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1944'. [ 405.916178][T11692] netlink: 15007 bytes leftover after parsing attributes in process `syz.3.1950'. [ 405.967502][T11695] device veth1_macvtap entered promiscuous mode [ 406.011998][T11693] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.1951'. [ 406.051400][ T7136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.069561][T11700] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1956'. [ 406.251398][T11710] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1957'. [ 406.314814][T11710] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.1957'. [ 407.415940][T11723] netlink: 'syz.3.1961': attribute type 9 has an invalid length. [ 407.444055][T11723] netlink: 90128 bytes leftover after parsing attributes in process `syz.3.1961'. [ 407.988051][T11754] netlink: 'syz.1.1968': attribute type 21 has an invalid length. [ 408.363397][T11769] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1972'. [ 409.129388][T11806] netlink: 'syz.1.1979': attribute type 10 has an invalid length. [ 409.209770][T11806] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 409.688198][T11817] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.1983'. [ 409.824776][T11824] netlink: 'syz.0.1985': attribute type 22 has an invalid length. [ 409.832684][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1985'. [ 409.870735][T11827] netlink: 'syz.0.1985': attribute type 22 has an invalid length. [ 409.874631][T11826] netlink: 'syz.1.1984': attribute type 7 has an invalid length. [ 410.248126][T11840] netlink: 'syz.5.1986': attribute type 10 has an invalid length. [ 410.815131][T11841] __nla_validate_parse: 3 callbacks suppressed [ 410.815150][T11841] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.1986'. [ 412.077045][T11896] netlink: 'syz.3.1989': attribute type 2 has an invalid length. [ 412.113892][T11896] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1989'. [ 412.187368][T11904] netlink: 'syz.0.1991': attribute type 10 has an invalid length. [ 414.435567][T11927] tun0: tun_chr_ioctl cmd 1074812117 [ 414.630641][T11936] netlink: 'syz.2.2001': attribute type 10 has an invalid length. [ 414.661059][T11936] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2001'. [ 414.703761][T11938] netlink: 13992 bytes leftover after parsing attributes in process `syz.1.2000'. [ 415.217490][T11944] netlink: 'syz.0.2003': attribute type 3 has an invalid length. [ 415.262507][T11944] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2003'. [ 415.471526][T11950] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2005'. [ 416.062217][T11968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2010'. [ 416.161593][T11989] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.2012'. [ 416.373355][T11979] netlink: 'syz.1.2012': attribute type 10 has an invalid length. [ 416.504669][T11979] team0: Device wg1 is of different type [ 416.593102][T11994] netlink: 'syz.0.2014': attribute type 7 has an invalid length. [ 416.601111][T11994] netlink: 'syz.0.2014': attribute type 6 has an invalid length. [ 418.686063][T12030] netlink: 'syz.3.2024': attribute type 29 has an invalid length. [ 418.697858][T12028] netlink: 'syz.1.2023': attribute type 2 has an invalid length. [ 418.810472][T12030] netlink: 'syz.3.2024': attribute type 29 has an invalid length. [ 418.834691][T12037] netlink: 'syz.3.2024': attribute type 21 has an invalid length. [ 418.835323][T12035] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 418.939982][T12034] netlink: 'syz.3.2024': attribute type 29 has an invalid length. [ 419.530251][T12043] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2028'. [ 419.661045][T12053] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2032'. [ 419.698046][T12053] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2032'. [ 419.768413][T12055] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2032'. [ 419.838235][T12053] tap0: tun_chr_ioctl cmd 1074025677 [ 419.857515][T12053] tap0: linktype set to 776 [ 419.884378][T12064] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2035'. [ 420.098480][T12073] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 420.779683][T12097] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2043'. [ 420.969557][T12102] netlink: 'syz.1.2044': attribute type 21 has an invalid length. [ 421.021664][T12102] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2044'. [ 421.687316][T12139] netlink: 'syz.0.2052': attribute type 2 has an invalid length. [ 421.697787][T12139] netlink: 'syz.0.2052': attribute type 8 has an invalid length. [ 421.709154][T12139] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2052'. [ 421.945081][ T7121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 422.304844][T12153] netlink: 'syz.5.2055': attribute type 1 has an invalid length. [ 422.384273][T12153] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2055'. [ 422.561275][T12167] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2056'. [ 422.621824][T12160] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2058'. [ 422.810754][T12162] team0: Device wg1 is of different type [ 423.264538][T12184] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2063'. [ 423.282668][T12178] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.2061'. [ 423.575878][T12178] device netdevsim0 entered promiscuous mode [ 424.083516][T12223] validate_nla: 5 callbacks suppressed [ 424.083529][T12223] netlink: 'syz.2.2072': attribute type 21 has an invalid length. [ 424.115763][T12223] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2072'. [ 424.166802][T12223] netlink: 'syz.2.2072': attribute type 4 has an invalid length. [ 424.219958][T12223] netlink: 'syz.2.2072': attribute type 3 has an invalid length. [ 424.233264][T12223] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2072'. [ 424.264969][T12216] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2070'. [ 424.277690][T12229] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2073'. [ 424.479481][T12231] openvswitch: netlink: Flow key attr not present in new flow. [ 425.671037][T12262] sock: sock_timestamping_bind_phc: sock not bind to device [ 428.255781][T12278] __nla_validate_parse: 1 callbacks suppressed [ 428.255817][T12278] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2084'. [ 428.365350][T12276] netlink: 'syz.2.2086': attribute type 10 has an invalid length. [ 428.835017][T12276] team0: Device wg1 is of different type [ 429.061027][T12286] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.073678][T12286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.081137][T12286] IPv6: NLM_F_CREATE should be set when creating new route [ 429.088849][T12286] IPv6: NLM_F_CREATE should be set when creating new route [ 429.096547][T12286] IPv6: NLM_F_CREATE should be set when creating new route [ 429.149115][T12289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.334450][ T4290] Bluetooth: hci0: unexpected event 0x3c length: 151 > 7 [ 429.573071][T12314] netlink: 'syz.0.2093': attribute type 5 has an invalid length. [ 430.112073][T12330] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2097'. [ 432.302220][T12349] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2100'. [ 432.390589][T12351] netlink: 'syz.5.2101': attribute type 21 has an invalid length. [ 432.408681][T12351] netlink: 'syz.5.2101': attribute type 1 has an invalid length. [ 432.428347][T12351] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2101'. [ 432.974169][T12373] netlink: 'syz.2.2107': attribute type 49 has an invalid length. [ 433.542299][T12386] netlink: 'syz.1.2109': attribute type 7 has an invalid length. [ 433.629506][T12386] netlink: 'syz.1.2109': attribute type 7 has an invalid length. [ 433.641732][T12386] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.2109'. [ 433.938912][T12377] team0: Port device macvlan0 removed [ 434.006880][T12386] device netdevsim0 entered promiscuous mode [ 434.339606][T12420] netlink: 'syz.3.2116': attribute type 5 has an invalid length. [ 434.557549][T12425] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2118'. [ 435.215232][T12461] netlink: 'syz.5.2125': attribute type 21 has an invalid length. [ 435.225050][T12461] netlink: 14530 bytes leftover after parsing attributes in process `syz.5.2125'. [ 435.235727][T12459] -1: renamed from syzkaller0 [ 435.439301][T12472] netlink: 'syz.1.2128': attribute type 9 has an invalid length. [ 435.463228][T12472] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2128'. [ 435.617147][T12479] netlink: 'syz.5.2130': attribute type 10 has an invalid length. [ 435.688737][T12479] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2130'. [ 435.701841][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.709472][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.856936][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.864429][T12479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.871950][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.879159][T12479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.955593][T12479] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 435.976037][T12475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2129'. [ 437.127387][T12504] netlink: 'syz.0.2136': attribute type 10 has an invalid length. [ 437.334554][T12521] netlink: 'syz.2.2139': attribute type 15 has an invalid length. [ 437.350489][T12521] netlink: 'syz.2.2139': attribute type 7 has an invalid length. [ 437.435859][T12531] FAULT_INJECTION: forcing a failure. [ 437.435859][T12531] name failslab, interval 1, probability 0, space 0, times 0 [ 437.498375][T12531] CPU: 1 PID: 12531 Comm: syz.1.2142 Not tainted syzkaller #0 [ 437.505905][T12531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.516070][T12531] Call Trace: [ 437.519398][T12531] [ 437.522353][T12531] dump_stack_lvl+0x188/0x24e [ 437.527089][T12531] ? show_regs_print_info+0x12/0x12 [ 437.532372][T12531] ? load_image+0x410/0x410 [ 437.536896][T12531] ? __might_sleep+0xd0/0xd0 [ 437.541542][T12531] ? __lock_acquire+0x7c40/0x7c40 [ 437.546628][T12531] should_fail_ex+0x390/0x4c0 [ 437.551411][T12531] should_failslab+0x5/0x20 [ 437.555976][T12531] slab_pre_alloc_hook+0x59/0x300 [ 437.561064][T12531] ? tomoyo_encode+0x28a/0x550 [ 437.565896][T12531] __kmem_cache_alloc_node+0x4f/0x270 [ 437.571272][T12531] ? tomoyo_encode+0x28a/0x550 [ 437.576039][T12531] __kmalloc+0xa3/0x240 [ 437.580265][T12531] tomoyo_encode+0x28a/0x550 [ 437.584864][T12531] tomoyo_realpath_from_path+0x578/0x5c0 [ 437.590552][T12531] ? tomoyo_domain+0xd2/0x120 [ 437.595235][T12531] ? tomoyo_path_number_perm+0x205/0x650 [ 437.600869][T12531] tomoyo_path_number_perm+0x22f/0x650 [ 437.606366][T12531] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 437.611825][T12531] ? ksys_write+0x1ce/0x260 [ 437.616509][T12531] ? common_file_perm+0x171/0x1c0 [ 437.621603][T12531] ? __fget_files+0x28/0x460 [ 437.626233][T12531] security_file_ioctl+0x6c/0xa0 [ 437.631320][T12531] __se_sys_ioctl+0x48/0x170 [ 437.635922][T12531] do_syscall_64+0x4c/0xa0 [ 437.640343][T12531] ? clear_bhb_loop+0x60/0xb0 [ 437.645086][T12531] ? clear_bhb_loop+0x60/0xb0 [ 437.649768][T12531] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.655769][T12531] RIP: 0033:0x7f633579e159 [ 437.660194][T12531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.679807][T12531] RSP: 002b:00007f6336681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 437.688222][T12531] RAX: ffffffffffffffda RBX: 00007f6335a25fa0 RCX: 00007f633579e159 [ 437.696279][T12531] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 437.704254][T12531] RBP: 00007f6336681090 R08: 0000000000000000 R09: 0000000000000000 [ 437.712226][T12531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.720191][T12531] R13: 00007f6335a26038 R14: 00007f6335a25fa0 R15: 00007ffda987dc68 [ 437.728171][T12531] [ 437.743013][T12531] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.760247][T12531] device veth1_macvtap entered promiscuous mode [ 437.768361][ T7121] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.118193][T12548] netlink: 'syz.0.2147': attribute type 3 has an invalid length. [ 438.153238][T12548] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2147'. [ 438.807053][T12569] FAULT_INJECTION: forcing a failure. [ 438.807053][T12569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.825233][T12569] CPU: 1 PID: 12569 Comm: syz.0.2155 Not tainted syzkaller #0 [ 438.832761][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.842849][T12569] Call Trace: [ 438.846156][T12569] [ 438.849110][T12569] dump_stack_lvl+0x188/0x24e [ 438.853825][T12569] ? show_regs_print_info+0x12/0x12 [ 438.859054][T12569] ? load_image+0x410/0x410 [ 438.863592][T12569] ? __lock_acquire+0x7c40/0x7c40 [ 438.868799][T12569] ? unix_ioctl+0x255/0x6a0 [ 438.873445][T12569] should_fail_ex+0x390/0x4c0 [ 438.878160][T12569] _copy_from_user+0x2c/0x170 [ 438.882941][T12569] sock_do_ioctl+0x18c/0x320 [ 438.887634][T12569] ? sock_show_fdinfo+0xb0/0xb0 [ 438.893434][T12569] sock_ioctl+0x48a/0x700 [ 438.897819][T12569] ? sock_poll+0x420/0x420 [ 438.902309][T12569] ? bpf_lsm_file_ioctl+0x5/0x10 [ 438.907494][T12569] ? security_file_ioctl+0x7c/0xa0 [ 438.912640][T12569] ? sock_poll+0x420/0x420 [ 438.917093][T12569] __se_sys_ioctl+0xfa/0x170 [ 438.921810][T12569] do_syscall_64+0x4c/0xa0 [ 438.926258][T12569] ? clear_bhb_loop+0x60/0xb0 [ 438.930958][T12569] ? clear_bhb_loop+0x60/0xb0 [ 438.935675][T12569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.941603][T12569] RIP: 0033:0x7f7b2b19e159 [ 438.946043][T12569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.965684][T12569] RSP: 002b:00007f7b2bfa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.974129][T12569] RAX: ffffffffffffffda RBX: 00007f7b2b425fa0 RCX: 00007f7b2b19e159 [ 438.982126][T12569] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 438.990143][T12569] RBP: 00007f7b2bfa2090 R08: 0000000000000000 R09: 0000000000000000 [ 438.998143][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.006142][T12569] R13: 00007f7b2b426038 R14: 00007f7b2b425fa0 R15: 00007ffc51ef7298 [ 439.014196][T12569] [ 439.865591][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.873592][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.921468][T12602] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2161'. [ 440.012163][T12604] netlink: 'syz.3.2162': attribute type 3 has an invalid length. [ 440.094039][T12604] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2162'. [ 441.008052][T12627] FAULT_INJECTION: forcing a failure. [ 441.008052][T12627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.033505][T12627] CPU: 0 PID: 12627 Comm: syz.3.2168 Not tainted syzkaller #0 [ 441.041037][T12627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.051125][T12627] Call Trace: [ 441.054424][T12627] [ 441.057417][T12627] dump_stack_lvl+0x188/0x24e [ 441.062124][T12627] ? show_regs_print_info+0x12/0x12 [ 441.067411][T12627] ? load_image+0x410/0x410 [ 441.072033][T12627] ? __lock_acquire+0x7c40/0x7c40 [ 441.077094][T12627] ? snprintf+0xe5/0x140 [ 441.081395][T12627] should_fail_ex+0x390/0x4c0 [ 441.086115][T12627] _copy_to_user+0x2c/0x130 [ 441.090732][T12627] simple_read_from_buffer+0xe3/0x150 [ 441.096333][T12627] proc_fail_nth_read+0x1a6/0x220 [ 441.101406][T12627] ? proc_fault_inject_write+0x310/0x310 [ 441.107140][T12627] ? fsnotify_perm+0x248/0x550 [ 441.111905][T12627] ? proc_fault_inject_write+0x310/0x310 [ 441.117542][T12627] vfs_read+0x2db/0x960 [ 441.121708][T12627] ? kernel_read+0x1e0/0x1e0 [ 441.126312][T12627] ? __fget_files+0x28/0x460 [ 441.131653][T12627] ? __fget_files+0x3fc/0x460 [ 441.136357][T12627] ? __fdget_pos+0x2ae/0x360 [ 441.140951][T12627] ? ksys_read+0x70/0x260 [ 441.145293][T12627] ksys_read+0x14d/0x260 [ 441.149543][T12627] ? vfs_write+0x9a0/0x9a0 [ 441.153966][T12627] ? lockdep_hardirqs_on+0x94/0x140 [ 441.159172][T12627] do_syscall_64+0x4c/0xa0 [ 441.163591][T12627] ? clear_bhb_loop+0x60/0xb0 [ 441.168277][T12627] ? clear_bhb_loop+0x60/0xb0 [ 441.172992][T12627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.178914][T12627] RIP: 0033:0x7f736675e98e [ 441.183786][T12627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 441.203510][T12627] RSP: 002b:00007f7367713fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.211925][T12627] RAX: ffffffffffffffda RBX: 00007f73677146c0 RCX: 00007f736675e98e [ 441.219894][T12627] RDX: 000000000000000f RSI: 00007f73677140a0 RDI: 0000000000000005 [ 441.227867][T12627] RBP: 00007f7367714090 R08: 0000000000000000 R09: 0000000000000000 [ 441.235842][T12627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.243811][T12627] R13: 00007f7366a26038 R14: 00007f7366a25fa0 R15: 00007ffd81112cf8 [ 441.251797][T12627] [ 443.028101][T12677] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2182'. [ 443.318022][T12677] team0: Port device team_slave_0 removed [ 444.069652][T12701] netlink: 'syz.1.2189': attribute type 19 has an invalid length. [ 444.102184][T12701] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2189'. [ 444.394333][T12712] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2190'. [ 444.438305][T12712] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2190'. [ 444.480250][T12713] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2190'. [ 444.652027][T12723] netlink: 'syz.0.2196': attribute type 10 has an invalid length. [ 445.300229][T12748] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2201'. [ 446.267542][T12766] netlink: 'syz.0.2207': attribute type 21 has an invalid length. [ 446.293110][T12766] netlink: 'syz.0.2207': attribute type 1 has an invalid length. [ 446.300886][T12766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2207'. [ 446.938806][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2213'. [ 447.261934][T12796] netlink: 'syz.1.2214': attribute type 3 has an invalid length. [ 447.288314][T12796] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2214'. [ 449.157281][T12832] netlink: 'syz.5.2222': attribute type 10 has an invalid length. [ 449.278625][T12837] netlink: 87536 bytes leftover after parsing attributes in process `syz.3.2224'. [ 449.324879][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.332318][T12832] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.574470][T12832] bond0: (slave bridge0): Releasing backup interface [ 449.619009][T12832] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.626520][T12832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.635961][T12832] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.643345][T12832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.644296][T12842] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2226'. [ 449.869306][T12832] team0: Port device bridge0 added [ 449.914518][T12840] netlink: 'syz.3.2224': attribute type 10 has an invalid length. [ 450.070238][T12840] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 450.162161][T12844] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2227'. [ 452.776571][T12899] device sit0 entered promiscuous mode [ 453.125910][T12911] netlink: 'syz.1.2251': attribute type 10 has an invalid length. [ 453.194593][T12910] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2241'. [ 453.685060][T12919] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2245'. [ 453.702520][T12926] netlink: 'syz.1.2247': attribute type 11 has an invalid length. [ 453.739072][T12919] sctp: [Deprecated]: syz.3.2245 (pid 12919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.739072][T12919] Use struct sctp_sack_info instead [ 453.762305][T12926] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2247'. [ 453.957573][T12923] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.964859][T12923] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.303037][ T4282] Bluetooth: hci4: command 0x0406 tx timeout [ 460.442996][T12963] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2255'. [ 460.575434][T12965] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2257'. [ 460.697961][T12975] netlink: 'syz.0.2258': attribute type 13 has an invalid length. [ 460.727241][T12975] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2258'. [ 460.776183][T12973] device sit0 entered promiscuous mode [ 461.703257][T12981] : port 1(ip6gretap0) entered blocking state [ 461.709591][T12981] : port 1(ip6gretap0) entered disabled state [ 461.751148][T12981] device ip6gretap0 entered promiscuous mode [ 461.799512][T12982] device ip6gretap0 left promiscuous mode [ 461.823577][T12982] : port 1(ip6gretap0) entered disabled state [ 462.422429][T13005] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2269'. [ 462.476903][T13005] netlink: zone id is out of range [ 462.482111][T13005] netlink: zone id is out of range [ 462.570764][T13005] netlink: zone id is out of range [ 462.631017][T13005] netlink: del zone limit has 4 unknown bytes [ 463.911594][T13027] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2274'. [ 463.929555][T13028] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2275'. [ 463.952119][T13032] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2274'. [ 465.231772][T13062] netlink: 'syz.2.2281': attribute type 10 has an invalid length. [ 465.276243][T13062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.134406][T13062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.197588][T13062] device batadv_slave_0 entered promiscuous mode [ 466.259140][T13062] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 466.265462][T13081] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2285'. [ 466.605690][T13090] netlink: 'syz.1.2290': attribute type 7 has an invalid length. [ 466.638499][T13090] netlink: 'syz.1.2290': attribute type 6 has an invalid length. [ 466.778223][T13100] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 466.823138][T13100] syzkaller1: linktype set to 825 [ 467.110132][T13112] netlink: 'syz.5.2294': attribute type 2 has an invalid length. [ 467.764160][T13112] device 1 entered promiscuous mode [ 468.023291][ T28] INFO: task syz.4.1460:9713 blocked for more than 143 seconds. [ 468.031039][ T28] Not tainted syzkaller #0 [ 468.041020][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 468.075374][ T28] task:syz.4.1460 state:D stack:26192 pid:9713 ppid:9043 flags:0x00004002 [ 468.110855][ T28] Call Trace: [ 468.115503][ T28] [ 468.118471][ T28] __schedule+0x107f/0x4030 [ 468.138523][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 468.152671][ T28] ? release_firmware_map_entry+0x187/0x187 [ 468.176184][ T28] ? task_work_cancel+0xa1/0x220 [ 468.199043][ T28] ? task_work_cancel_func+0x210/0x210 [ 468.216346][ T28] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 468.230741][ T28] schedule+0xb9/0x180 [ 468.247494][ T28] ? _free_event+0x10d/0x1050 [ 468.261242][ T28] _free_event+0x176/0x1050 [ 468.276109][ T28] perf_event_release_kernel+0x7c4/0x850 [ 468.289895][ T28] ? __might_sleep+0xd0/0xd0 [ 468.299996][ T28] ? calc_timer_values+0x410/0x410 [ 468.316987][ T28] ? __might_sleep+0xd0/0xd0 [ 468.328249][ T28] ? perf_mmap+0x1470/0x1470 [ 468.338706][ T28] perf_release+0x37/0x40 [ 468.350441][ T28] __fput+0x20a/0x8b0 [ 468.379200][ T28] task_work_run+0x1d0/0x260 [ 468.399068][ T28] ? task_work_cancel+0x220/0x220 [ 468.406186][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 468.411580][ T28] do_exit+0x9d5/0x2570 [ 468.419999][ T28] ? put_task_struct+0x80/0x80 [ 468.428206][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 468.438576][ T28] ? _raw_spin_lock_irq+0x86/0xf0 [ 468.446500][ T28] ? lock_chain_count+0x20/0x20 [ 468.451751][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 468.460831][ T28] do_group_exit+0x229/0x2e0 [ 468.468554][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 468.479887][ T28] get_signal+0x1259/0x1340 [ 468.490705][ T28] arch_do_signal_or_restart+0xc4/0x1310 [ 468.500858][ T28] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 468.511166][ T28] ? do_futex+0x310/0x320 [ 468.519635][ T28] ? get_sigframe_size+0x10/0x10 [ 468.527594][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 468.537542][ T28] exit_to_user_mode_loop+0x70/0x110 [ 468.545696][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 468.551630][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 468.561120][ T28] do_syscall_64+0x58/0xa0 [ 468.568598][ T28] ? clear_bhb_loop+0x60/0xb0 [ 468.577461][ T28] ? clear_bhb_loop+0x60/0xb0 [ 468.582279][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 468.597699][ T28] RIP: 0033:0x7f14f7f9e159 [ 468.606593][ T28] RSP: 002b:00007f14f8e7c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 468.619272][ T28] RAX: fffffffffffffe00 RBX: 00007f14f8226098 RCX: 00007f14f7f9e159 [ 468.630269][ T28] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f14f8226098 [ 468.642398][ T28] RBP: 00007f14f8226090 R08: 0000000000000000 R09: 0000000000000000 [ 468.657041][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.673266][ T28] R13: 00007f14f8226128 R14: 00007ffd646f8ca0 R15: 00007ffd646f8d88 [ 468.689347][ T28] [ 468.695155][ T28] [ 468.695155][ T28] Showing all locks held in the system: [ 468.710289][ T28] 1 lock held by rcu_tasks_kthre/12: [ 468.717571][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 468.734562][ T28] 1 lock held by rcu_tasks_trace/13: [ 468.740198][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 468.758529][ T28] 1 lock held by khungtaskd/28: [ 468.764253][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 468.781171][ T28] 2 locks held by getty/4030: [ 468.786448][ T28] #0: ffff88814c9e9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 468.802704][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 468.830300][ T28] 3 locks held by kworker/1:7/4320: [ 468.842175][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.859016][ T28] #1: ffffc90004517d00 (set_printk_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.869609][ T28] #2: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: trace_set_clr_event+0xbe/0x130 [ 468.880087][ T28] 3 locks held by kworker/u4:6/4351: [ 468.885502][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.900313][ T28] #1: ffffc900045b7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.911009][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 468.920259][ T28] 2 locks held by kworker/u4:11/7121: [ 468.926418][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.937748][ T28] #1: ffffc9000420fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.948925][ T28] 2 locks held by kworker/u4:20/11413: [ 468.954469][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.965583][ T28] #1: ffffc9000624fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.976711][ T28] 2 locks held by kworker/u4:21/11414: [ 468.982206][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 468.993552][ T28] #1: ffffc9000625fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 469.004728][ T28] 1 lock held by syz.2.2273/13030: [ 469.009980][ T28] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 469.021847][ T28] 1 lock held by syz.0.2289/13084: [ 469.027027][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 469.036372][ T28] 2 locks held by syz.1.2293/13102: [ 469.041584][ T28] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 469.051343][ T28] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 469.062440][ T28] 1 lock held by syz.5.2294/13109: [ 469.067607][ T28] #0: ffff8880491ae210 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 469.077912][ T28] 2 locks held by syz.5.2294/13110: [ 469.083156][ T28] #0: ffffffff8dd575c8 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 469.094684][ T28] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 469.105670][ T28] 1 lock held by syz.3.2296/13120: [ 469.110782][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 469.120252][ T28] 1 lock held by syz.3.2296/13122: [ 469.125429][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0 [ 469.138807][ T28] [ 469.168741][ T28] ============================================= [ 469.168741][ T28] [ 469.188123][ T28] NMI backtrace for cpu 1 [ 469.192509][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 469.199726][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.209803][ T28] Call Trace: [ 469.213098][ T28] [ 469.216047][ T28] dump_stack_lvl+0x188/0x24e [ 469.220751][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 469.226145][ T28] ? show_regs_print_info+0x12/0x12 [ 469.231370][ T28] ? load_image+0x410/0x410 [ 469.235902][ T28] ? vprintk_emit+0x59f/0x6a0 [ 469.240635][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 469.245763][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 469.250722][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 469.256887][ T28] ? _printk+0xda/0x130 [ 469.261053][ T28] ? load_image+0x410/0x410 [ 469.265558][ T28] ? load_image+0x410/0x410 [ 469.270058][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 469.276116][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 469.282260][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 469.288238][ T28] watchdog+0xf0e/0xf50 [ 469.292441][ T28] ? watchdog+0x1ed/0xf50 [ 469.296769][ T28] kthread+0x29d/0x330 [ 469.300826][ T28] ? hungtask_pm_notify+0x40/0x40 [ 469.305847][ T28] ? kthread_blkcg+0xd0/0xd0 [ 469.310438][ T28] ret_from_fork+0x1f/0x30 [ 469.314931][ T28] [ 469.318589][ T28] Sending NMI from CPU 1 to CPUs 0: [ 469.323855][ C0] NMI backtrace for cpu 0 [ 469.323864][ C0] CPU: 0 PID: 4350 Comm: kworker/0:7 Not tainted syzkaller #0 [ 469.323885][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.323893][ C0] Workqueue: events free_obj_work [ 469.323988][ C0] RIP: 0010:stack_trace_consume_entry+0xeb/0x270 [ 469.324010][ C0] Code: 4c 89 ff 48 8b 74 24 08 48 8b 1f 45 8d 79 01 0f b6 44 15 00 84 c0 0f 85 35 01 00 00 45 89 38 4e 8d 3c cb 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 1a 4c 89 ff 48 89 f3 49 89 d4 4c 89 c5 e8 1e 9d 62 [ 469.324022][ C0] RSP: 0018:ffffc90004597678 EFLAGS: 00000a02 [ 469.324033][ C0] RAX: 1ffff920008b2f02 RBX: ffffc90004597800 RCX: 0000000080000000 [ 469.324044][ C0] RDX: dffffc0000000000 RSI: ffffffff81d35236 RDI: ffffc90004597780 [ 469.324055][ C0] RBP: 1ffff920008b2ef2 R08: ffffc90004597790 R09: 0000000000000002 [ 469.324064][ C0] R10: dffffc0000000000 R11: fffff520008b2ee5 R12: 0000000000000000 [ 469.324074][ C0] R13: 1ffff920008b2ef1 R14: ffffc90004597788 R15: ffffc90004597810 [ 469.324084][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 469.324097][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 469.324106][ C0] CR2: 00007f63359ef2f8 CR3: 000000000c88e000 CR4: 00000000003506f0 [ 469.324119][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 469.324128][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 469.324137][ C0] Call Trace: [ 469.324141][ C0] [ 469.324146][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 469.324170][ C0] ? stack_trace_save+0xf0/0xf0 [ 469.324187][ C0] arch_stack_walk+0x100/0x140 [ 469.324216][ C0] ? ____kasan_slab_free+0x126/0x1f0 [ 469.324237][ C0] stack_trace_save+0xa6/0xf0 [ 469.324254][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 469.324272][ C0] ? look_up_lock_class+0x75/0x140 [ 469.324293][ C0] kasan_set_track+0x4b/0x70 [ 469.324310][ C0] ? kasan_set_track+0x4b/0x70 [ 469.324327][ C0] ? kasan_save_free_info+0x27/0x40 [ 469.324361][ C0] ? kmem_cache_free+0xf7/0x2a0 [ 469.324376][ C0] kasan_save_free_info+0x27/0x40 [ 469.324388][ C0] ____kasan_slab_free+0x126/0x1f0 [ 469.324408][ C0] slab_free_freelist_hook+0x133/0x1b0 [ 469.324427][ C0] ? free_obj_work+0x430/0x5a0 [ 469.324440][ C0] kmem_cache_free+0xf7/0x2a0 [ 469.324457][ C0] free_obj_work+0x430/0x5a0 [ 469.324473][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 469.324493][ C0] ? __free_object+0xa60/0xa60 [ 469.324507][ C0] ? read_lock_is_recursive+0x10/0x10 [ 469.324525][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 469.324547][ C0] ? _raw_spin_unlock+0x40/0x40 [ 469.324566][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 469.324585][ C0] ? process_one_work+0x7b4/0x1160 [ 469.324603][ C0] process_one_work+0x8ab/0x1160 [ 469.324624][ C0] ? worker_detach_from_pool+0x240/0x240 [ 469.324640][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 469.324660][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 469.324678][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 469.324699][ C0] ? wq_worker_running+0x97/0x190 [ 469.324713][ C0] worker_thread+0xaf5/0x12a0 [ 469.324734][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 469.324758][ C0] kthread+0x29d/0x330 [ 469.324770][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 469.324785][ C0] ? kthread_blkcg+0xd0/0xd0 [ 469.324798][ C0] ret_from_fork+0x1f/0x30 [ 469.324822][ C0] [ 469.674353][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 469.681270][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 469.688480][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.698548][ T28] Call Trace: [ 469.701920][ T28] [ 469.704862][ T28] dump_stack_lvl+0x188/0x24e [ 469.709557][ T28] ? memcpy+0x3c/0x60 [ 469.713644][ T28] ? show_regs_print_info+0x12/0x12 [ 469.718857][ T28] ? load_image+0x410/0x410 [ 469.723385][ T28] panic+0x2d3/0x710 [ 469.727292][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 469.732936][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 469.737451][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 469.743127][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 469.749289][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 469.755452][ T28] watchdog+0xf4d/0xf50 [ 469.759623][ T28] ? watchdog+0x1ed/0xf50 [ 469.763972][ T28] kthread+0x29d/0x330 [ 469.768049][ T28] ? hungtask_pm_notify+0x40/0x40 [ 469.773079][ T28] ? kthread_blkcg+0xd0/0xd0 [ 469.777685][ T28] ret_from_fork+0x1f/0x30 [ 469.782124][ T28] [ 469.785284][ T28] Kernel Offset: disabled [ 469.789603][ T28] Rebooting in 86400 seconds..