last executing test programs: 3m15.305216832s ago: executing program 0 (id=1558): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000090002000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3m14.943034175s ago: executing program 0 (id=1562): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) socket$kcm(0x10, 0x400000002, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2000000, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="ed", 0x1}], 0x1}, 0xe0) (async) close(r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r6, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, r6}, 0x4) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) socket$kcm(0xa, 0x2, 0x73) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000440)=r10) 3m14.678621747s ago: executing program 0 (id=1565): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000000f40)=ANY=[@ANYRES8], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e81556a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6eaa0c261210ef0a007a290457f0189b3050000002d4462d72f886bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc92954b43370e97039264bc7bb6", 0xd8}], 0x1}, 0x0) 3m12.655216735s ago: executing program 0 (id=1568): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0x1, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="140000000400000004000000010000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000ba00000000004b1000"/23], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0xdc, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{}, &(0x7f00000007c0), &(0x7f0000000800)='%-010d \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x7}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x8, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x30, 0x0, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x74, 0x9, 0x5, 0x2, 0x0, 0xffffffff, 0x1000, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x10a000, 0x8, 0x5b5, 0x5, 0x5, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x6}, r4, 0x10, r4, 0x1) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000058"], 0xfe33) 3m12.528419106s ago: executing program 0 (id=1570): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000200000000000000020000040800000000000a0002000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 3m12.318078888s ago: executing program 0 (id=1574): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa06a6, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000001340), 0x888102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x20000401}}, 0x10, 0x0}, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/12], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_pid(r8, &(0x7f0000000300)=r7, 0x12) 2m57.10392836s ago: executing program 32 (id=1574): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa06a6, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000001340), 0x888102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x2a609, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0x7fffffff}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x0, {0x20000401}}, 0x10, 0x0}, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/12], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$cgroup_procs(r5, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_pid(r8, &(0x7f0000000300)=r7, 0x12) 10.699070184s ago: executing program 1 (id=2559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x7, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0x3}, @enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x8000000}, {0x5, 0x2}, {0xe, 0x800}, {0xf, 0x9}, {0x1, 0x5}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x2e]}}, &(0x7f00000006c0)=""/231, 0x63, 0xe7, 0x0, 0x3}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7fffffff, '\x00', 0x0, r2, 0x2, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x9d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6, 0x0}, 0x8) socket$kcm(0x29, 0x1, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r4, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x9, '\x00', r3, r5, 0x5, 0x4, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r6}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x7, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0x3}, @enum={0xa, 0x5, 0x0, 0x6, 0x4, [{0xe, 0x8000000}, {0x5, 0x2}, {0xe, 0x800}, {0xf, 0x9}, {0x1, 0x5}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x0, 0x2e]}}, &(0x7f00000006c0)=""/231, 0x63, 0xe7, 0x0, 0x3}, 0x28) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7fffffff, '\x00', 0x0, r2, 0x2, 0x2}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000340)}, 0x9d) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x6}, 0x8) (async) socket$kcm(0x29, 0x1, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r4, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x7, 0x0, r1, 0x9, '\x00', r3, r5, 0x5, 0x4, 0x3}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)=r6}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r6}, 0x20) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4ff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) 10.508863617s ago: executing program 1 (id=2561): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0x10000a, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0x10000a, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xf, 0x3, 0x2) close(r0) 10.202478221s ago: executing program 1 (id=2562): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000001000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 9.909839734s ago: executing program 1 (id=2564): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0xf9b1f16659373b60, 0x0, 0x2, 0xc, 0x0, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x98, 0x2}, 0x8002, 0x6, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000001280), 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x5, 0x1, 0x1, 0x7, 0xa, 0xffffffffffffffff, 0xfffffffffffffffc}, @ldst={0x0, 0x2, 0x1, 0x6, 0x1, 0x1, 0x4}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) sendmsg$inet(r3, &(0x7f0000004040)={&(0x7f00000011c0)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000003f40)=[@ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x0, 0xc, "4f40b513f9efab789012"}, @timestamp_addr={0x44, 0xc, 0x74, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x4}]}, @end]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x1e, 0x0, 0xe, [0x7]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x93, [@private=0xa010102, @broadcast]}, @cipso={0x86, 0x6, 0xffffffffffffffff}, @timestamp_prespec={0x44, 0x4, 0xeb, 0x3, 0x1}]}}}], 0x98}, 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x2003) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x3c, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, r4, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000000000001d44000000000000db0a00fe000000007303000000000000b5200000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.837173768s ago: executing program 1 (id=2572): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x98, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8993, &(0x7f0000000200)={'bond0\x00', @local}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n\x00\x00\x00( \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="86beed1a6155c29adeedadb97c7afccea5a05e0183c04d1511c759a2a255b255ec7ad5a43e27ed90774c4ea988631b5df1ac5a9c9c8c7422149cb77b9d37616fc4fa9ac842131fc9ce1d2837f29296bb1819e188ab5a2a0fb49549cbdef2fc79f025f0488030d440447e33d27ec5fe0c35332cb2b8bb55189ec6ad8af1c1bae00ba10bf90193f85098e1a8f2e30e6da3b1b48684689ea609830d3e1f5e2e2cd115a2cfb45723ad2cfef19502c08f06ac059b0534b860c30345bcd32bd28ba27276a405d39159c9ecffbb8cdc4821eb710ae4", @ANYRES64=0x0], 0x20) syz_clone(0x40000200, &(0x7f0000001240)="debbc77c8009a6286cd47c16f5b5b7e02b7902552abeacdd5e15611d14c77b5c0154e546b8b5ee20cab0853a6d780a40ed31b669b155ca3e489cd4dded4272fd8261f770d6a89919b5a90fd26f07fded52a73b196c112f05253070e00c4ae7fc5ad83c414f7d58b391b5f8f70f7d40508f63742abeea7aab014c3fc8879453", 0x7f, 0x0, &(0x7f0000001300), &(0x7f00000008c0)="feffffffffffffff91d495e2bc35a45fe3ad050eed43677f753807e2a1d7f8a759c6ea13b11512ec5caede8452a185f4acac33ddb64910c7590ae4cf0bbb46e4a15432f8eff0bc312bac96ae0f7445ca0f08fb2b8c750ceac8f90620d21fad6587297325eaec7391587ffd1e28e54fa5f9e07bc72573a53a061495921e1c23ce69b8616f7342c05c9bed373fc069a54df01f4bbbb6a0c104bbf7f4ad480781bc38168a0c247708085061804c5326e7d028aa7077ab6830e78a7e8b702c6b7517f909dfc7e597fe8f6b631d1acc25fc285bd32dc5e84d39572eb8383a245aa6ed27c30b473b3b5f240b5a93faed0928e4c67da4d1ccb36beb017b80ca477e10330bda15edc121bc85238b0c") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r9, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) close(0xffffffffffffffff) 6.532001308s ago: executing program 4 (id=2589): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x7, 0x0, 0xe7f, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x4004743c, 0xf0ff1f00000000) 5.359025562s ago: executing program 4 (id=2592): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34a, 0xe633}, 0x0, 0x40080000001, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ffffdfe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000fe000000000000000000722c00000100000000950000001e000000"], &(0x7f0000000e00)='syzkaller\x00', 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) socket$kcm(0x29, 0x2, 0x0) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34a, 0xe633}, 0x0, 0x40080000001, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ffffdfe}, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000fe000000000000000000722c00000100000000950000001e000000"], &(0x7f0000000e00)='syzkaller\x00', 0x1}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (async) 5.204000654s ago: executing program 3 (id=2594): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000004000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 4.975790727s ago: executing program 4 (id=2595): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000036a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 4.899216668s ago: executing program 2 (id=2596): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, &(0x7f0000000000), 0x10) syz_clone(0x4000800, &(0x7f0000000140)="f13f9f64d886fbf110e731dee97e8f59ead623b66b3054043d636ee3fc21b328", 0x20, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)={@cgroup=r4, r4, 0x2f, 0x4, 0x4, @void, @value=r4}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x36, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r0, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@ifindex=r6, r2, 0x22, 0x8, r4, @void, @value=r1, @void, @void, r5}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r9, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) close(r9) mkdir(0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 4.881858678s ago: executing program 3 (id=2597): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe9a, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x8008, 0x10000, 0x9e7, 0x5, 0x8, 0x1020005, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0x2405, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000001200)={'wlan1\x00', @random="f7280200e78d"}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000200000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000000000000000000000000000010b8000000000000000000a98b8a5d477a480b3d9e0794178f00699d4d1dc524e0de80b924f50bba0d9ebf1ec490598b7e29e7c6cc98952c59d8df8620c5e203283011925fa049621ef1aae2da0bc91e6e"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/221}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000000100010000000000ff010000bf9100000000000037020000010000008500000084000000b7000000000000009500000000000000f981fe4f603aaf26cf11e64ce660edd09e856aafa4c79989384ef48930074332fb1d7123056297af7bcc2a639520a8afb8e4dc887a49cf3797625dd15a9baba998ad577b52641871"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[], 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f0000000180)) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) socket$kcm(0x10, 0x2, 0x4) 4.092982498s ago: executing program 4 (id=2598): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f0000000000)="e0b42d403321fa07de38013072be09e45f64216329f2b1cd0d7f4e423b26854a6dc5df25de89594ef2f901", &(0x7f0000000040)=""/166, &(0x7f0000000100)="f7374a7578f5bb6b558690f3a0cfa35f4bf67847449a94e0ae090000b676a314a66f3c921f4e12c19d0029d1fd7b83bdf6fc8bb0226d488c39561940eaf4f70ac905300e5002b2787f36c6115df79f23b2059e6e2c720d108a0252493513be5a908475f4d20b46a175ddffe7c19620617ca782bca9d1a32791bb88879c9cd215fecfce1aed3ec9aeb57d51", &(0x7f00000001c0)="e74a90e08c6105984ab9eb181c54aaf29cb02c5d86f8fe24afe4230a27ab28e84736aeb584f4c4a571649d31f19f36f23a9300fc1cfe739feacc08332680df1134e1ca795f5c3e31d0be42b720a75f9e02d05882664316861c0ac90a710d2e5fc40505a896cbc9f1344085bf5dcdd59d5afc2b27ad38f65b2114785a71664844061693a799768e63810406c830ccb5b13d463521821794ba581b8b10c17e6c97f1836996d8f2c03974a3476121d6f8867ca7", 0x2, r0}, 0x38) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x1249, 0x18}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f0000000380)="c63a4868954179edcfc4457e3759fcb35f134ac44c8719ebfa0e43c4", &(0x7f00000003c0)=""/142, &(0x7f0000000480)="df1ce88cd3a6085fd578b903ad01260b585ca2dbfc49594512043de7fdd7a903a07c1e91fcbf13c02e779c3b83714961bb3417bd56e882373dea1c3df4ef5b4b6a47b32d60d5ae725a7403f97d7ba614ddba03e22c3baae1563fccb6100a35f7b0e82e210b6248c9b94d5bab4b888ec9f092d9681aa9a45e6a519ee0267293f560753ca737f81cf5c9fca216ac07d9ca53b3ccae411c42642b7b39835a2bc3390e9fa902cff0d05f588f0fc919ad8d1ad918e191f2747555a4129b98911cbc83808851f656a4cdc0caa38d47f3f1899d475c42f3428687ab6382afce39ebdeb806796d19f71096013d89d07b8f88", &(0x7f0000000580)="180cf48d70661609df12180806b360cac068612d88278c2e92d74c768e410bec5a9fa582cf31b98242c0463d031a66f64d53ada50279689515b7b667339dba61981c4244025e81eca085acc686c39297cef3714edb5e760a4831bdb3d2ef420c016815aa07586b1c2c172a8b38042db07a8d19e0fb09c4cf95087b6b8e5c4dd963cf78b1ecefaacf5298159764a5e374e22f899478309d5c8e018203319a3f1e48bc7355ed7d10ba6e6e06b4ddf8790146ed60ae3d3841d8ca66068c8d5243191fd38acd49502c9e895fcd0cd1ce3579771ab1ea75dab96b2a2e", 0x4, r1, 0x4}, 0x38) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000700)=r0, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000940)={r1, &(0x7f0000000740)="8157b8796e8b55532aaff27eabc3382da419c832cd61b2ebcac3611a4c68067a94d8af180373d7470850aa5b195e82ab156163d572834d2cf931c70d7da54fb9d22d6ee623f6da962f13c7a30024f9825f26990e57e3550c5d48e9a23b9621bfd5edc1cf5ef58d3bbbb2672de3d530c52bb1445d8a53568a623a411cc90c7c06521491fdcaf7f4cc37c5ac1d226b8e1b86e0c660188ba0857216b06e8779ccf6725f7c0586d2761c49045fd885bd68eb825af2d6330528199b591f8f80a4807711c285032b4841dfed16120a7afa35ab569a9abe", &(0x7f0000000840)=""/224, 0x4}, 0x20) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000bc0)={r0, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x8, [@struct={0x10, 0x9, 0x0, 0x4, 0x1, 0xfffff1d0, [{0x7, 0x4, 0x5}, {0xc, 0x5}, {0x5, 0x0, 0x3}, {0x5, 0x1, 0xfffffff9}, {0xf, 0x3, 0x6}, {0x6, 0x4, 0x80000000}, {0x0, 0x5, 0x8}, {0x5, 0x4, 0xdaac}, {0xc, 0x3, 0x4}]}]}, {0x0, [0x30, 0x30, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000cc0)=""/7, 0x98, 0x7, 0x1, 0xe33}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{r1, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%pI4 \x00'}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, r0, 0x0, 0x5, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xe, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}]}, &(0x7f0000000a80)='syzkaller\x00', 0x3, 0x61, &(0x7f0000000ac0)=""/97, 0xcec2ad49420f7cef, 0x1, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000d40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x4, 0xc, 0xe82, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f00)=[r1, r0, r6, r0, r1, r7, r1, r1], &(0x7f0000000f40)=[{0x4, 0x5, 0x2, 0x8}, {0x2, 0x2, 0x7, 0xf}, {0x2, 0x1, 0xb, 0x3}, {0x0, 0x1, 0x8, 0xb}], 0x10, 0xfffff6cf}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@cgroup=r2, 0x24, 0x0, 0x80000000, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001180)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) r11 = openat$cgroup_ro(r8, &(0x7f0000001200)='blkio.bfq.idle_time\x00', 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000001240)={[{0x2d, 'cpu'}, {0x2b, 'hugetlb'}]}, 0xe) r12 = openat$cgroup_devices(r11, &(0x7f00000012c0)='devices.allow\x00', 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x0, 0x5, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xe}]}, &(0x7f0000001340)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', r4, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000013c0)={0x0, 0x4, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000001400)=[r1], &(0x7f0000001440)=[{0x3, 0x3, 0x6, 0x5}, {0x0, 0x1, 0x1, 0x8}, {0x3, 0x3, 0x1, 0xc}, {0x0, 0x4, 0xf, 0x8}], 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001280)={@fallback=r12, r11, 0x2b, 0x0, 0x0, @void, @value=r13, @void, @void, r9}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001540)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001600)={r7, &(0x7f0000001580)="486dce37401421b82225d0f096325985024cb099af4338474e7220024532b76f1952606f93173bdf959b4f0203d17e160590ead273051e77105fe12cd9427491acd98ad99e13c60f22cf111186f83ff2a9f6ee7a0d72a22b5667173a7ec55256ab69031b648712e931f43c0295f4b8c5ee9d080db96ae8ff271d8c9ed0c781"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)=r11}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001940)={0x1, 0x58, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x80, 0x0, r10, 0xfffffffe, '\x00', 0x0, r13, 0x4, 0x4, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_ext={0x1c, 0x12, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x787}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff8000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}]}, &(0x7f00000017c0)='GPL\x00', 0x7, 0x95, &(0x7f0000001800)=""/149, 0x41000, 0x3a, '\x00', r15, 0x0, r5, 0x8, &(0x7f0000001980)={0x0, 0x1}, 0x8, 0x10, &(0x7f00000019c0)={0x4, 0x4, 0x2, 0x136}, 0x10, 0x64b6, r11, 0x4, &(0x7f0000001a80)=[r16, r6], &(0x7f0000001ac0)=[{0x1, 0x4, 0x8}, {0x0, 0x2, 0x4, 0xa}, {0x0, 0x3, 0x9, 0x5}, {0x0, 0x5, 0xf}], 0x10, 0x3}, 0x94) ioctl$TUNSETIFINDEX(r11, 0x400454da, &(0x7f0000001bc0)=r15) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={r0, 0x58, &(0x7f0000001c00)}, 0x10) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={r3, 0x4, 0x8}, 0xc) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001ec0)={&(0x7f0000001cc0)="81c33dfdb8302a41821cf45a16784ddcc5d6c56cba6c9ad07bed38f527efa015e1a24209ad1f987c9385f3cbb866d4d6685bca4d54b3079ae2f18e1027cf92c6b617e503ec80cbe4d44382f244a31e91722fc7e98c09de99d1337fa4980ad1e0fd77cc3d4cc51073fe65c1890a07d9933c21cc85d533cd80388789a62257fbc7c3acd55aaa79b62f6a117248241a2d34ffaa5247ed8fc09ddbcdba94d88a0bfa833e43d390c76182497d81cceebabf2ed5ec9d", &(0x7f0000001d80)=""/87, &(0x7f0000001e00)="7049fd24ea755f7d2e3df9c40afcc64112919760347e9aca487f", &(0x7f0000001e40)="b232399fcfcd6045cdaa4ec986679dc17c0408641d63e41a1b00c9", 0x4, r17, 0x4}, 0x38) 4.006993639s ago: executing program 2 (id=2599): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x157, 0x157, 0x4, [@enum64={0x2, 0x7, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x5, 0x8}, {0x1, 0x6, 0x7}, {0x6, 0x3, 0x38b}, {0x8, 0x71c03926, 0x5}, {0xb, 0x100, 0x3ff}, {0x6, 0x10000, 0x4}, {0x8, 0x7fffffff, 0x6}]}, @var={0x9, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x10, 0x0, 0x0, 0x10, 0x10}, @datasec={0xd, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x10001}, {0x4, 0xaa3, 0xffff}], "78c150"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x1}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x0, 0x3}, {0x8, 0x8}, {0xc, 0x6}]}, @struct={0x10, 0x9, 0x0, 0x4, 0x1, 0xac7bf4f, [{0x7, 0x4, 0x8}, {0x8, 0x2, 0xe}, {0xa, 0x2, 0x4}, {0x0, 0x4, 0x5}, {0x3, 0x3, 0x8}, {0x7, 0x0, 0x3}, {0x1, 0x0, 0x2f}, {0xa, 0x5, 0xa7f}, {0x3, 0x1, 0x4}]}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000480)=""/245, 0x174, 0xf5, 0x0, 0x7}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002680)={0xffffffffffffffff, 0x20, &(0x7f0000002640)={&(0x7f0000000640)=""/4096, 0x1000, 0x0, &(0x7f0000001640)=""/4096, 0x1000}}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002740)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x82, 0xa, 0x5, 0xfffa, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0xbf4, 0xf4, &(0x7f0000000140)=""/244, 0x40f00, 0x4, '\x00', r1, 0x1b, r2, 0x8, &(0x7f00000005c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x2, 0xa00, 0x2}, 0x10, r3, 0x0, 0x3, &(0x7f00000026c0)=[0x1], &(0x7f0000002700)=[{0x4, 0x3, 0x7}, {0x2, 0x3, 0xa}, {0x2, 0x3, 0xa, 0xc}], 0x10, 0x9}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002800)={0x1b, 0x0, 0x0, 0x7, 0x0, r0, 0xcb, '\x00', r1, r2, 0x1, 0x2, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002880)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002940)={{0x1, 0xffffffffffffffff}, &(0x7f00000028c0), &(0x7f0000002900)=r4}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002d40)={0x11, 0x36, &(0x7f0000002980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0xa3, 0xa, 0x7, 0x4, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffeb3}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xb, 0x1, 0x8, 0x8, 0x9633d5a4cabaffed}, @call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @jmp={0x5, 0x0, 0x7, 0x5b72b06820ded17a, 0x3, 0xffffffffffffffc0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002b40)='syzkaller\x00', 0x9e200000, 0xa, &(0x7f0000002b80)=""/10, 0x40f00, 0x56, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000002bc0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002c00)={0x2, 0x4, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002cc0)=[r0, r0, r0, r0, r8, r9], &(0x7f0000002d00)=[{0x1, 0x5, 0xe, 0xc}, {0x0, 0x2, 0x10, 0x4}], 0x10, 0xfffff89f}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000002e00)=r9, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002e40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000003400)={&(0x7f0000002e80)=@hci, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002f00)=""/189, 0xbd}, {&(0x7f0000002fc0)=""/106, 0x6a}, {&(0x7f0000003040)=""/78, 0x4e}, {&(0x7f00000030c0)=""/209, 0xd1}, {&(0x7f00000031c0)=""/99, 0x63}, {&(0x7f0000003240)=""/85, 0x55}], 0x6, &(0x7f0000003340)=""/157, 0x9d}, 0x2043) bpf$PROG_BIND_MAP(0x23, &(0x7f0000003440)={r4, r8}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003500)={r6, 0x58, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000003540)='pids.max\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004940)={r10, 0xe0, &(0x7f0000004840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000004680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000046c0)=[0x0, 0x0], &(0x7f0000004700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000004740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000004780), &(0x7f00000047c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000004800)}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000004a00)=@bloom_filter={0x1e, 0x80000001, 0x100, 0x0, 0x818a, r5, 0x9, '\x00', 0x0, r2, 0x5, 0x3, 0x5, 0x5, @value=r2}, 0x50) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000004b00)=@bpf_tracing={0x1a, 0x15, &(0x7f0000003580)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @ldst={0x2, 0x1, 0x0, 0x4, 0x8, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x3, 0xa, 0x5, 0x4, 0xfffffffffffffff0}, @map_fd={0x18, 0xa, 0x1, 0x0, r5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}], &(0x7f0000003640)='GPL\x00', 0x3ff, 0x1000, &(0x7f0000003680)=""/4096, 0x41100, 0x2, '\x00', r13, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000004980)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000049c0)={0x3, 0x5, 0x1, 0x100}, 0x10, 0x1fd62, 0xffffffffffffffff, 0x3, &(0x7f0000004a80)=[r7, r5, r14], &(0x7f0000004ac0)=[{0x5, 0x3, 0xb}, {0x0, 0x4, 0x5, 0x2}, {0x0, 0x1, 0x8, 0xa}], 0x10, 0x9}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000004bc0)={r15, r9}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004c80)={{r7, 0xffffffffffffffff}, &(0x7f0000004c00), &(0x7f0000004c40)=r15}, 0x20) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004f40)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x4, '\x00', r13, r6, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000005000)=@bpf_tracing={0x1a, 0xe, &(0x7f0000004cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x89, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @generic={0x3, 0x5, 0x1, 0x5, 0x6}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @alu={0x4, 0x1, 0x2, 0x5, 0x8, 0xffffffffffffffff, 0x10}]}, &(0x7f0000004d40)='syzkaller\x00', 0x4, 0xce, &(0x7f0000004d80)=""/206, 0x41100, 0x0, '\x00', r12, 0x1a, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000004e80)={0x3, 0xe, 0xf, 0xb}, 0x10, 0x1f631, r4, 0x0, &(0x7f0000004fc0)=[r17, r6, r7, r5, r18, r7], 0x0, 0x10, 0x6}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000050c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x6, '\x00', r12, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000005300)={&(0x7f0000005140)=@isdn={0x22, 0x8, 0x59, 0x7c, 0x2}, 0x80, &(0x7f00000051c0), 0x0, &(0x7f0000005200)=[{0x88, 0x0, 0x9, "5d7058dbe870e07a279571b4c176e708ea1f82c4d4d0126f84546c6368bcfcc4b42ae65dbeadfeb919168bca9d59fbc01c1f7b279cdb13252176bdebc1dc6e9a51a98502f9bb33a69124a8357169e642219cf8c916bc3f41261fbe0ea0d2de04d2762519459e66c72ddd6c4e395f86c3c2"}, {0x68, 0x102, 0xe6, "1b1c289607842fbea42f4f1fed0d5a24ff9ab75eea5124973dffc5007a6a363f7818c9560d226db4d9f04c753016cd2aa2bad0f01bc0866e135f4096a1753f99188dfbeb6c05986502d329c31381847064153b8ff8ac"}], 0xf0}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000005340)={0xffffffffffffffff}) sendmsg$inet(r19, &(0x7f0000005440)={&(0x7f0000005380)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000053c0)=[{0xfffffffffffffffe}], 0x1, &(0x7f0000005400)=[@ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0xf, 0xa6, [@private=0xa010102, @multicast2, @private=0xa010102]}, @end, @noop]}}}], 0x28}, 0x0) recvmsg$unix(r19, &(0x7f0000005500)={0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005480)=""/9, 0x9}], 0x1}, 0x100) 3.93341375s ago: executing program 4 (id=2600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (rerun: 64) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2020, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000240)=@xdp={0x2c, 0x8, 0x0, 0x26}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="707d626def0a840a53f527633917edff5f45c2f4062ec9f2af2132fc3a1f091b010a9f92", 0x24}, {&(0x7f0000000400)="95752942039be1f42583ef19fe7dc5f6b42fe9f30d720d4712268822997cd42e50cc69a5ec8b631856101ec5e3b12a5ddfccec4b2902b90449f443306b57055f756f6b7f97a0b62a6231aac0f095c2fc1bafc5813e02dd8f7ff578e8aa513735b8c0e4655ca4", 0x66}, {&(0x7f0000000480)="6b266ade5a8f856544d7313113173c8c7faa3272b71569e6389c363cfe08c3cf8cdae0ba79d899226efe59664b9367ef90fa6f6d30ecb6ef4dc6c465087bff16f9", 0x41}], 0x3}, 0x8040) (async) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x0) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) socket$kcm(0x2, 0x1, 0x84) r3 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x8, 0x2, 0x7, 0x0, 0x1}, 0x50) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000500), 0x75, r4}, 0x38) (async) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000006440)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc80f3", 0xe}], 0x1}, 0x6000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000001900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x5, &(0x7f0000000180), 0x43) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xc0}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="1600000000fd"}) close(0x3) 3.884471391s ago: executing program 2 (id=2601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004540)={&(0x7f00000034c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x6, [@ptr={0xf, 0x0, 0x0, 0x2, 0x5}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x3, 0x5}, @typedef={0xb}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @float={0xa, 0x0, 0x0, 0x10, 0x10}, @const={0x9, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x61, 0x30, 0x5f, 0x30]}}, &(0x7f0000003540)=""/4096, 0x6a, 0x1000, 0x1, 0x9}, 0x28) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x5) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004800)={0xffffffffffffffff, 0x20, &(0x7f00000047c0)={&(0x7f0000004600)=""/223, 0xdf, 0x0, &(0x7f0000004700)=""/149, 0x95}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000004840)=@bloom_filter={0x1e, 0x5, 0x4, 0x9, 0x18800, r0, 0xf, '\x00', 0x0, r0, 0x0, 0x0, 0x2, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004980)={0x6, 0x7, &(0x7f0000003400)=@raw=[@jmp={0x5, 0x0, 0x8, 0x7, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}], &(0x7f0000003440)='syzkaller\x00', 0x4, 0x5, &(0x7f0000003480)=""/5, 0x41000, 0x8, '\x00', r5, @fallback=0x9, r6, 0x8, &(0x7f0000004580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000045c0)={0x0, 0x10, 0x1, 0x10}, 0x10, r7, r1, 0x7, &(0x7f00000048c0)=[0xffffffffffffffff, r0, r0, r0, r8, r0, r0, r0, 0x1, r0], &(0x7f0000004900)=[{0x4, 0x5, 0x1, 0x4}, {0x2, 0x5, 0x4}, {0x1, 0x3, 0x4, 0x4}, {0x5, 0x3, 0x4, 0x8}, {0x0, 0x2, 0x3, 0xb}, {0x3, 0x4, 0x5, 0x8}, {0x1, 0x5, 0x6, 0x9}], 0x10, 0x1}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10c) r9 = socket$kcm(0xa, 0x5, 0x0) recvmsg(r9, &(0x7f00000033c0)={&(0x7f0000001000)=@x25, 0x80, &(0x7f0000003240)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/169, 0xa9}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/107, 0x6b}, {&(0x7f00000031c0)=""/61, 0x3d}, {&(0x7f0000003200)=""/34, 0x22}], 0x6, &(0x7f00000032c0)=""/206, 0xce}, 0x40000003) sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000004a40)=ANY=[@ANYBLOB="1000000000000000840000000800000018000000000000008400000000000000620000000000000046"], 0x28}, 0x880) 3.695116873s ago: executing program 3 (id=2602): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@fwd={0x6}]}, {0x0, [0x2e, 0x2e, 0x0, 0x5f, 0x61, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r7 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0x900000000000000) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r8, 0x2e, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$kcm(0x10, 0x2, 0x0) socketpair(0x23, 0x1, 0x0, &(0x7f0000000000)) 791.49855ms ago: executing program 4 (id=2603): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a0050000000000f000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYRES16], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x20000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000200), &(0x7f00000002c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000), 0x62) 758.49859ms ago: executing program 2 (id=2604): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x1, 0x0, 0x1ff, 0x1, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003980)={r0, &(0x7f0000001980)="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", &(0x7f0000002980)=""/4096}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x4, 0x7}, @func={0xf, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x30, 0x61]}}, &(0x7f0000000400)=""/224, 0x3b, 0xe0, 0x1, 0x7, 0x10000}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x13, 0x2, 0xf, 0x81, 0x40000, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1a, 0xb, &(0x7f0000000240)=@raw=[@ldst={0x1, 0x0, 0x2, 0x9, 0xa, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x7, 0x5, 0x3, 0x2, 0xfffffffffffffffc}, @generic={0x8, 0xc, 0x4, 0x3, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_fd={0x18, 0x6, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000002c0)='GPL\x00', 0xffffffff, 0x93, &(0x7f0000000300)=""/147, 0x0, 0x0, '\x00', r7, @tracing=0x17, r8, 0x8, &(0x7f0000000540)={0x5, 0x9}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x10, 0x0, 0x756}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000780)=[r9, r10, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x0, 0x2, 0xc, 0x8}, {0x3, 0x4, 0x8, 0x6}, {0x2, 0x5, 0xd}, {0x5, 0x2, 0x4, 0x5}, {0x1, 0x5, 0xc, 0x1}, {0x5, 0x4, 0xf, 0x5}, {0x1, 0x4, 0x9, 0xa}, {0x2, 0x3, 0x4, 0x4}, {0x4, 0x2, 0x4, 0x7}]}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x7fff, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f3, &(0x7f0000000080)) 535.142523ms ago: executing program 3 (id=2605): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda9, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000480)={0x8, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f7, &(0x7f0000000080)) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0xb, 0x18}, 0xc) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r10 = socket$kcm(0x2, 0x922000000001, 0x106) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x25, &(0x7f00000002c0)=r11, 0x8) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x10, 0x4, 0x28, 0x0, 0x8e72, 0x10534, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffb3d6, 0x4}, 0x2208, 0x8, 0x9, 0x5, 0x5, 0xff, 0x7fff, 0x0, 0x3ff, 0x0, 0x6}, 0x0, 0x4f, 0xffffffffffffffff, 0x6) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x1a, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x81, &(0x7f0000000300)=""/129, 0x41000, 0x7e, '\x00', 0x0, @fallback=0x1b, r3, 0x8, &(0x7f0000000400)={0x4, 0x80000001}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x4, 0x6, 0x7222}, 0x10, r4, r5, 0x0, &(0x7f0000000580)=[r8, r9, r11, r12], 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) 398.135245ms ago: executing program 2 (id=2606): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x1, 0x0, [0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000002000000000008000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000340)="1c0000005e007f029e3b470d647dead6a9369022b88a3e378c88efcf", 0x1c}], 0x1}, 0x880) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 275.434557ms ago: executing program 3 (id=2607): socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x3, 0x300) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x4008000) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x81, @mcast1, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4002b00", 0xa9}], 0x1}, 0x400800c) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) (async) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x11e101, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000200)={'ip6tnl0\x00', @remote}) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x0) 175.083718ms ago: executing program 1 (id=2608): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4, 0xd, 0x27, 0x2, 0x0, 0x6, 0x20001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9527, 0x1, @perf_bp, 0xaa02, 0x1, 0x700, 0x0, 0x3640, 0x8000, 0x43e, 0x0, 0xfff, 0x0, 0x7fffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x13, &(0x7f0000000a40)=ANY=[@ANYBLOB="184a0000feffffff0000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000085100000ffffffff8a863600000000009500000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="00be9642fd88ce2198fae6b7000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x50d5, 0xfa, &(0x7f00000004c0)=""/250, 0x40e00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xa, 0x8, 0x800}, 0x10, 0xab14, 0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000640)=[{0x0, 0x3, 0x2, 0x8}, {0x4, 0x4, 0x4, 0x4}, {0x2, 0x2, 0x9, 0x6}, {0x0, 0x8, 0x8, 0x4}, {0x3, 0x1, 0x5, 0x4}, {0x1, 0x2, 0x4, 0x8}, {0x3, 0x4, 0xc, 0xc}, {0x1, 0x4, 0xe, 0xb}, {0x4, 0x3, 0x6}], 0x10, 0x4}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x8, 0x7, 0x5, 0x2488, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000300)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x10, r2, 0x8, &(0x7f0000000a00)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x1, &(0x7f0000000840)=[0x1, 0x1, r4], &(0x7f0000000880)=[{0x0, 0x3, 0xf, 0x4}], 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x5a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="00000000000400000000000000aafd0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x16, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000180)={0x2, 0x0, [0x0, 0x0]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x22000, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="89000000120081ae08060cdc030100007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a009bb837dc6cc01e32efaec8c7e4ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b567c660dbbff", 0x89}], 0x1}, 0x40084) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r12, &(0x7f0000000180), 0x40010) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r13, &(0x7f0000000180), 0x40010) 114.733089ms ago: executing program 2 (id=2609): r0 = socket$kcm(0x29, 0x2, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000340)}, 0x20) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f000000adfc82478b"], 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d34, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (rerun: 32) sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="cb", 0x1}], 0x1}, 0x40000) (async) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x4}, 0x11c905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x56, 0x3, 0x0, 0x1, 0x0, 0x3b70, 0x145a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x5d1, 0x2}, 0x4507, 0x32, 0xfffffbfd, 0x2, 0x7, 0x3, 0xfffa, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f00000005c0)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r8}, @ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000100)='GPL\x00', 0x5}, 0x94) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff00c}, {0x6, 0xff, 0x9, 0x1}]}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r9) (async, rerun: 32) r10 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r11 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000540)={0x0, 0xeffd, 0x0}, 0xc0004) (async) sendmsg$kcm(r11, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 0s ago: executing program 3 (id=2610): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x4004000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0xf905}, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310001041000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b60ac5ea9fca11027d19e93adb603deb92de3141e8fd7ac5b87a2070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba5fc4a5a17d103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e603950c6367587e8ece17d5c6e7c7514386f5125c0e2aa441cda5630047b770bc93868c63db6b6c27786aaff609c902fd65b951074957e967a8a3a405eaafbfafacdb7c2f6f32c251fadcd5a2e34b2efc310dae213aaad007975c26f6001f9b9dd2bf699781e0bbff554630fd9f9fff61813814a65b8e3bb2156ea642519206f26eb7359f732d497c0d4fdb4a735b9a7edd66dbed5f9e04c0fd41bd80a60d6b2508d0318bb94edcbda8ecbd30b320f9bab6efc65de00cdeac3c7383a247f6307d5ef3c2ec5b12650c986912aa6b44960dddfe9bcef838"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22f, 0x5, @perf_bp={0x0, 0xb}, 0x1000, 0x4, 0x0, 0x8, 0x1b17, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r8 = syz_clone(0x8014400, &(0x7f0000000480)="6f5d36c789cba0d40aa85b4ae527c5dfb57adf1031a0a577e7d749c2d647ba0d8b98781e34c4a9fee2f9415904df93cad2b5ddf3f34e9a35c50af8759ce206b0a000f8282cdbf0891b83051a6b44daf4d0e8829e154b873ff076c9986850aee915aacadabf077d384d5f1e4a036c52f1cac15a40f2d50814403976b903ec173b93351cc8c4d896dd41634913440027c16f31394f953d47317ba0153142c614683fbe7b960ad27edd6c0c69ec920306f17710f4b0bb44b5a3a55e370e427bdd84d767dcb58cac9ed34cb7d05e00a20c8a7f579546a4c0", 0xd6, &(0x7f0000000580), &(0x7f0000000740), &(0x7f0000000880)="37db45d8a0bb932d74726d3729669b09ec0b3da22cb09b53312bebfb9dbae319120e189ba35e75f4a7dbc37e1ed5a53d8092a209b07cdcaad49f978410d4f390ee6f8d492d1a3b7ae695df013679157f1d8243e79e07de1ccc8bdbd0ce4131e0") perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0x5, 0x4, 0x2, 0x3, 0x0, 0x100000001, 0x8000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x6, 0x9}, 0x100441, 0x58, 0x2, 0x7, 0x5, 0x5, 0x1609, 0x0, 0xffffffff, 0x0, 0x2}, r8, 0xb, r5, 0x2) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x12, 0x0, 0x37) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='devices.list\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, r6, 0x0, '\x00', r10, r11, 0x1, 0x5, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='GPL\x00') r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000e7f79ee2e33f149b0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r13}, @ldst={0x1, 0x3, 0x3, 0x0, 0x0, 0xc}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x48c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x902}, 0x94) kernel console output (not intermixed with test programs): x18c/0x250 [ 279.990961][ T9006] ? show_regs_print_info+0x20/0x20 [ 279.996209][ T9006] ? load_image+0x420/0x420 [ 280.000764][ T9006] ? __lock_acquire+0x7d40/0x7d40 [ 280.005818][ T9006] ? __virt_addr_valid+0x18c/0x540 [ 280.010964][ T9006] should_fail_ex+0x39d/0x4d0 [ 280.015678][ T9006] _copy_from_user+0x2f/0xe0 [ 280.020301][ T9006] map_update_elem+0x4e8/0x700 [ 280.025104][ T9006] __sys_bpf+0x6b5/0x890 [ 280.029381][ T9006] ? bpf_link_show_fdinfo+0x390/0x390 [ 280.034800][ T9006] ? lock_chain_count+0x20/0x20 [ 280.039695][ T9006] __x64_sys_bpf+0x7c/0x90 [ 280.044135][ T9006] do_syscall_64+0x55/0xa0 [ 280.048578][ T9006] ? clear_bhb_loop+0x40/0x90 [ 280.053292][ T9006] ? clear_bhb_loop+0x40/0x90 [ 280.058007][ T9006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.063924][ T9006] RIP: 0033:0x7fa40d39cdd9 [ 280.068362][ T9006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.088163][ T9006] RSP: 002b:00007fa40e32e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.096599][ T9006] RAX: ffffffffffffffda RBX: 00007fa40d615fa0 RCX: 00007fa40d39cdd9 [ 280.104600][ T9006] RDX: 0000000000000090 RSI: 0000200000000680 RDI: 0000000000000002 [ 280.112593][ T9006] RBP: 00007fa40e32e090 R08: 0000000000000000 R09: 0000000000000000 [ 280.120587][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.128579][ T9006] R13: 00007fa40d616038 R14: 00007fa40d615fa0 R15: 00007ffd86b165b8 [ 280.136598][ T9006] [ 280.347552][ T9008] netlink: 'syz.3.867': attribute type 10 has an invalid length. [ 280.465049][ T9008] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 280.475725][ T9014] netlink: 60 bytes leftover after parsing attributes in process `syz.3.867'. [ 280.517716][ T9014] netlink: 60 bytes leftover after parsing attributes in process `syz.3.867'. [ 280.588689][ T9010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.867'. [ 281.131664][ T5783] Bluetooth: hci2: ACL packet too small [ 281.217293][ T9012] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.868'. [ 281.248265][ T9018] netlink: 'syz.2.868': attribute type 10 has an invalid length. [ 281.307241][ T9018] netlink: 27071 bytes leftover after parsing attributes in process `syz.2.868'. [ 281.532606][ T9037] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 281.597452][ T9037] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 281.617840][ T9041] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 281.632602][ T9037] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 281.665028][ T9037] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 281.842691][ T9043] netlink: 'syz.2.876': attribute type 10 has an invalid length. [ 281.986909][ T9045] FAULT_INJECTION: forcing a failure. [ 281.986909][ T9045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.009342][ T9045] CPU: 1 PID: 9045 Comm: syz.0.877 Not tainted syzkaller #0 [ 282.016685][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 282.026794][ T9045] Call Trace: [ 282.030111][ T9045] [ 282.033072][ T9045] dump_stack_lvl+0x18c/0x250 [ 282.037809][ T9045] ? show_regs_print_info+0x20/0x20 [ 282.043054][ T9045] ? load_image+0x420/0x420 [ 282.047592][ T9045] ? __lock_acquire+0x7d40/0x7d40 [ 282.052651][ T9045] ? snprintf+0xe9/0x140 [ 282.056946][ T9045] should_fail_ex+0x39d/0x4d0 [ 282.061753][ T9045] _copy_to_user+0x2f/0xa0 [ 282.066202][ T9045] simple_read_from_buffer+0xe7/0x150 [ 282.071614][ T9045] proc_fail_nth_read+0x1e8/0x260 [ 282.076686][ T9045] ? proc_fault_inject_write+0x360/0x360 [ 282.082344][ T9045] ? fsnotify_perm+0x271/0x5e0 [ 282.087138][ T9045] ? proc_fault_inject_write+0x360/0x360 [ 282.092794][ T9045] vfs_read+0x28b/0x970 [ 282.096992][ T9045] ? kernel_read+0x1e0/0x1e0 [ 282.101636][ T9045] ? __fget_files+0x28/0x4b0 [ 282.106255][ T9045] ? __fget_files+0x28/0x4b0 [ 282.110868][ T9045] ? __fget_files+0x43d/0x4b0 [ 282.115581][ T9045] ? __fdget_pos+0x2a3/0x330 [ 282.120197][ T9045] ? ksys_read+0x75/0x260 [ 282.124557][ T9045] ksys_read+0x150/0x260 [ 282.128834][ T9045] ? vfs_write+0x990/0x990 [ 282.133271][ T9045] ? lockdep_hardirqs_on+0x98/0x150 [ 282.138495][ T9045] do_syscall_64+0x55/0xa0 [ 282.142939][ T9045] ? clear_bhb_loop+0x40/0x90 [ 282.147648][ T9045] ? clear_bhb_loop+0x40/0x90 [ 282.152356][ T9045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.158271][ T9045] RIP: 0033:0x7fa40d35d60e [ 282.162709][ T9045] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 282.182337][ T9045] RSP: 002b:00007fa40e32dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 282.190778][ T9045] RAX: ffffffffffffffda RBX: 00007fa40e32e6c0 RCX: 00007fa40d35d60e [ 282.198767][ T9045] RDX: 000000000000000f RSI: 00007fa40e32e0a0 RDI: 0000000000000006 [ 282.206780][ T9045] RBP: 00007fa40e32e090 R08: 0000000000000000 R09: 0000000000000000 [ 282.214776][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.222767][ T9045] R13: 00007fa40d616038 R14: 00007fa40d615fa0 R15: 00007ffd86b165b8 [ 282.230777][ T9045] [ 282.266196][ T9043] .`: (slave dummy0): Enslaving as an active interface with an up link [ 282.350352][ T9046] netlink: 'syz.1.874': attribute type 29 has an invalid length. [ 282.912761][ T9059] netlink: 44 bytes leftover after parsing attributes in process `syz.1.882'. [ 283.030475][ T11] wlan1: Trigger new scan to find an IBSS to join [ 283.539177][ T9071] netlink: 'syz.1.884': attribute type 27 has an invalid length. [ 283.587085][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 283.996451][ T8779] wlan1: Creating new IBSS network, BSSID 1a:88:04:e3:39:0b [ 284.809460][ T9105] pim6reg1: entered promiscuous mode [ 284.832602][ T9105] pim6reg1: entered allmulticast mode [ 284.869323][ T9109] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.894'. [ 286.501115][ T9158] netlink: 'syz.2.911': attribute type 29 has an invalid length. [ 286.509413][ T9158] netlink: 'syz.2.911': attribute type 3 has an invalid length. [ 286.527125][ T9158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.911'. [ 286.912137][ T9171] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 286.957193][ T9171] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.916'. [ 287.577962][ T9183] netlink: 'syz.1.921': attribute type 6 has an invalid length. [ 287.595994][ T9183] netlink: 168 bytes leftover after parsing attributes in process `syz.1.921'. [ 287.721277][ T9188] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.923'. [ 287.742966][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.923'. [ 287.808122][ T9191] netlink: 10 bytes leftover after parsing attributes in process `syz.1.924'. [ 287.836837][ T9188] netlink: 'syz.3.923': attribute type 3 has an invalid length. [ 287.852040][ T9188] netlink: 150428 bytes leftover after parsing attributes in process `syz.3.923'. [ 289.017651][ T9215] netlink: zone id is out of range [ 289.022873][ T9215] netlink: set zone limit has 8 unknown bytes [ 289.058207][ T9212] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.930'. [ 290.634462][ T9258] veth1_macvtap: left promiscuous mode [ 290.683101][ T9263] macsec0: entered promiscuous mode [ 290.695751][ T9263] veth1_macvtap: entered promiscuous mode [ 290.717488][ T9263] macsec0: entered allmulticast mode [ 290.722875][ T9263] veth1_macvtap: entered allmulticast mode [ 290.978492][ T9273] netlink: 'syz.0.950': attribute type 10 has an invalid length. [ 291.005734][ T9273] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.950'. [ 291.532404][ T9291] netlink: 10 bytes leftover after parsing attributes in process `syz.2.954'. [ 291.625843][ T9290] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 291.667278][ T9297] netlink: 'syz.0.953': attribute type 3 has an invalid length. [ 291.675313][ T9297] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.953'. [ 293.156944][ T9336] netlink: 'syz.2.967': attribute type 3 has an invalid length. [ 293.186894][ T9336] netlink: 145408 bytes leftover after parsing attributes in process `syz.2.967'. [ 293.209686][ T9331] netlink: 168 bytes leftover after parsing attributes in process `syz.2.967'. [ 293.237375][ T9331] netlink: 176 bytes leftover after parsing attributes in process `syz.2.967'. [ 293.291311][ T9340] netlink: 'syz.3.968': attribute type 4 has an invalid length. [ 293.317659][ T9340] netlink: 152 bytes leftover after parsing attributes in process `syz.3.968'. [ 293.375458][ T9340] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 293.464938][ T9347] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.970'. [ 293.477453][ T9346] netlink: 176 bytes leftover after parsing attributes in process `syz.2.971'. [ 294.070578][ T59] wlan1: Trigger new scan to find an IBSS to join [ 294.633939][ T9378] netlink: 'syz.3.982': attribute type 46 has an invalid length. [ 294.709700][ T9381] netlink: 'syz.2.984': attribute type 1 has an invalid length. [ 294.767090][ T9382] netlink: 'syz.1.983': attribute type 39 has an invalid length. [ 295.729860][ T9402] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.989'. [ 295.779729][ T9402] bridge_slave_1: default FDB implementation only supports local addresses [ 295.807959][ T9404] netlink: 'syz.2.989': attribute type 10 has an invalid length. [ 295.827231][ T9404] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered promiscuous mode [ 296.127678][ T9413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.992'. [ 296.154976][ T9413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.992'. [ 296.166510][ T9413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.992'. [ 296.187084][ T9413] netlink: 60 bytes leftover after parsing attributes in process `syz.2.992'. [ 297.947875][ T9451] netlink: 'syz.2.1003': attribute type 17 has an invalid length. [ 297.956103][ T9451] netlink: 'syz.2.1003': attribute type 16 has an invalid length. [ 297.964474][ T9451] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1003'. [ 298.080170][ T59] wlan1: Trigger new scan to find an IBSS to join [ 298.753143][ T9464] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1009'. [ 298.895919][ T9465] syz.1.1009: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 298.915784][ T9465] CPU: 0 PID: 9465 Comm: syz.1.1009 Not tainted syzkaller #0 [ 298.923220][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 298.933428][ T9465] Call Trace: [ 298.936748][ T9465] [ 298.939722][ T9465] dump_stack_lvl+0x18c/0x250 [ 298.944462][ T9465] ? show_regs_print_info+0x20/0x20 [ 298.949721][ T9465] ? load_image+0x420/0x420 [ 298.954279][ T9465] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 298.960839][ T9465] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 298.967403][ T9465] warn_alloc+0x246/0x340 [ 298.971781][ T9465] ? stack_trace_save+0xaa/0x100 [ 298.976771][ T9465] ? zone_watermark_ok_safe+0x230/0x230 [ 298.982386][ T9465] ? kasan_set_track+0x5f/0x70 [ 298.987172][ T9465] ? kasan_set_track+0x4e/0x70 [ 298.991981][ T9465] ? __kasan_kmalloc+0x8f/0xa0 [ 298.996783][ T9465] ? xsk_init_queue+0xad/0x100 [ 299.001573][ T9465] ? xsk_setsockopt+0x4e5/0x760 [ 299.006450][ T9465] ? do_sock_setsockopt+0x175/0x1a0 [ 299.011678][ T9465] ? __x64_sys_setsockopt+0x182/0x200 [ 299.017098][ T9465] __vmalloc_node_range+0x126/0x1330 [ 299.022455][ T9465] ? free_vm_area+0x50/0x50 [ 299.027001][ T9465] vmalloc_user+0x74/0x80 [ 299.031389][ T9465] ? xskq_create+0xbf/0x170 [ 299.035930][ T9465] xskq_create+0xbf/0x170 [ 299.040293][ T9465] xsk_init_queue+0xad/0x100 [ 299.044925][ T9465] xsk_setsockopt+0x4e5/0x760 [ 299.049629][ T9465] ? xsk_poll+0x680/0x680 [ 299.053985][ T9465] ? __fget_files+0x28/0x4b0 [ 299.058608][ T9465] ? __fget_files+0x28/0x4b0 [ 299.063231][ T9465] ? aa_sock_opt_perm+0x74/0x100 [ 299.068199][ T9465] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 299.073817][ T9465] ? security_socket_setsockopt+0x7e/0xa0 [ 299.079594][ T9465] ? xsk_poll+0x680/0x680 [ 299.083974][ T9465] do_sock_setsockopt+0x175/0x1a0 [ 299.089029][ T9465] ? __fdget+0x180/0x210 [ 299.093328][ T9465] __x64_sys_setsockopt+0x182/0x200 [ 299.098560][ T9465] do_syscall_64+0x55/0xa0 [ 299.103003][ T9465] ? clear_bhb_loop+0x40/0x90 [ 299.107717][ T9465] ? clear_bhb_loop+0x40/0x90 [ 299.112421][ T9465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.118339][ T9465] RIP: 0033:0x7f96ce79cdd9 [ 299.122775][ T9465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.142418][ T9465] RSP: 002b:00007f96cf717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.150878][ T9465] RAX: ffffffffffffffda RBX: 00007f96cea16090 RCX: 00007f96ce79cdd9 [ 299.158874][ T9465] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 299.166864][ T9465] RBP: 00007f96ce832d69 R08: 0000000000000004 R09: 0000000000000000 [ 299.174866][ T9465] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 299.182880][ T9465] R13: 00007f96cea16128 R14: 00007f96cea16090 R15: 00007ffc4244fbb8 [ 299.190897][ T9465] [ 299.204751][ T9465] Mem-Info: [ 299.210120][ T9465] active_anon:7373 inactive_anon:0 isolated_anon:0 [ 299.210120][ T9465] active_file:17509 inactive_file:40020 isolated_file:0 [ 299.210120][ T9465] unevictable:768 dirty:31 writeback:0 [ 299.210120][ T9465] slab_reclaimable:10299 slab_unreclaimable:92948 [ 299.210120][ T9465] mapped:24340 shmem:1371 pagetables:617 [ 299.210120][ T9465] sec_pagetables:0 bounce:0 [ 299.210120][ T9465] kernel_misc_reclaimable:0 [ 299.210120][ T9465] free:1347027 free_pcp:11286 free_cma:0 [ 299.310403][ T9465] Node 0 active_anon:29536kB inactive_anon:0kB active_file:70036kB inactive_file:159876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97320kB dirty:120kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10568kB pagetables:2412kB sec_pagetables:0kB all_unreclaimable? no [ 299.311688][ T59] wlan1: Creating new IBSS network, BSSID 6e:49:41:86:76:b8 [ 299.351723][ T9465] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 299.406518][ T9465] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.467210][ T9465] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 299.473312][ T9465] Node 0 DMA32 free:1471028kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:29396kB inactive_anon:0kB active_file:70036kB inactive_file:159056kB unevictable:1536kB writepending:120kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:28516kB local_pcp:11768kB free_cma:0kB [ 299.540400][ T9469] netlink: 'syz.2.1010': attribute type 10 has an invalid length. [ 299.565039][ T9465] lowmem_reserve[]: 0 0 0 0 0 [ 299.576154][ T9465] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 299.609517][ T9465] lowmem_reserve[]: 0 0 0 0 0 [ 299.614953][ T9465] Node 1 Normal free:3901720kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16576kB local_pcp:8704kB free_cma:0kB [ 299.696630][ T9465] lowmem_reserve[]: 0 0 0 0 0 [ 299.705027][ T9465] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 299.719471][ T9465] Node 0 DMA32: 1369*4kB (UME) 1224*8kB (UME) 1655*16kB (UME) 655*32kB (UM) 497*64kB (UME) 600*128kB (UME) 155*256kB (UM) 45*512kB (UM) 20*1024kB (UM) 14*2048kB (UME) 290*4096kB (UM) = 1471028kB [ 299.768379][ T9465] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 299.812856][ T9465] Node 1 Normal: 216*4kB (UME) 61*8kB (UME) 33*16kB (UME) 118*32kB (UME) 20*64kB (UE) 8*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3901720kB [ 299.835292][ T9465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.852062][ T9465] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 299.946287][ T9465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.984683][ T9465] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.027226][ T9465] 58890 total pagecache pages [ 300.031977][ T9465] 0 pages in swap cache [ 300.036171][ T9465] Free swap = 124996kB [ 300.099209][ T9465] Total swap = 124996kB [ 300.103441][ T9465] 2097051 pages RAM [ 300.139862][ T9465] 0 pages HighMem/MovableOnly [ 300.144616][ T9465] 416927 pages reserved [ 300.156367][ T9465] 0 pages cma reserved [ 300.162117][ T9483] netlink: 'syz.2.1014': attribute type 39 has an invalid length. [ 300.255627][ T9481] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1013'. [ 300.268122][ T9481] hsr_slave_0: left promiscuous mode [ 300.292058][ T9481] hsr_slave_1: left promiscuous mode [ 300.908913][ T9497] netlink: 'syz.3.1017': attribute type 3 has an invalid length. [ 301.034495][ T9497] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1017'. [ 301.820300][ T9504] netlink: 'syz.3.1021': attribute type 3 has an invalid length. [ 301.907617][ T9504] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 301.924691][ T9504] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.1021'. [ 302.324590][ T9519] netlink: 'syz.0.1025': attribute type 3 has an invalid length. [ 302.334462][ T9519] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 302.359597][ T9519] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1025'. [ 302.581233][ T9525] netlink: 'syz.3.1026': attribute type 33 has an invalid length. [ 302.608473][ T9525] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1026'. [ 302.989448][ T9535] syz.0.1027 (9535) used obsolete PPPIOCDETACH ioctl [ 303.266331][ T8779] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 303.716610][ T9553] netlink: 'syz.0.1034': attribute type 12 has an invalid length. [ 303.726061][ T9553] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1034'. [ 305.494970][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.561920][ T9616] netlink: 'syz.0.1052': attribute type 33 has an invalid length. [ 305.577291][ T9617] netlink: 'syz.1.1051': attribute type 39 has an invalid length. [ 305.633798][ T9616] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1052'. [ 306.067901][ T9629] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1055'. [ 306.170508][ T9629] netlink: 65035 bytes leftover after parsing attributes in process `syz.2.1055'. [ 307.379970][ T9671] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1069'. [ 307.419543][ T9673] netlink: 'syz.1.1068': attribute type 49 has an invalid length. [ 307.427736][ T9673] netlink: 'syz.1.1068': attribute type 49 has an invalid length. [ 307.438863][ T9673] netlink: 'syz.1.1068': attribute type 49 has an invalid length. [ 307.447133][ T9673] netlink: 'syz.1.1068': attribute type 49 has an invalid length. [ 307.666429][ T9679] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 307.687157][ T9679] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 307.752624][ T9684] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.1072'. [ 307.948533][ T9689] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 307.955885][ T9689] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 309.978360][ T9719] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1082'. [ 310.277739][ T9722] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1082'. [ 311.720844][ T9737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1087'. [ 311.764700][ T9737] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1087'. [ 311.782987][ T9741] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1087'. [ 312.452419][ T9752] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1091'. [ 312.559746][ T9752] netlink: 65035 bytes leftover after parsing attributes in process `syz.1.1091'. [ 313.022876][ T9768] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1097'. [ 313.329945][ T9779] netlink: 'syz.0.1101': attribute type 2 has an invalid length. [ 313.339615][ T9779] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 313.353693][ T9779] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1101'. [ 313.777591][ T9781] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1100'. [ 314.030975][ T9583] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.251093][ T9798] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1106'. [ 314.697359][ T9801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1107'. [ 315.275876][ T9809] veth1_macvtap: left promiscuous mode [ 315.297365][ T9809] macsec0: entered promiscuous mode [ 316.118010][ T9816] netlink: 'syz.2.1112': attribute type 39 has an invalid length. [ 316.528711][ T9816] hsr_slave_1 (unregistering): left promiscuous mode [ 316.562078][ T9821] netlink: 'syz.1.1114': attribute type 2 has an invalid length. [ 316.578717][ T9821] netlink: 'syz.1.1114': attribute type 1 has an invalid length. [ 317.210366][ T9831] __nla_validate_parse: 2 callbacks suppressed [ 317.210401][ T9831] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1117'. [ 317.379964][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388607][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.712922][ T9837] netlink: 'syz.0.1120': attribute type 25 has an invalid length. [ 317.731385][ T9837] netlink: 'syz.0.1120': attribute type 9 has an invalid length. [ 318.217591][ T9850] delete_channel: no stack [ 318.227318][ T9850] delete_channel: no stack [ 318.928324][ T9862] syz.1.1128[9862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.928928][ T9862] syz.1.1128[9862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.097258][ T9884] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1135'. [ 321.811950][ T9902] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1139'. [ 322.319578][ T9906] sit0: entered allmulticast mode [ 322.345045][ T9907] sit0: entered promiscuous mode [ 323.213040][ T9935] netlink: 'syz.3.1148': attribute type 10 has an invalid length. [ 323.236423][ T9935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1148'. [ 323.260828][ T9935] team0: entered promiscuous mode [ 323.265948][ T9935] team_slave_0: entered promiscuous mode [ 323.285496][ T9935] team_slave_1: entered promiscuous mode [ 323.307524][ T9935] team0: entered allmulticast mode [ 323.332486][ T9935] team_slave_0: entered allmulticast mode [ 323.352228][ T9935] team_slave_1: entered allmulticast mode [ 323.378421][ T9935] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 324.061923][ T9957] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.083930][ T9957] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1152'. [ 325.683412][ T9995] netlink: 'syz.0.1165': attribute type 16 has an invalid length. [ 325.698474][ T9995] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 325.737055][ T9995] veth1_macvtap: entered allmulticast mode [ 325.763463][ T9994] netlink: 'syz.0.1165': attribute type 16 has an invalid length. [ 325.802442][ T9994] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1165'. [ 326.067824][T10009] netlink: 'syz.3.1168': attribute type 10 has an invalid length. [ 326.208117][T10009] wg1: entered promiscuous mode [ 326.230329][T10009] wg1: entered allmulticast mode [ 326.256380][T10009] team0: Device wg1 is of different type [ 326.592289][T10028] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 326.767308][T10030] netlink: 'syz.1.1173': attribute type 7 has an invalid length. [ 326.775387][T10030] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1173'. [ 326.793123][T10030] netlink: 'syz.1.1173': attribute type 21 has an invalid length. [ 326.807244][T10030] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1173'. [ 326.834212][T10035] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1174'. [ 328.170663][T10053] syzkaller0: entered promiscuous mode [ 328.186072][T10053] syzkaller0: entered allmulticast mode [ 328.232941][T10063] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1186'. [ 328.360120][T10059] netlink: 'syz.0.1185': attribute type 10 has an invalid length. [ 328.416518][T10059] hsr_slave_0: left promiscuous mode [ 328.447211][T10059] hsr_slave_1: left promiscuous mode [ 328.613143][T10067] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1188'. [ 329.232687][T10074] syzkaller0: entered promiscuous mode [ 329.238372][T10074] syzkaller0: entered allmulticast mode [ 329.382732][ T9586] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 332.678546][T10118] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1202'. [ 332.697343][T10118] openvswitch: netlink: Duplicate key (type 0). [ 332.774481][T10123] netlink: 'syz.1.1202': attribute type 5 has an invalid length. [ 332.802977][T10123] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 332.827574][T10123] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1202'. [ 333.727565][T10124] netlink: 'syz.1.1202': attribute type 5 has an invalid length. [ 333.736352][T10124] netlink: 'syz.1.1202': attribute type 1 has an invalid length. [ 333.751379][T10124] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1202'. [ 333.776244][T10126] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 333.786820][T10126] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1203'. [ 334.293827][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.679417][T10143] netlink: 'syz.1.1208': attribute type 8 has an invalid length. [ 334.694493][T10143] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1208'. [ 336.002256][T10157] netlink: 'syz.3.1211': attribute type 10 has an invalid length. [ 336.064643][T10157] team_slave_0: left promiscuous mode [ 336.071028][T10157] team_slave_0: left allmulticast mode [ 336.085579][T10157] team0 (unregistering): Port device team_slave_0 removed [ 336.101623][T10157] team_slave_1: left promiscuous mode [ 336.109208][T10157] team_slave_1: left allmulticast mode [ 336.123207][T10157] team0 (unregistering): Port device team_slave_1 removed [ 337.601992][T10200] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1225'. [ 337.779234][T10203] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1226'. [ 337.859275][T10203] netlink: 'syz.2.1226': attribute type 13 has an invalid length. [ 337.877528][T10203] netlink: 'syz.2.1226': attribute type 58 has an invalid length. [ 337.885435][T10203] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1226'. [ 337.918468][T10206] netlink: 'syz.2.1226': attribute type 10 has an invalid length. [ 338.057676][T10208] netlink: 'syz.1.1228': attribute type 21 has an invalid length. [ 338.065576][T10208] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1228'. [ 338.082935][T10208] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1228'. [ 338.408084][T10217] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1232'. [ 338.720309][T10219] netlink: 'syz.0.1233': attribute type 39 has an invalid length. [ 339.884854][T10242] veth1_macvtap: entered promiscuous mode [ 339.908726][T10242] macsec0: entered allmulticast mode [ 340.628036][T10265] netlink: 'syz.0.1247': attribute type 19 has an invalid length. [ 340.635962][T10265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1247'. [ 343.316291][T10336] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1270'. [ 344.313607][T10364] netlink: 149044 bytes leftover after parsing attributes in process `syz.3.1281'. [ 344.742432][T10386] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 348.007887][T10404] netlink: 'syz.2.1291': attribute type 39 has an invalid length. [ 348.032963][T10408] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1293'. [ 348.234373][T10414] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1295'. [ 349.548834][T10439] netlink: 'syz.2.1304': attribute type 10 has an invalid length. [ 349.561839][T10439] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1304'. [ 349.571733][T10439] batadv_slave_1: entered promiscuous mode [ 349.578881][T10439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.587292][T10439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.713944][T10441] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.1304'. [ 349.771834][T10445] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.1306'. [ 349.938529][T10453] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1307'. [ 350.574703][T10481] netlink: 'syz.3.1315': attribute type 21 has an invalid length. [ 350.584504][T10481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1315'. [ 350.732777][T10484] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 350.762460][T10484] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 350.794445][T10485] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 350.922434][T10489] netlink: 'syz.1.1318': attribute type 3 has an invalid length. [ 350.934239][T10489] netlink: 'syz.1.1318': attribute type 11 has an invalid length. [ 350.945106][T10489] netlink: 129880 bytes leftover after parsing attributes in process `syz.1.1318'. [ 351.424623][T10503] netlink: 'syz.2.1323': attribute type 29 has an invalid length. [ 351.477994][T10500] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1323'. [ 351.921356][T10503] netlink: 'syz.2.1323': attribute type 29 has an invalid length. [ 351.929825][T10507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1324'. [ 353.667412][T10504] netlink: 'syz.2.1323': attribute type 29 has an invalid length. [ 353.852818][T10549] netlink: 'syz.0.1328': attribute type 21 has an invalid length. [ 356.159593][T10610] __nla_validate_parse: 2 callbacks suppressed [ 356.159608][T10610] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1346'. [ 356.226409][T10609] delete_channel: no stack [ 356.472232][T10624] netlink: 'syz.3.1348': attribute type 10 has an invalid length. [ 356.480770][T10624] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1348'. [ 356.497167][T10624] bond0: entered promiscuous mode [ 356.503822][T10624] bond_slave_0: entered promiscuous mode [ 356.515564][T10624] bond_slave_1: entered promiscuous mode [ 356.523156][T10624] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 356.535437][T10624] bridge_slave_1: entered promiscuous mode [ 356.578476][T10622] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 357.566645][T10651] C: renamed from team_slave_0 (while UP) [ 357.784151][T10651] netlink: 'syz.0.1357': attribute type 3 has an invalid length. [ 357.815271][T10651] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1357'. [ 357.929496][T10661] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1359'. [ 358.056829][T10660] netlink: 'syz.1.1358': attribute type 6 has an invalid length. [ 358.118286][T10660] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1358'. [ 358.322072][T10664] netlink: 'syz.0.1360': attribute type 10 has an invalid length. [ 358.336709][T10664] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1360'. [ 358.352038][T10664] bond0: entered promiscuous mode [ 358.379951][T10664] bond_slave_0: entered promiscuous mode [ 358.394672][T10664] bond_slave_1: entered promiscuous mode [ 358.409832][T10664] bridge0: port 3(bond0) entered blocking state [ 358.420231][T10664] bridge0: port 3(bond0) entered disabled state [ 358.446156][T10664] bond0: entered allmulticast mode [ 358.453728][T10664] bond_slave_0: entered allmulticast mode [ 358.506927][T10664] bond_slave_1: entered allmulticast mode [ 358.580046][T10664] bridge0: port 3(bond0) entered blocking state [ 358.587556][T10664] bridge0: port 3(bond0) entered forwarding state [ 360.407819][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 361.130283][T10680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1363'. [ 361.202449][T10686] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1364'. [ 361.277573][T10692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1366'. [ 361.329966][T10691] netlink: 'syz.2.1366': attribute type 12 has an invalid length. [ 361.355541][T10691] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1366'. [ 362.803598][T10723] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 362.822240][T10723] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1374'. [ 362.842909][T10723] .`: entered promiscuous mode [ 362.857346][T10723] bond_slave_0: entered promiscuous mode [ 362.878614][T10723] bond_slave_1: entered promiscuous mode [ 362.888232][T10723] dummy0: entered promiscuous mode [ 362.914248][T10723] 8021q: adding VLAN 0 to HW filter on device .` [ 362.934220][T10723] bridge0: port 4(.`) entered blocking state [ 362.948815][T10723] bridge0: port 4(.`) entered disabled state [ 362.967098][T10723] .`: entered allmulticast mode [ 362.972501][T10723] bond_slave_0: entered allmulticast mode [ 362.988387][T10723] bond_slave_1: entered allmulticast mode [ 362.997367][T10723] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered allmulticast mode [ 363.011835][T10723] dummy0: entered allmulticast mode [ 363.060167][T10723] bridge0: port 4(.`) entered blocking state [ 363.067396][T10723] bridge0: port 4(.`) entered forwarding state [ 364.201716][T10740] netlink: 'syz.3.1380': attribute type 10 has an invalid length. [ 364.236854][T10740] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1380'. [ 364.259634][T10747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1380'. [ 364.299313][T10747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1380'. [ 364.988625][T10750] syzkaller0: entered promiscuous mode [ 365.020211][T10750] syzkaller0: entered allmulticast mode [ 365.310027][T10766] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1387'. [ 365.578530][T10766] veth0_macvtap: left promiscuous mode [ 366.038498][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.368418][T10766] syz.1.1387 (10766) used greatest stack depth: 18088 bytes left [ 366.766123][T10800] netlink: 'syz.2.1397': attribute type 3 has an invalid length. [ 366.802837][T10800] netlink: 'syz.2.1397': attribute type 4 has an invalid length. [ 366.819063][T10800] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.1397'. [ 367.387085][T10818] netlink: 'syz.1.1400': attribute type 13 has an invalid length. [ 367.411523][T10818] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1400'. [ 367.791346][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 44 [ 367.806171][T10835] netlink: 'syz.1.1404': attribute type 21 has an invalid length. [ 367.847092][T10835] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1404'. [ 368.444704][T10852] netlink: 'syz.3.1410': attribute type 3 has an invalid length. [ 368.910713][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.330901][T10869] netlink: 'syz.2.1416': attribute type 21 has an invalid length. [ 369.357113][T10869] IPv6: NLM_F_CREATE should be specified when creating new route [ 369.375493][T10869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.382812][T10869] IPv6: NLM_F_CREATE should be set when creating new route [ 369.390158][T10869] IPv6: NLM_F_CREATE should be set when creating new route [ 369.397433][T10869] IPv6: NLM_F_CREATE should be set when creating new route [ 370.627138][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 371.097877][T10911] netlink: 'syz.1.1428': attribute type 2 has an invalid length. [ 371.105762][T10911] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1428'. [ 375.299966][T10960] netlink: 'syz.0.1436': attribute type 21 has an invalid length. [ 376.037093][T10983] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1441'. [ 377.419230][T10997] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1446'. [ 377.604538][T11010] netlink: 'syz.3.1448': attribute type 7 has an invalid length. [ 377.625189][T11010] netlink: 'syz.3.1448': attribute type 1 has an invalid length. [ 377.645527][T11010] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1448'. [ 378.791897][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.798536][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.033256][T11014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1449'. [ 379.254448][T11029] netlink: 'syz.0.1453': attribute type 10 has an invalid length. [ 379.440502][T11040] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 379.562513][T11040] netlink: 'syz.3.1455': attribute type 3 has an invalid length. [ 379.573089][T11040] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1455'. [ 379.609078][T11045] vcan0: entered allmulticast mode [ 379.631695][T11043] netlink: 'syz.0.1456': attribute type 17 has an invalid length. [ 379.651934][T11043] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1456'. [ 379.668239][T11043] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.744757][T11048] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 379.770156][T11043] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.1456'. [ 379.791924][T11048] veth0_macvtap: left promiscuous mode [ 379.935396][T11049] netlink: 'syz.0.1456': attribute type 10 has an invalid length. [ 379.986823][T11049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.005351][T11049] batadv0: entered promiscuous mode [ 380.012146][T11049] batadv0: entered allmulticast mode [ 380.020921][T11049] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 380.022168][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 380.039506][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 380.500402][T11059] netlink: 'syz.2.1461': attribute type 27 has an invalid length. [ 380.554664][T11059] netlink: 'syz.2.1461': attribute type 3 has an invalid length. [ 380.657260][T11059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1461'. [ 380.706308][T11060] netlink: 'syz.2.1461': attribute type 10 has an invalid length. [ 381.699750][T11073] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1462'. [ 382.080074][ T65] wlan1: Trigger new scan to find an IBSS to join [ 382.108210][T11077] netlink: 'syz.0.1466': attribute type 10 has an invalid length. [ 382.149599][T11077] macvlan0: entered promiscuous mode [ 382.155426][T11077] macvlan0: entered allmulticast mode [ 382.180365][T11087] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1465'. [ 382.197768][T11077] veth1_vlan: entered allmulticast mode [ 382.226209][T11077] team0: Port device macvlan0 added [ 382.264903][T11079] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1464'. [ 382.692014][T11093] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1470'. [ 383.072539][T11100] netlink: 'syz.3.1472': attribute type 1 has an invalid length. [ 383.129258][T11100] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1472'. [ 383.526156][T11110] sit0: entered allmulticast mode [ 383.626916][T11110] sit0: entered promiscuous mode [ 384.640587][T11132] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1480'. [ 385.110214][ T59] wlan1: Trigger new scan to find an IBSS to join [ 386.399517][T11152] syzkaller0: left promiscuous mode [ 386.405632][T11152] syzkaller0: left allmulticast mode [ 386.460872][T11159] syzkaller0: left promiscuous mode [ 386.474672][T11159] syzkaller0: left allmulticast mode [ 386.658335][T11167] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1490'. [ 386.707994][T11169] netlink: 'syz.2.1492': attribute type 19 has an invalid length. [ 387.313160][T11199] netlink: 'syz.3.1500': attribute type 3 has an invalid length. [ 387.321241][T11199] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1500'. [ 387.666813][T11201] @: port 1(veth1_to_team) entered blocking state [ 387.674569][T11201] @: port 1(veth1_to_team) entered disabled state [ 387.718397][T11201] veth1_to_team: entered allmulticast mode [ 387.754757][T11201] veth1_to_team: entered promiscuous mode [ 387.866477][T11217] netlink: 'syz.1.1505': attribute type 29 has an invalid length. [ 388.067413][ T65] wlan1: Trigger new scan to find an IBSS to join [ 388.103615][T11220] netlink: 'syz.0.1504': attribute type 29 has an invalid length. [ 388.170314][T11214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1504'. [ 388.681849][T11217] netlink: 'syz.1.1505': attribute type 29 has an invalid length. [ 388.698012][T11220] netlink: 'syz.0.1504': attribute type 29 has an invalid length. [ 389.060293][ T12] wlan1: Creating new IBSS network, BSSID 2e:7e:3f:e7:85:20 [ 391.193269][T11255] bridge0: port 3(bond0) entered disabled state [ 391.276447][T11255] bond0 (unregistering): left allmulticast mode [ 391.287824][T11255] bond_slave_0: left allmulticast mode [ 391.311843][T11255] bond_slave_1: left allmulticast mode [ 391.323412][T11255] batadv0: left allmulticast mode [ 391.339387][T11255] bridge0: port 3(bond0) entered disabled state [ 391.392381][T11255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.418889][T11255] bond_slave_0: left promiscuous mode [ 391.432297][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 391.487686][T11255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.499905][T11255] bond_slave_1: left promiscuous mode [ 391.564896][T11255] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 391.602106][T11255] batadv0: left promiscuous mode [ 391.750713][T11255] bond0 (unregistering): Released all slaves [ 392.578824][T11290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1526'. [ 392.712208][T11298] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 392.828280][T11298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1527'. [ 392.870194][T11298] vcan0: entered promiscuous mode [ 392.888065][T11298] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 393.497282][T11304] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1528'. [ 393.665170][T11311] netlink: 'syz.0.1530': attribute type 5 has an invalid length. [ 394.861523][T11347] netlink: 'syz.3.1544': attribute type 29 has an invalid length. [ 394.934824][T11347] netlink: 'syz.3.1544': attribute type 29 has an invalid length. [ 395.843666][T11369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1551'. [ 395.861396][T11369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1551'. [ 395.892331][T11369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1551'. [ 395.906118][T11369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1551'. [ 396.483385][T11392] syzkaller0: entered promiscuous mode [ 396.503364][T11392] syzkaller0: entered allmulticast mode [ 396.789844][T11408] delete_channel: no stack [ 396.799093][T11408] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1561'. [ 397.269506][ T65] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.867742][T11422] netlink: 'syz.0.1565': attribute type 15 has an invalid length. [ 398.875850][T11422] netlink: 'syz.0.1565': attribute type 7 has an invalid length. [ 398.967039][T11428] netlink: 'syz.0.1568': attribute type 3 has an invalid length. [ 398.975140][T11428] netlink: 'syz.0.1568': attribute type 1 has an invalid length. [ 398.985366][T11428] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1568'. [ 399.057494][T11433] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.1567'. [ 399.256358][T11439] netlink: set zone limit has 8 unknown bytes [ 400.422058][T11460] netlink: 'syz.1.1578': attribute type 3 has an invalid length. [ 400.437789][T11460] netlink: 'syz.1.1578': attribute type 1 has an invalid length. [ 400.467383][T11460] netlink: 49715 bytes leftover after parsing attributes in process `syz.1.1578'. [ 400.785889][T11473] netlink: 'syz.2.1581': attribute type 10 has an invalid length. [ 401.460071][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1586'. [ 401.642750][T11492] netlink: 'syz.2.1587': attribute type 3 has an invalid length. [ 401.652569][T11492] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1587'. [ 402.063595][T11499] bridge0: port 4(.`) entered disabled state [ 402.130101][T11499] .` (unregistering): left allmulticast mode [ 402.150300][T11499] bond_slave_0: left allmulticast mode [ 402.167752][T11499] bond_slave_1: left allmulticast mode [ 402.179742][T11499] netdevsim netdevsim2 ÿÿÿÿÿÿ: left allmulticast mode [ 402.202916][T11499] dummy0: left allmulticast mode [ 402.213007][T11499] bridge0: port 4(.`) entered disabled state [ 402.304541][T11499] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.320425][T11499] bond_slave_0: left promiscuous mode [ 402.381734][T11499] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.426612][T11499] bond_slave_1: left promiscuous mode [ 402.743549][T11499] .` (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface [ 402.943030][T11499] .` (unregistering): (slave dummy0): Releasing backup interface [ 402.956196][T11499] dummy0: left promiscuous mode [ 402.970912][T11499] .` (unregistering): Released all slaves [ 403.012610][T11505] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1590'. [ 403.030540][T11509] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1590'. [ 403.228339][T11520] netlink: 'syz.3.1594': attribute type 10 has an invalid length. [ 403.242754][T11520] veth0_macvtap: left promiscuous mode [ 403.302572][T11522] netlink: 'syz.1.1595': attribute type 6 has an invalid length. [ 403.310948][T11522] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1595'. [ 403.321023][T11523] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1595'. [ 404.776623][T11554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.848741][T11554] bond_slave_0: left promiscuous mode [ 404.888406][T11554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.909373][T11554] bond_slave_1: left promiscuous mode [ 404.947282][T11554] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 404.962366][T11554] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 405.018382][T11554] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 405.040743][T11554] bridge_slave_1: left promiscuous mode [ 405.077119][T11554] bond0 (unregistering): Released all slaves [ 405.386415][T11563] validate_nla: 1 callbacks suppressed [ 405.386432][T11563] netlink: 'syz.2.1604': attribute type 3 has an invalid length. [ 405.409141][T11563] netlink: 'syz.2.1604': attribute type 4 has an invalid length. [ 405.427436][T11563] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.1604'. [ 407.551805][T11583] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1610'. [ 407.562026][T11583] netlink: 22616 bytes leftover after parsing attributes in process `syz.3.1610'. [ 408.488150][T11614] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1622'. [ 409.392057][T11635] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1631'. [ 409.472642][T11641] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1630'. [ 409.565260][T11644] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1629'. [ 410.284186][T11654] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1635'. [ 410.313556][T11654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1635'. [ 410.344486][T11662] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1637'. [ 410.515691][T11666] netlink: 'syz.3.1639': attribute type 3 has an invalid length. [ 410.529392][T11666] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1639'. [ 410.996822][T11675] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1642'. [ 411.199957][T11681] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1644'. [ 413.286746][T11709] netlink: 'syz.1.1653': attribute type 41 has an invalid length. [ 413.294759][T11709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1653'. [ 413.311172][T11710] netlink: 'syz.2.1652': attribute type 21 has an invalid length. [ 413.323318][T11710] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1652'. [ 413.332996][T11710] netlink: 'syz.2.1652': attribute type 5 has an invalid length. [ 413.343819][T11710] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1652'. [ 414.041432][T11731] netlink: 'syz.1.1659': attribute type 10 has an invalid length. [ 414.127649][T11731] veth1_macvtap (unregistering): left allmulticast mode [ 414.135085][T11731] veth1_macvtap (unregistering): left promiscuous mode [ 414.409714][T11738] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 414.841618][T11748] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1664'. [ 414.865992][T11748] openvswitch: netlink: Flow key attribute not present in set flow. [ 414.910787][T11749] netlink: 'syz.1.1664': attribute type 1 has an invalid length. [ 414.931175][T11749] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1664'. [ 415.033766][T11749] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1664'. [ 415.088692][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.103132][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.112817][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.123305][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.133268][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 415.147120][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.407063][T11756] chnl_net:caif_netlink_parms(): no params data found [ 415.612647][T11756] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.620150][T11756] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.627800][T11756] bridge_slave_0: entered allmulticast mode [ 415.635335][T11756] bridge_slave_0: entered promiscuous mode [ 415.644717][T11756] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.652090][T11756] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.659580][T11756] bridge_slave_1: entered allmulticast mode [ 415.666865][T11756] bridge_slave_1: entered promiscuous mode [ 415.742948][T11756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.759995][T11756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.877513][T11756] team0: Port device team_slave_0 added [ 415.897420][T11756] team0: Port device team_slave_1 added [ 415.944439][T11756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.953300][T11756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.997696][T11756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.036057][T11756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.061276][T11756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.095780][T11756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.138200][T11785] netlink: 'syz.1.1674': attribute type 17 has an invalid length. [ 416.201402][T11785] netlink: 'syz.1.1674': attribute type 16 has an invalid length. [ 416.235814][T11785] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1674'. [ 416.645564][T11756] hsr_slave_0: entered promiscuous mode [ 416.678398][T11756] hsr_slave_1: entered promiscuous mode [ 417.197201][ T5783] Bluetooth: hci4: command tx timeout [ 417.341597][T11756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 417.372763][T11756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 417.452040][T11756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.506722][T11756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.716121][T11756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.804299][T11756] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.876730][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.884000][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.959450][T10247] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.966700][T10247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.080984][ T9586] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 419.104068][T11756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.267199][ T5777] Bluetooth: hci4: command tx timeout [ 419.572490][T11756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.934965][T11869] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1696'. [ 420.019488][T11868] delete_channel: no stack [ 420.070531][T11877] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1698'. [ 420.106472][T11877] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1698'. [ 420.127906][T11877] bond0: (slave bond_slave_0): Releasing backup interface [ 420.157758][T11877] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 420.183703][T11885] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.1699'. [ 420.232832][T11885] netlink: 5516 bytes leftover after parsing attributes in process `syz.2.1699'. [ 420.301968][T11756] veth0_vlan: entered promiscuous mode [ 420.367583][T11756] veth1_vlan: entered promiscuous mode [ 420.489510][T11756] veth0_macvtap: entered promiscuous mode [ 420.524796][T11756] veth1_macvtap: entered promiscuous mode [ 421.065908][T11756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.113252][T11756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.141456][T11756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.158916][T11756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.211404][T11756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.276511][T11756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.317091][T11756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.340038][T11919] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1713'. [ 421.357117][ T5777] Bluetooth: hci4: command tx timeout [ 421.357468][T11756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.428994][T11756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.521100][T11756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.532402][T11756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.545874][T11756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.563334][T11756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.573524][T11756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.602111][T11756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.628351][T11756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.670342][T11756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.692816][T11756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.702355][T11756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.711528][T11756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.957793][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.995679][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.035290][T11941] netlink: 'syz.3.1714': attribute type 21 has an invalid length. [ 422.258695][ T9586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.266790][ T9586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.562974][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 422.623323][T11952] syzkaller0: entered promiscuous mode [ 422.632584][T11952] syzkaller0: entered allmulticast mode [ 422.648671][T11953] netlink: 'syz.4.1661': attribute type 21 has an invalid length. [ 422.656823][T11953] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1661'. [ 422.668352][T11953] netlink: 'syz.4.1661': attribute type 4 has an invalid length. [ 422.676224][T11953] netlink: 'syz.4.1661': attribute type 5 has an invalid length. [ 422.686288][T11953] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1661'. [ 423.432080][ T5777] Bluetooth: hci4: command tx timeout [ 424.965375][T11975] netlink: 'syz.1.1724': attribute type 29 has an invalid length. [ 424.981858][T11975] netlink: 'syz.1.1724': attribute type 29 has an invalid length. [ 425.002115][T11975] netlink: 'syz.1.1724': attribute type 29 has an invalid length. [ 425.030903][T11975] netlink: 'syz.1.1724': attribute type 29 has an invalid length. [ 425.057787][T11975] netlink: 'syz.1.1724': attribute type 22 has an invalid length. [ 425.078104][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1724'. [ 425.134421][T11982] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1725'. [ 425.143937][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1725'. [ 425.168418][T11982] netlink: 14175 bytes leftover after parsing attributes in process `syz.4.1725'. [ 425.646563][T11988] netlink: 16182 bytes leftover after parsing attributes in process `syz.4.1728'. [ 426.537973][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1741'. [ 426.689020][T12034] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1743'. [ 426.746416][T12034] netlink: 'syz.2.1743': attribute type 29 has an invalid length. [ 427.087351][T12052] validate_nla: 4 callbacks suppressed [ 427.087370][T12052] netlink: 'syz.4.1748': attribute type 29 has an invalid length. [ 427.121210][T12055] netlink: 'syz.4.1748': attribute type 29 has an invalid length. [ 427.153165][T12052] netlink: 'syz.4.1748': attribute type 29 has an invalid length. [ 427.786353][T12062] syzkaller0: entered promiscuous mode [ 427.817493][T12062] syzkaller0: entered allmulticast mode [ 428.304797][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 430.066077][T12078] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1755'. [ 430.240462][T12082] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.1757'. [ 430.289406][T12084] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.322309][T12081] netlink: 'syz.3.1756': attribute type 21 has an invalid length. [ 430.350593][T12081] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.383215][T12081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.390782][T12081] IPv6: NLM_F_CREATE should be set when creating new route [ 430.398727][T12081] IPv6: NLM_F_CREATE should be set when creating new route [ 430.406643][T12081] IPv6: NLM_F_CREATE should be set when creating new route [ 430.454072][T12084] netlink: 'syz.2.1758': attribute type 3 has an invalid length. [ 430.498074][T12084] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1758'. [ 430.572004][T12087] netlink: 'syz.2.1758': attribute type 12 has an invalid length. [ 430.587638][T12087] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1758'. [ 431.886760][T12120] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.1766'. [ 432.278766][T12162] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1772'. [ 432.446350][T12167] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1774'. [ 432.770957][T12174] sit0: entered allmulticast mode [ 432.845388][T12179] sit0: entered promiscuous mode [ 433.764463][T12197] netlink: 'syz.3.1781': attribute type 29 has an invalid length. [ 433.777745][T12197] netlink: 'syz.3.1781': attribute type 29 has an invalid length. [ 433.948288][T12202] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 433.956535][T12202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1784'. [ 434.023547][T12202] batman_adv: batadv0: Adding interface: virt_wifi0 [ 434.055441][T12202] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.117541][T12202] batman_adv: batadv0: Interface activated: virt_wifi0 [ 434.950529][T12232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.351713][T12247] netlink: 'syz.3.1796': attribute type 21 has an invalid length. [ 437.011268][T12279] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 437.510463][T12288] netlink: 'syz.1.1807': attribute type 10 has an invalid length. [ 438.170736][T12310] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1811'. [ 439.081082][T12349] netlink: 'syz.1.1812': attribute type 1 has an invalid length. [ 439.117716][T12349] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1812'. [ 439.138613][T12349] netlink: 'syz.1.1812': attribute type 46 has an invalid length. [ 439.146658][T12349] netlink: 'syz.1.1812': attribute type 46 has an invalid length. [ 439.438857][T12363] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 439.464994][T12363] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 439.486062][T12363] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 439.496519][T12363] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 440.085624][T12386] netlink: 'syz.1.1823': attribute type 33 has an invalid length. [ 440.108045][T12386] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1823'. [ 440.256337][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.262931][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.427200][T12414] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1831'. [ 441.539528][T12426] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1832'. [ 442.692344][T12452] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1843'. [ 442.708292][T12452] netlink: zone id is out of range [ 442.788417][T12452] netlink: 'syz.1.1843': attribute type 11 has an invalid length. [ 442.821639][T12452] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1843'. [ 442.887841][T12452] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 442.933959][T12452] CPU: 0 PID: 12452 Comm: syz.1.1843 Not tainted syzkaller #0 [ 442.941606][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.951762][T12452] Call Trace: [ 442.955078][T12452] [ 442.958060][T12452] dump_stack_lvl+0x18c/0x250 [ 442.962823][T12452] ? show_regs_print_info+0x20/0x20 [ 442.968093][T12452] ? load_image+0x420/0x420 [ 442.972676][T12452] sysfs_warn_dup+0x8e/0xa0 [ 442.977228][T12452] sysfs_do_create_link_sd+0xc0/0x110 [ 442.982653][T12452] device_add_class_symlinks+0x1cf/0x240 [ 442.988347][T12452] device_add+0x507/0xc20 [ 442.992740][T12452] wiphy_register+0x1dad/0x2ae0 [ 442.997659][T12452] ? cfg80211_event_work+0x40/0x40 [ 443.002815][T12452] ? minstrel_ht_alloc+0x88a/0x990 [ 443.008009][T12452] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 443.014141][T12452] ieee80211_register_hw+0x3464/0x4250 [ 443.019672][T12452] ? ieee80211_tasklet_handler+0x20/0x20 [ 443.025346][T12452] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 443.031314][T12452] ? __debug_object_init+0xec/0x450 [ 443.036582][T12452] ? __asan_memset+0x22/0x40 [ 443.041242][T12452] ? __hrtimer_init+0x186/0x270 [ 443.046144][T12452] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 443.051948][T12452] ? mac80211_hwsim_free+0x220/0x220 [ 443.057294][T12452] ? rcu_is_watching+0x15/0xb0 [ 443.062111][T12452] ? kstrndup+0xbd/0x140 [ 443.066419][T12452] hwsim_new_radio_nl+0xdc9/0x1a90 [ 443.071588][T12452] ? __nla_validate+0x50/0x50 [ 443.076327][T12452] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 443.082738][T12452] ? __nla_parse+0x40/0x50 [ 443.087214][T12452] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 443.093641][T12452] genl_family_rcv_msg_doit+0x211/0x310 [ 443.099242][T12452] ? end_current_label_crit_section+0x170/0x170 [ 443.105563][T12452] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 443.111520][T12452] ? bpf_lsm_capable+0x9/0x10 [ 443.116252][T12452] ? security_capable+0x89/0xb0 [ 443.121167][T12452] genl_rcv_msg+0x619/0x7a0 [ 443.125740][T12452] ? genl_bind+0x360/0x360 [ 443.130210][T12452] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 443.136599][T12452] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 443.143258][T12452] ? perf_trace_lock+0xfc/0x3b0 [ 443.148179][T12452] netlink_rcv_skb+0x241/0x4d0 [ 443.153005][T12452] ? genl_bind+0x360/0x360 [ 443.157457][T12452] ? netlink_ack+0x1180/0x1180 [ 443.162295][T12452] ? __lock_acquire+0x7d40/0x7d40 [ 443.167378][T12452] ? down_read+0x1ac/0x2e0 [ 443.171845][T12452] genl_rcv+0x28/0x40 [ 443.175875][T12452] netlink_unicast+0x751/0x8d0 [ 443.180721][T12452] netlink_sendmsg+0x8d0/0xbf0 [ 443.185557][T12452] ? netlink_getsockopt+0x590/0x590 [ 443.190828][T12452] ? aa_sock_msg_perm+0x94/0x150 [ 443.195825][T12452] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 443.201157][T12452] ? security_socket_sendmsg+0x80/0xa0 [ 443.206657][T12452] ? netlink_getsockopt+0x590/0x590 [ 443.211920][T12452] ____sys_sendmsg+0x5ba/0x960 [ 443.216746][T12452] ? __asan_memset+0x22/0x40 [ 443.221393][T12452] ? __sys_sendmsg_sock+0x30/0x30 [ 443.226461][T12452] ? __import_iovec+0x5f2/0x850 [ 443.231373][T12452] ? import_iovec+0x73/0xa0 [ 443.235921][T12452] ___sys_sendmsg+0x2a6/0x360 [ 443.240654][T12452] ? __sys_sendmsg+0x2a0/0x2a0 [ 443.245491][T12452] ? trace_call_bpf+0xc3/0x6c0 [ 443.250313][T12452] ? fd_install+0x60/0x4e0 [ 443.254797][T12452] __se_sys_sendmsg+0x1c2/0x2b0 [ 443.259700][T12452] ? __x64_sys_sendmsg+0x80/0x80 [ 443.264716][T12452] ? lockdep_hardirqs_on+0x98/0x150 [ 443.269983][T12452] do_syscall_64+0x55/0xa0 [ 443.274436][T12452] ? clear_bhb_loop+0x40/0x90 [ 443.279154][T12452] ? clear_bhb_loop+0x40/0x90 [ 443.283877][T12452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.289820][T12452] RIP: 0033:0x7f96ce79cdd9 [ 443.294272][T12452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.313949][T12452] RSP: 002b:00007f96cf738028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.322427][T12452] RAX: ffffffffffffffda RBX: 00007f96cea15fa0 RCX: 00007f96ce79cdd9 [ 443.330446][T12452] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 443.338469][T12452] RBP: 00007f96ce832d69 R08: 0000000000000000 R09: 0000000000000000 [ 443.346483][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.354499][T12452] R13: 00007f96cea16038 R14: 00007f96cea15fa0 R15: 00007ffc4244fbb8 [ 443.362531][T12452] [ 443.403742][T12455] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1845'. [ 443.550076][T12452] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1843'. [ 443.607062][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1843'. [ 444.225971][T12476] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1852'. [ 445.126451][T12490] netlink: 'syz.3.1855': attribute type 2 has an invalid length. [ 445.136310][T12490] netlink: 'syz.3.1855': attribute type 1 has an invalid length. [ 445.156069][T12490] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.1855'. [ 445.284118][T12500] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1856'. [ 446.460410][T12518] netlink: 'syz.2.1862': attribute type 10 has an invalid length. [ 446.497060][T12518] bridge0: port 3(hsr0) entered disabled state [ 446.505529][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.543161][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.677025][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.772017][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.815181][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.855950][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.887184][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.913601][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.947103][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 446.967305][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.008952][T12523] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1864'. [ 447.064512][T12523] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1864'. [ 447.716934][T12521] net_ratelimit: 1711 callbacks suppressed [ 447.716951][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.787010][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.807543][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.837990][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.858809][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.879178][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.899608][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.927285][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.947181][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 447.967118][T12521] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 450.108911][T12147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 450.141251][T12551] netlink: 'syz.4.1871': attribute type 6 has an invalid length. [ 450.151261][T12551] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1871'. [ 450.194205][T12551] IPv6: Can't replace route, no match found [ 450.350842][T12560] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1875'. [ 450.384058][T12560] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1875'. [ 450.536673][T12566] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1875'. [ 450.990442][T12579] netlink: 'syz.3.1879': attribute type 4 has an invalid length. [ 451.011168][T12579] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1879'. [ 451.170135][T12582] netlink: 'syz.1.1880': attribute type 11 has an invalid length. [ 451.187177][T12582] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1880'. [ 452.525914][T12604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1887'. [ 452.588281][T12604] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1887'. [ 453.604026][T12121] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 455.355878][T12630] netlink: 'syz.2.1893': attribute type 2 has an invalid length. [ 455.378599][T12630] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1893'. [ 455.640535][T12633] netlink: 'syz.1.1895': attribute type 10 has an invalid length. [ 455.651786][T12633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1895'. [ 455.673134][T12633] batman_adv: batadv0: Adding interface: vlan1 [ 455.708069][T12633] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.755368][T12633] batman_adv: batadv0: Interface activated: vlan1 [ 455.780387][T12635] netlink: 'syz.3.1896': attribute type 41 has an invalid length. [ 455.804155][T12635] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1896'. [ 456.848390][T12659] netlink: 'syz.2.1903': attribute type 11 has an invalid length. [ 456.856379][T12659] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1903'. [ 458.122959][T12678] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 458.220278][T12680] netlink: 'syz.2.1910': attribute type 4 has an invalid length. [ 458.238425][T12680] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1910'. [ 459.327478][T10246] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 459.774461][T12711] netlink: 'syz.2.1921': attribute type 22 has an invalid length. [ 459.855324][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 459.922547][T12710] netlink: 'syz.4.1920': attribute type 4 has an invalid length. [ 459.953466][T12710] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1920'. [ 460.650987][T12719] netlink: 'syz.4.1924': attribute type 2 has an invalid length. [ 460.679744][T12719] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1924'. [ 460.745305][T12721] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1924'. [ 461.044416][T12728] netlink: 'syz.4.1928': attribute type 39 has an invalid length. [ 461.282877][T12732] netlink: 'syz.3.1929': attribute type 15 has an invalid length. [ 461.300025][T12732] netlink: 'syz.3.1929': attribute type 7 has an invalid length. [ 461.829451][T12746] net_ratelimit: 13435 callbacks suppressed [ 461.829471][T12746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 461.949163][T12752] netlink: 'syz.3.1932': attribute type 4 has an invalid length. [ 462.017630][T12752] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1932'. [ 462.588720][T12761] delete_channel: no stack [ 462.705460][T12766] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 462.747032][T12766] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1937'. [ 463.095446][T12778] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1942'. [ 464.247958][ T5777] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 464.845159][T12845] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 464.909154][T12845] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1959'. [ 465.291153][T12853] syzkaller0: entered promiscuous mode [ 465.314544][T12853] syzkaller0: entered allmulticast mode [ 465.334023][T12858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1962'. [ 465.347933][T12860] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1962'. [ 465.527960][T12866] netlink: 'syz.3.1964': attribute type 21 has an invalid length. [ 466.127110][T12870] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1966'. [ 466.150645][T12870] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1966'. [ 466.172666][T12870] tc_dump_action: action bad kind [ 468.290750][T12870] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1966'. [ 468.300270][T12870] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1966'. [ 468.310561][T12870] tc_dump_action: action bad kind [ 469.235769][T12900] delete_channel: no stack [ 469.565455][T12916] netlink: 'syz.3.1978': attribute type 10 has an invalid length. [ 469.616473][T12916] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1978'. [ 469.852095][T12913] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1977'. [ 469.876324][T12912] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1977'. [ 477.647149][T12957] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1989'. [ 477.696866][T12954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.261255][ T5777] Bluetooth: hci4: unexpected event 0x04 length: 15 > 10 [ 478.536788][T12978] netlink: 'syz.2.1994': attribute type 8 has an invalid length. [ 478.579920][T12978] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.1994'. [ 478.887862][T12982] netlink: 'syz.2.1995': attribute type 21 has an invalid length. [ 480.307505][ T5777] Bluetooth: hci4: command tx timeout [ 480.732789][T13000] netlink: 'syz.2.1999': attribute type 10 has an invalid length. [ 480.921999][T12987] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1997'. [ 481.142274][T12147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 481.168360][T12987] bridge_slave_1: default FDB implementation only supports local addresses [ 481.275955][T13041] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2001'. [ 481.307650][T13042] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2001'. [ 481.851415][T13058] netlink: 'syz.2.2004': attribute type 3 has an invalid length. [ 481.882025][T13058] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2004'. [ 484.037521][T13106] netlink: 'syz.4.2019': attribute type 8 has an invalid length. [ 484.057105][T13106] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.2019'. [ 484.303003][T13112] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2020'. [ 484.432140][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.457021][T13116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.623440][T12144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 487.194241][T13116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.206349][T13116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.246590][T13116] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 487.267147][T13116] batman_adv: batadv0: Removing interface: virt_wifi0 [ 487.368953][T13118] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2022'. [ 487.409299][T13125] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 487.418736][T13125] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2024'. [ 487.809516][T13139] netlink: 'syz.4.2028': attribute type 12 has an invalid length. [ 487.855394][T13139] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2028'. [ 488.281299][T13152] netlink: 'syz.1.2032': attribute type 2 has an invalid length. [ 488.327251][T13152] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2032'. [ 488.378402][T13155] netlink: 'syz.1.2032': attribute type 2 has an invalid length. [ 488.386222][T13155] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2032'. [ 488.762134][T13158] delete_channel: no stack [ 488.774982][T13163] netlink: 'syz.1.2035': attribute type 4 has an invalid length. [ 488.792433][T13163] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.2035'. [ 490.560254][T12132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.399064][T13173] netlink: 'syz.3.2038': attribute type 12 has an invalid length. [ 491.638081][T13179] netlink: 'syz.4.2039': attribute type 10 has an invalid length. [ 491.772648][T13179] veth0_vlan: left promiscuous mode [ 491.837424][T13179] veth0_vlan: entered promiscuous mode [ 491.858460][T13179] team0: Device veth0_vlan failed to register rx_handler [ 492.279847][T13201] netlink: 'syz.4.2046': attribute type 21 has an invalid length. [ 492.311150][T13201] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2046'. [ 492.429300][ T5777] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7 [ 492.739492][T13211] delete_channel: no stack [ 492.792762][T13222] netlink: 'syz.3.2051': attribute type 10 has an invalid length. [ 492.811417][T13222] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 493.365788][T13234] netlink: 'syz.4.2057': attribute type 10 has an invalid length. [ 493.453086][T13240] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2057'. [ 493.494524][T13234] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 493.551518][T13240] bond0: entered promiscuous mode [ 493.556809][T13240] bond_slave_0: entered promiscuous mode [ 493.577662][T13240] bond_slave_1: entered promiscuous mode [ 493.614332][T13240] dummy0: entered promiscuous mode [ 493.675461][T13240] bond0: entered allmulticast mode [ 493.697741][T13240] bond_slave_0: entered allmulticast mode [ 493.707885][T13240] bond_slave_1: entered allmulticast mode [ 493.727040][T13240] dummy0: entered allmulticast mode [ 493.954381][T13244] syzkaller0: entered promiscuous mode [ 493.960116][T13244] syzkaller0: entered allmulticast mode [ 494.647120][T13256] netlink: 206164 bytes leftover after parsing attributes in process `syz.3.2064'. [ 494.691718][T13254] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2063'. [ 495.085268][T13272] netlink: 'syz.4.2068': attribute type 3 has an invalid length. [ 495.100351][T13272] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2068'. [ 495.285960][T13276] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2069'. [ 495.940994][T13293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2073'. [ 496.245356][T13293] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2073'. [ 496.276752][T13294] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2073'. [ 496.296267][T13295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2073'. [ 496.975179][T13318] netlink: 'syz.4.2080': attribute type 3 has an invalid length. [ 498.467046][ T7967] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 498.590846][T13366] netlink: 'syz.1.2095': attribute type 10 has an invalid length. [ 499.775698][T13366] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 499.999939][T13395] __nla_validate_parse: 1 callbacks suppressed [ 499.999985][T13395] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2101'. [ 500.037200][T13395] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 500.125291][T13398] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2102'. [ 500.745989][T13423] netlink: 'syz.1.2109': attribute type 10 has an invalid length. [ 500.800789][T13423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'. [ 500.927315][T13423] netlink: 'syz.1.2109': attribute type 10 has an invalid length. [ 500.992377][T13423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'. [ 501.674393][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.681180][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.954294][T13442] veth0_macvtap: entered promiscuous mode [ 501.967304][T13442] veth0_macvtap: entered allmulticast mode [ 501.990707][T13442] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2116'. [ 502.016380][T13442] netlink: zone id is out of range [ 502.037055][T13442] netlink: zone id is out of range [ 502.046801][T13442] netlink: zone id is out of range [ 502.063289][T13442] netlink: zone id is out of range [ 502.087551][T13442] netlink: zone id is out of range [ 502.113445][T13442] netlink: zone id is out of range [ 502.151563][T13442] netlink: zone id is out of range [ 502.161253][T13442] netlink: zone id is out of range [ 502.166572][T13442] netlink: zone id is out of range [ 502.369549][T13451] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2120'. [ 502.947445][T13464] netlink: 'syz.2.2123': attribute type 10 has an invalid length. [ 503.532654][T13484] delete_channel: no stack [ 505.362766][T13540] netlink: 'syz.1.2147': attribute type 10 has an invalid length. [ 505.424643][T13540] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.452598][T13540] bond0: (slave team0): Enslaving as an active interface with an up link [ 505.669046][T13549] netlink: 'syz.1.2150': attribute type 23 has an invalid length. [ 505.690096][T13549] netlink: 'syz.1.2150': attribute type 10 has an invalid length. [ 505.700847][T13549] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2150'. [ 505.803637][T13549] batman_adv: batadv0: Interface deactivated: vlan1 [ 506.019212][T13555] netlink: 'syz.2.2152': attribute type 4 has an invalid length. [ 506.127407][T13555] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2152'. [ 506.591234][T13549] batman_adv: batadv0: Removing interface: vlan1 [ 507.235362][T13584] netlink: 'syz.1.2160': attribute type 21 has an invalid length. [ 507.263328][T13584] netlink: 'syz.1.2160': attribute type 1 has an invalid length. [ 507.719767][T13609] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2166'. [ 507.738344][T13611] netlink: 'syz.2.2167': attribute type 4 has an invalid length. [ 507.746357][T13611] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2167'. [ 508.010363][T13617] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2169'. [ 508.076621][T13617] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.2169'. [ 508.131914][T13617] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2169'. [ 508.179669][T13623] netlink: 'syz.4.2171': attribute type 9 has an invalid length. [ 508.187862][T13617] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.2169'. [ 508.207596][T13623] netlink: 399 bytes leftover after parsing attributes in process `syz.4.2171'. [ 508.237698][T13617] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2169'. [ 508.271733][T13624] netlink: 'syz.4.2171': attribute type 9 has an invalid length. [ 508.896687][T13635] netlink: 'syz.1.2174': attribute type 10 has an invalid length. [ 509.143099][T13635] team0: Device wg1 is of different type [ 509.272470][T13634] C: renamed from team_slave_0 (while UP) [ 509.328057][T13634] netlink: 'syz.4.2175': attribute type 4 has an invalid length. [ 509.342413][T13634] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 509.377654][T13631] netlink: 'syz.2.2173': attribute type 10 has an invalid length. [ 509.480112][T13631] bridge_slave_1: left allmulticast mode [ 509.497182][T13631] bridge_slave_1: left promiscuous mode [ 509.549472][T13631] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.372372][T13667] netlink: 'syz.4.2182': attribute type 10 has an invalid length. [ 510.894034][T13676] netlink: 'syz.3.2186': attribute type 8 has an invalid length. [ 510.924913][T13676] __nla_validate_parse: 70 callbacks suppressed [ 510.924931][T13676] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2186'. [ 512.265782][T12130] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 513.037223][T13720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2197'. [ 513.443989][T13726] netlink: 197536 bytes leftover after parsing attributes in process `syz.1.2200'. [ 513.502983][T13727] netlink: 'syz.2.2199': attribute type 19 has an invalid length. [ 513.586623][T13727] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2199'. [ 513.666140][T13726] netlink: 'syz.1.2200': attribute type 10 has an invalid length. [ 513.685529][T13726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2200'. [ 513.806061][T13726] caif0: entered promiscuous mode [ 513.845650][T13726] caif0: entered allmulticast mode [ 513.857257][T13726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.532833][T13748] netlink: 'syz.3.2205': attribute type 4 has an invalid length. [ 514.583688][T13748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2205'. [ 515.908179][T13792] netlink: 'syz.1.2219': attribute type 4 has an invalid length. [ 515.916748][T13792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2219'. [ 516.234267][T13792] .`: renamed from bond0 (while UP) [ 516.330135][T13801] netlink: 'syz.3.2220': attribute type 10 has an invalid length. [ 516.394972][T13801] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2220'. [ 516.744419][T13809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2223'. [ 517.179251][T12132] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 518.052875][T13831] netlink: 'syz.4.2230': attribute type 1 has an invalid length. [ 518.081484][T13831] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2230'. [ 518.210249][T13831] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2230'. [ 518.282725][T13833] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2229'. [ 519.910140][T13865] netlink: 'syz.1.2238': attribute type 29 has an invalid length. [ 519.934824][T13865] netlink: 'syz.1.2238': attribute type 29 has an invalid length. [ 520.019136][T13867] netlink: 'syz.4.2240': attribute type 2 has an invalid length. [ 520.079010][T13870] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2240'. [ 520.089132][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 521.202323][T13870] bond0: (slave dummy0): Releasing backup interface [ 521.224556][T13870] dummy0 (unregistering): left promiscuous mode [ 521.251785][T13870] dummy0 (unregistering): left allmulticast mode [ 521.469292][T13882] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2242'. [ 521.488670][T12143] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 521.641150][T13886] netlink: 'syz.1.2244': attribute type 9 has an invalid length. [ 521.658857][T13886] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2244'. [ 521.771793][T13887] netlink: 'syz.1.2244': attribute type 9 has an invalid length. [ 521.816988][T13887] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2244'. [ 523.162040][T13933] netlink: 'syz.1.2257': attribute type 10 has an invalid length. [ 523.189125][T13933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.294082][T13933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.454163][ T5777] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 523.462346][T13933] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 525.107117][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 526.234208][T12130] wlan1: Creating new IBSS network, BSSID 9a:30:db:92:b6:9c [ 526.454028][T13957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2264'. [ 526.658219][T13964] pim6reg1: entered promiscuous mode [ 526.676215][T13964] pim6reg1: entered allmulticast mode [ 527.672856][T13997] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2272'. [ 528.080307][T14005] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2275'. [ 528.089751][T14005] netlink: get zone limit has 4 unknown bytes [ 528.149623][T14005] netlink: 'syz.4.2275': attribute type 3 has an invalid length. [ 528.163914][T14005] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2275'. [ 528.174402][T14008] netlink: 'syz.3.2278': attribute type 4 has an invalid length. [ 528.186467][T14002] delete_channel: no stack [ 528.269680][T14009] netlink: 'syz.2.2277': attribute type 10 has an invalid length. [ 529.316190][T14038] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 529.392874][T14038] netlink: 'syz.4.2286': attribute type 3 has an invalid length. [ 529.430555][T14038] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2286'. [ 529.996851][T14063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.005276][T14063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.061472][T12130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.113034][T14086] netlink: 'syz.4.2300': attribute type 4 has an invalid length. [ 531.152562][T14103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 531.163731][T14103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 531.173035][T14103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 531.183825][T14103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 531.192865][T14103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 531.213140][T14103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 531.225124][T12130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.319169][T12130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.448031][T12130] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.795608][T14115] netlink: 'syz.1.2306': attribute type 7 has an invalid length. [ 531.885098][T14100] chnl_net:caif_netlink_parms(): no params data found [ 532.081354][T10246] wlan1: Trigger new scan to find an IBSS to join [ 532.312107][T14124] syzkaller0: entered promiscuous mode [ 532.326479][T14124] syzkaller0: entered allmulticast mode [ 532.383685][T14129] sock: sock_timestamping_bind_phc: sock not bind to device [ 532.639865][T14100] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.647960][T14100] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.655194][T14100] bridge_slave_0: entered allmulticast mode [ 532.662712][T14100] bridge_slave_0: entered promiscuous mode [ 532.746432][T14100] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.787136][T14100] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.794417][T14100] bridge_slave_1: entered allmulticast mode [ 532.819887][T14100] bridge_slave_1: entered promiscuous mode [ 532.850903][T14145] netlink: 'syz.4.2312': attribute type 21 has an invalid length. [ 532.879973][T14145] netlink: 'syz.4.2312': attribute type 11 has an invalid length. [ 532.972413][T14146] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2313'. [ 533.103685][T14100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.163834][T14100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.267357][ T5777] Bluetooth: hci1: command tx timeout [ 533.532276][T14100] team0: Port device team_slave_0 added [ 533.560642][T14100] team0: Port device team_slave_1 added [ 533.742671][T14100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.767101][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.837093][T14100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.869343][T14100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.895964][T14100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.990890][T14100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.491805][T14100] hsr_slave_0: entered promiscuous mode [ 534.509540][T14100] hsr_slave_1: entered promiscuous mode [ 534.529821][T14100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.548332][T14100] Cannot create hsr debugfs directory [ 535.042533][T14214] netlink: 'syz.1.2328': attribute type 4 has an invalid length. [ 535.053318][T14214] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2328'. [ 535.347323][ T5777] Bluetooth: hci1: command tx timeout [ 535.561483][T12130] veth1_to_team: left allmulticast mode [ 535.600248][T12130] veth1_to_team: left promiscuous mode [ 535.614263][T12130] @: port 1(veth1_to_team) entered disabled state [ 535.655145][T12130] hsr_slave_0: left promiscuous mode [ 535.678509][T12130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.695684][T12130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.723263][T12130] hsr0: left allmulticast mode [ 535.733492][T12130] bridge0: port 3(hsr0) entered disabled state [ 535.749554][T12130] bridge_slave_0: left allmulticast mode [ 535.765284][T12130] bridge_slave_0: left promiscuous mode [ 535.778200][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.037064][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 537.139621][T14243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.431609][ T5777] Bluetooth: hci1: command tx timeout [ 537.642729][T14251] netlink: 13439 bytes leftover after parsing attributes in process `syz.3.2337'. [ 537.854996][T14100] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 537.910910][T14260] netlink: 'syz.1.2339': attribute type 46 has an invalid length. [ 537.949805][T14260] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2339'. [ 537.996474][T14100] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 538.074274][T14100] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.090590][T12143] wlan1: Creating new IBSS network, BSSID 1a:b2:d7:ea:f0:c9 [ 538.103728][T14100] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.226521][T14280] netlink: 'syz.3.2342': attribute type 29 has an invalid length. [ 538.265769][T14280] netlink: 'syz.3.2342': attribute type 29 has an invalid length. [ 538.324057][T14280] netlink: 'syz.3.2342': attribute type 29 has an invalid length. [ 538.344209][T14280] netlink: 'syz.3.2342': attribute type 29 has an invalid length. [ 538.448085][T14100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.493254][T14100] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.566267][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.573585][T12130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.639590][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.646802][T12130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.460101][T14316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2351'. [ 539.498207][T14318] netlink: 'syz.1.2352': attribute type 10 has an invalid length. [ 539.508199][T14103] Bluetooth: hci1: command tx timeout [ 539.510054][T14318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2352'. [ 539.533087][T14318] team0: entered promiscuous mode [ 539.541052][T14318] team_slave_0: entered promiscuous mode [ 539.546938][T14318] team_slave_1: entered promiscuous mode [ 539.552768][T14318] team0: entered allmulticast mode [ 539.558866][T14318] team_slave_0: entered allmulticast mode [ 539.564627][T14318] team_slave_1: entered allmulticast mode [ 539.571833][T14318] .`: (slave team0): Releasing backup interface [ 539.587163][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 539.595400][T14318] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 539.740937][T14100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.933136][T14100] veth0_vlan: entered promiscuous mode [ 539.965613][T14100] veth1_vlan: entered promiscuous mode [ 540.170716][T14100] veth0_macvtap: entered promiscuous mode [ 540.203333][T14100] veth1_macvtap: entered promiscuous mode [ 540.300315][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.366946][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.415923][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.465300][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.498765][T14100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.525326][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.547528][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.609972][T14100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.673649][T14100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.715091][T14100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.779664][T14100] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.828031][T14100] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.874657][T14100] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.905457][T14100] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.248506][T12144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.276338][T12144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.490459][T12144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.530773][T12144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.493646][T14395] tap0: tun_chr_ioctl cmd 2147767520 [ 542.878388][T12144] tipc: Subscription rejected, illegal request [ 542.888448][T14415] netlink: 'syz.2.2371': attribute type 19 has an invalid length. [ 543.125739][T14418] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2372'. [ 543.178183][T14418] netlink: 'syz.3.2372': attribute type 10 has an invalid length. [ 543.548336][T14428] netlink: 'syz.3.2374': attribute type 21 has an invalid length. [ 543.620814][T14428] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2374'. [ 543.748456][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 543.797862][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 543.810227][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 543.829096][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 543.838821][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 543.846235][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 544.201161][T12144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.240795][T14444] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2377'. [ 544.255736][T14444] openvswitch: netlink: Flow key attr not present in new flow. [ 544.612300][T12144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.833267][T12144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.892809][T14461] netlink: 'syz.3.2380': attribute type 1 has an invalid length. [ 544.917317][T14461] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2380'. [ 545.017677][T14463] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2381'. [ 545.058988][T12144] .`: (slave netdevsim0): Releasing backup interface [ 545.068243][T12144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.166161][T14432] chnl_net:caif_netlink_parms(): no params data found [ 545.216209][T14471] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 545.304136][T14471] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 545.327303][T14472] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 545.335923][T14478] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 545.376351][T14471] netlink: 'syz.3.2382': attribute type 29 has an invalid length. [ 545.622342][T14486] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 545.654404][T14486] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 545.717134][T14432] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.727370][T14432] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.748082][T14432] bridge_slave_0: entered allmulticast mode [ 545.762090][T14432] bridge_slave_0: entered promiscuous mode [ 545.860138][T14432] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.877031][T14432] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.884284][T14432] bridge_slave_1: entered allmulticast mode [ 545.904362][T14432] bridge_slave_1: entered promiscuous mode [ 545.911221][ T5783] Bluetooth: hci3: command tx timeout [ 546.005094][T14499] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2389'. [ 546.357684][T14511] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2390'. [ 547.001794][T14432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.056612][T14432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.073858][T14509] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 547.086531][T14509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2388'. [ 547.100620][T14509] batman_adv: batadv0: Adding interface: virt_wifi0 [ 547.119372][T14509] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.164621][T14509] batman_adv: batadv0: Interface activated: virt_wifi0 [ 547.345832][T14527] netlink: 'syz.2.2392': attribute type 11 has an invalid length. [ 547.363388][T14527] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2392'. [ 547.376762][T14527] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 547.486454][T14432] team0: Port device team_slave_0 added [ 547.629204][T14432] team0: Port device team_slave_1 added [ 547.652352][T14528] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2392'. [ 547.817000][T14432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.866925][T14432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.940540][T14432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.987623][T14432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.997168][ T5783] Bluetooth: hci3: command tx timeout [ 548.037230][T14432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.105257][T14432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.143175][T14545] validate_nla: 1 callbacks suppressed [ 548.143212][T14545] netlink: 'syz.2.2397': attribute type 21 has an invalid length. [ 548.209511][T14545] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2397'. [ 548.263765][T14550] netlink: 'syz.3.2398': attribute type 20 has an invalid length. [ 548.311275][T12126] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.565779][T14432] hsr_slave_0: entered promiscuous mode [ 548.630601][T14432] hsr_slave_1: entered promiscuous mode [ 548.670535][T14432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.693318][T14432] Cannot create hsr debugfs directory [ 549.190795][T14588] netlink: 'syz.2.2405': attribute type 12 has an invalid length. [ 549.213278][T14588] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2405'. [ 550.067074][ T5783] Bluetooth: hci3: command tx timeout [ 550.453590][T14622] netlink: 'syz.3.2411': attribute type 27 has an invalid length. [ 550.487307][T14622] netlink: 'syz.3.2411': attribute type 4 has an invalid length. [ 550.495096][T14622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2411'. [ 551.101862][T12144] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 551.174503][T12144] team_slave_1 (unregistering): left promiscuous mode [ 551.184525][T12144] team_slave_1 (unregistering): left allmulticast mode [ 551.204199][T12144] team0 (unregistering): Port device team_slave_1 removed [ 551.281641][T12144] team_slave_0 (unregistering): left promiscuous mode [ 551.288756][T12144] team_slave_0 (unregistering): left allmulticast mode [ 551.300657][T12144] team0 (unregistering): Port device team_slave_0 removed [ 551.362851][T12144] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.861482][T12144] .` (unregistering): Released all slaves [ 551.902737][T14620] netlink: 'syz.4.2409': attribute type 21 has an invalid length. [ 551.914464][T14620] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2409'. [ 552.147151][ T5783] Bluetooth: hci3: command tx timeout [ 552.182816][T14432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 552.228647][T14432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 552.263105][T14432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 552.273897][T14638] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2414'. [ 552.293009][ T5783] Bluetooth: hci4: ISO packet for unknown connection handle 1854 [ 552.315582][T14432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 552.581343][T14432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.675124][T14432] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.739043][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.746257][T12126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.778366][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.785575][T12126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.003677][T14667] netlink: 'syz.3.2421': attribute type 3 has an invalid length. [ 553.037060][T14667] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2421'. [ 553.485256][T14432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.813450][T14432] veth0_vlan: entered promiscuous mode [ 553.835884][T14432] veth1_vlan: entered promiscuous mode [ 553.885984][T14698] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2426'. [ 554.001640][T14432] veth0_macvtap: entered promiscuous mode [ 554.110593][T14432] veth1_macvtap: entered promiscuous mode [ 554.125677][T14704] netlink: 'syz.3.2428': attribute type 22 has an invalid length. [ 554.280876][T14432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.310087][T14432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.323307][T14710] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2427'. [ 554.333251][T14432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.347956][T14432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.359693][T14432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.377468][T14432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.527334][T14432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.568883][T14432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.593306][T14432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.616307][T14432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.646897][T14432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.656792][T14432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 554.686926][T14432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.713648][T14432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.741384][T14432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.766227][T14432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.777066][T14432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.796933][T14432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.900960][T14715] netlink: 'syz.3.2429': attribute type 1 has an invalid length. [ 554.914516][T14715] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2429'. [ 554.937671][T14715] netlink: 'syz.3.2429': attribute type 1 has an invalid length. [ 555.853834][T14731] netlink: 'syz.3.2432': attribute type 12 has an invalid length. [ 555.913003][T14731] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.2432'. [ 555.913597][T12144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.964006][T14736] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2432'. [ 555.977313][T12144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.114879][T12143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.136923][T12143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.308673][ T1141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 557.383759][T14803] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2442'. [ 559.317475][T14840] netlink: 'syz.3.2448': attribute type 11 has an invalid length. [ 561.391471][T14889] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2452'. [ 561.710101][T14898] netlink: 'syz.1.2454': attribute type 11 has an invalid length. [ 561.720025][T14898] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2454'. [ 561.762986][T14899] netlink: 'syz.1.2454': attribute type 4 has an invalid length. [ 561.817470][T14899] netlink: 174100 bytes leftover after parsing attributes in process `syz.1.2454'. [ 562.191958][T14901] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2456'. [ 562.486900][T14922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2459'. [ 562.547364][T14922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2459'. [ 563.113567][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.120235][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.718984][T14946] netlink: 'syz.3.2466': attribute type 11 has an invalid length. [ 564.087535][T14958] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2467'. [ 564.659274][T14968] netlink: 'syz.3.2472': attribute type 39 has an invalid length. [ 567.415251][T14975] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2474'. [ 568.099630][T10247] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 568.226658][T15000] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2481'. [ 568.483722][T15011] netlink: 'syz.4.2487': attribute type 2 has an invalid length. [ 568.500105][T15011] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2487'. [ 569.040821][T15017] netlink: 'syz.4.2489': attribute type 21 has an invalid length. [ 569.438568][T15034] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2495'. [ 569.920403][T15041] netlink: 'syz.2.2496': attribute type 22 has an invalid length. [ 570.326752][T15060] netlink: 'syz.2.2502': attribute type 21 has an invalid length. [ 570.337889][T15060] IPv6: NLM_F_CREATE should be specified when creating new route [ 570.345807][T15060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.353146][T15060] IPv6: NLM_F_CREATE should be set when creating new route [ 570.360539][T15060] IPv6: NLM_F_CREATE should be set when creating new route [ 570.367824][T15060] IPv6: NLM_F_CREATE should be set when creating new route [ 570.376624][T15060] netlink: 'syz.2.2502': attribute type 21 has an invalid length. [ 570.385613][T15060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 570.674315][T15065] netlink: 'syz.3.2503': attribute type 21 has an invalid length. [ 570.694867][T15065] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2503'. [ 570.989912][T15071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2507'. [ 571.102245][T15071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 571.254421][T15075] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.2505'. [ 571.290308][T15078] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.2505'. [ 572.397234][T15102] pim6reg1: entered promiscuous mode [ 572.412807][T15102] pim6reg1: entered allmulticast mode [ 573.587461][T15129] bridge0: entered promiscuous mode [ 573.592761][T15129] bridge0: entered allmulticast mode [ 574.566588][T15153] Ÿë: port 1(veth0_to_team) entered blocking state [ 574.621044][T15153] Ÿë: port 1(veth0_to_team) entered disabled state [ 574.645331][T15153] veth0_to_team: entered allmulticast mode [ 574.675710][T15153] veth0_to_team: entered promiscuous mode [ 575.337816][T15159] netlink: 'syz.2.2532': attribute type 10 has an invalid length. [ 575.390333][T15159] team0: Device ipvlan1 failed to register rx_handler [ 577.245166][T15187] netlink: 'syz.2.2541': attribute type 10 has an invalid length. [ 577.383230][T15187] team0: Port device macvlan0 added [ 577.653387][T15193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2542'. [ 577.770353][T15198] syzkaller0: entered promiscuous mode [ 577.775922][T15198] syzkaller0: entered allmulticast mode [ 577.906506][T15201] netlink: 'syz.3.2545': attribute type 3 has an invalid length. [ 577.915262][T15201] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2545'. [ 579.339283][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.694287][T15233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.822850][T15243] netlink: 'syz.3.2557': attribute type 2 has an invalid length. [ 580.846415][T15243] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2557'. [ 581.296485][T15254] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2560'. [ 582.391343][T15288] netlink: set zone limit has 8 unknown bytes [ 582.400197][T15290] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 582.695493][T15290] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 582.706406][T15292] netlink: 'syz.3.2569': attribute type 29 has an invalid length. [ 582.732712][T15297] netlink: 'syz.2.2571': attribute type 29 has an invalid length. [ 582.743900][T15297] netlink: 'syz.2.2571': attribute type 29 has an invalid length. [ 582.754431][T15297] netlink: 'syz.2.2571': attribute type 29 has an invalid length. [ 582.763609][T15297] netlink: 'syz.2.2571': attribute type 29 has an invalid length. [ 582.772922][T15297] netlink: 'syz.2.2571': attribute type 29 has an invalid length. [ 584.174437][T10247] wlan1: Trigger new scan to find an IBSS to join [ 584.357860][T15322] netlink: 'syz.3.2579': attribute type 25 has an invalid length. [ 584.377991][T15322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2579'. [ 584.426818][T15322] IPv6: NLM_F_CREATE should be specified when creating new route [ 584.435449][T15322] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2579'. [ 584.754576][T15333] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2582'. [ 585.361924][T15344] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 585.422813][T15344] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 586.839598][T15374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2596'. [ 587.915830][T15392] validate_nla: 1 callbacks suppressed [ 587.915848][T15392] netlink: 'syz.3.2602': attribute type 9 has an invalid length. [ 587.935523][T15392] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2602'. [ 590.758893][T15394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.664003][ C1] ================================================================== [ 591.664017][ C1] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 591.664056][ C1] Write of size 72 at addr ffff888024d15f90 by task syz.1.2608/15416 [ 591.664071][ C1] [ 591.664077][ C1] CPU: 1 PID: 15416 Comm: syz.1.2608 Not tainted syzkaller #0 [ 591.664093][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.664104][ C1] Call Trace: [ 591.664111][ C1] <#DB> [ 591.664119][ C1] dump_stack_lvl+0x18c/0x250 [ 591.664149][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 591.664170][ C1] ? show_regs_print_info+0x20/0x20 [ 591.664215][ C1] ? load_image+0x420/0x420 [ 591.664241][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 591.664267][ C1] ? __virt_addr_valid+0x18c/0x540 [ 591.664291][ C1] ? __virt_addr_valid+0x469/0x540 [ 591.664317][ C1] print_report+0xa8/0x210 [ 591.664343][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 591.664364][ C1] kasan_report+0x117/0x150 [ 591.664389][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 591.664418][ C1] kasan_check_range+0x241/0x290 [ 591.664442][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 591.664466][ C1] __asan_memcpy+0x40/0x70 [ 591.664493][ C1] __bpf_get_stackid+0x6bf/0x900 [ 591.664523][ C1] bpf_get_stackid_pe+0x343/0x410 [ 591.664552][ C1] bpf_prog_ebdd8313a69a195f+0x30/0x45 [ 591.664572][ C1] bpf_overflow_handler+0x1fc/0x510 [ 591.664602][ C1] ? __perf_event_overflow+0x4f8/0x630 [ 591.664621][ C1] ? bpf_overflow_handler+0xde/0x510 [ 591.664648][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 591.664679][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 591.664703][ C1] __perf_event_overflow+0x447/0x630 [ 591.664729][ C1] perf_swevent_event+0x319/0x570 [ 591.664753][ C1] ? perf_tp_event+0x1520/0x1520 [ 591.664773][ C1] ? trace_call_bpf+0x5e9/0x6c0 [ 591.664800][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 591.664840][ C1] perf_bp_event+0x319/0x430 [ 591.664866][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 591.664886][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 591.664930][ C1] ? lock_acquire+0x2c2/0x420 [ 591.664957][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 591.664985][ C1] notifier_call_chain+0x197/0x380 [ 591.665011][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 591.665036][ C1] atomic_notifier_call_chain+0xda/0x180 [ 591.665061][ C1] notify_die+0x145/0x1a0 [ 591.665086][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 591.665116][ C1] ? rcu_is_watching+0x15/0xb0 [ 591.665143][ C1] notify_debug+0x2e/0x50 [ 591.665161][ C1] exc_debug+0xde/0x140 [ 591.665181][ C1] asm_exc_debug+0x1e/0x40 [ 591.665203][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 591.665223][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 591.665240][ C1] RSP: 0018:ffffc900100979b8 EFLAGS: 00050206 [ 591.665258][ C1] RAX: ffffffff84284501 RBX: 1ffff92002012fb7 RCX: 0000000000000e40 [ 591.665271][ C1] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff88805748a1c0 [ 591.665285][ C1] RBP: ffffc90010097b50 R08: ffff88805748afff R09: 1ffff1100ae915ff [ 591.665298][ C1] R10: dffffc0000000000 R11: ffffed100ae91600 R12: ffff88805748a000 [ 591.665311][ C1] R13: 0000200000000180 R14: 0000200000001180 R15: 0000000000001000 [ 591.665329][ C1] ? copy_page_from_iter_atomic+0x2c1/0x1580 [ 591.665365][ C1] [ 591.665370][ C1] [ 591.665375][ C1] copy_page_from_iter_atomic+0x30a/0x1580 [ 591.665404][ C1] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 591.665438][ C1] ? iov_iter_zero+0x1170/0x1170 [ 591.665482][ C1] ? shmem_write_begin+0x1cf/0x420 [ 591.665505][ C1] generic_perform_write+0x353/0x5c0 [ 591.665535][ C1] ? generic_file_direct_write+0x3e0/0x3e0 [ 591.665554][ C1] ? down_write+0x16e/0x200 [ 591.665594][ C1] ? file_update_time+0x98/0x1a0 [ 591.665617][ C1] shmem_file_write_iter+0xfb/0x120 [ 591.665642][ C1] vfs_write+0x46c/0x990 [ 591.665670][ C1] ? file_end_write+0x250/0x250 [ 591.665698][ C1] ? __fget_files+0x43d/0x4b0 [ 591.665729][ C1] ? __fdget_pos+0x2a3/0x330 [ 591.665751][ C1] ? ksys_write+0x75/0x260 [ 591.665777][ C1] ksys_write+0x150/0x260 [ 591.665803][ C1] ? __ia32_sys_read+0x90/0x90 [ 591.665836][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 591.665866][ C1] do_syscall_64+0x55/0xa0 [ 591.665881][ C1] ? clear_bhb_loop+0x40/0x90 [ 591.665903][ C1] ? clear_bhb_loop+0x40/0x90 [ 591.665926][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.665948][ C1] RIP: 0033:0x7fb7cbd9cdd9 [ 591.665963][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.665979][ C1] RSP: 002b:00007fb7ccc4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.665997][ C1] RAX: ffffffffffffffda RBX: 00007fb7cc015fa0 RCX: 00007fb7cbd9cdd9 [ 591.666010][ C1] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 000000000000000c [ 591.666021][ C1] RBP: 00007fb7cbe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 591.666032][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.666043][ C1] R13: 00007fb7cc016038 R14: 00007fb7cc015fa0 R15: 00007fff52d03758 [ 591.666065][ C1] [ 591.666072][ C1] [ 591.666074][ C1] Allocated by task 15416: [ 591.666090][ C1] kasan_set_track+0x4e/0x70 [ 591.666110][ C1] __kasan_kmalloc+0x8f/0xa0 [ 591.666128][ C1] __kmalloc_node+0xb4/0x230 [ 591.666150][ C1] bpf_map_area_alloc+0x5e/0x110 [ 591.666174][ C1] prealloc_elems_and_freelist+0x86/0x1c0 [ 591.666195][ C1] stack_map_alloc+0x33a/0x4c0 [ 591.666214][ C1] map_create+0x877/0x12f0 [ 591.666229][ C1] __sys_bpf+0x651/0x890 [ 591.666245][ C1] __x64_sys_bpf+0x7c/0x90 [ 591.666259][ C1] do_syscall_64+0x55/0xa0 [ 591.666272][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.666292][ C1] [ 591.666295][ C1] Last potentially related work creation: [ 591.666300][ C1] kasan_save_stack+0x3e/0x60 [ 591.666317][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 591.666338][ C1] call_rcu+0x153/0x950 [ 591.666359][ C1] __nf_register_net_hook+0x788/0x910 [ 591.666379][ C1] nf_register_net_hook+0xb2/0x190 [ 591.666398][ C1] nf_register_net_hooks+0x44/0x1b0 [ 591.666418][ C1] ebt_register_table+0xcec/0x10b0 [ 591.666436][ C1] find_inlist_lock_noload+0x178/0x260 [ 591.666455][ C1] do_ebt_get_ctl+0x2d6/0x1d80 [ 591.666473][ C1] nf_getsockopt+0x262/0x280 [ 591.666494][ C1] ip_getsockopt+0x19f/0x230 [ 591.666511][ C1] do_sock_getsockopt+0x379/0x450 [ 591.666526][ C1] __x64_sys_getsockopt+0x1d6/0x280 [ 591.666548][ C1] do_syscall_64+0x55/0xa0 [ 591.666561][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.666580][ C1] [ 591.666583][ C1] Second to last potentially related work creation: [ 591.666589][ C1] kasan_save_stack+0x3e/0x60 [ 591.666605][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 591.666627][ C1] call_rcu+0x153/0x950 [ 591.666647][ C1] __nf_register_net_hook+0x788/0x910 [ 591.666667][ C1] nf_register_net_hook+0xb2/0x190 [ 591.666686][ C1] nf_register_net_hooks+0x44/0x1b0 [ 591.666706][ C1] nf_ct_netns_do_get+0x213/0x5c0 [ 591.666725][ C1] nf_ct_netns_inet_get+0x3b/0x150 [ 591.666745][ C1] nf_conncount_init+0x127/0x380 [ 591.666761][ C1] ovs_ct_init+0x316/0x490 [ 591.666780][ C1] ovs_init_net+0x1e6/0x250 [ 591.666803][ C1] ops_init+0x397/0x640 [ 591.666836][ C1] setup_net+0x3b6/0xa30 [ 591.666857][ C1] copy_net_ns+0x36d/0x5e0 [ 591.666880][ C1] create_new_namespaces+0x3d3/0x6f0 [ 591.666898][ C1] copy_namespaces+0x430/0x4a0 [ 591.666915][ C1] copy_process+0x1724/0x3d80 [ 591.666932][ C1] kernel_clone+0x24b/0x8a0 [ 591.666948][ C1] __x64_sys_clone+0x1b7/0x230 [ 591.666965][ C1] do_syscall_64+0x55/0xa0 [ 591.666978][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.666998][ C1] [ 591.667001][ C1] The buggy address belongs to the object at ffff888024d15f80 [ 591.667001][ C1] which belongs to the cache kmalloc-cg-64 of size 64 [ 591.667016][ C1] The buggy address is located 16 bytes inside of [ 591.667016][ C1] allocated 40-byte region [ffff888024d15f80, ffff888024d15fa8) [ 591.667034][ C1] [ 591.667037][ C1] The buggy address belongs to the physical page: [ 591.667050][ C1] page:ffffea0000934540 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24d15 [ 591.667069][ C1] memcg:ffff888079995e01 [ 591.667086][ C1] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 591.667100][ C1] page_type: 0xffffffff() [ 591.667118][ C1] raw: 00fff00000000800 ffff888017c4da00 ffffea0000bee400 0000000000000002 [ 591.667133][ C1] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888079995e01 [ 591.667141][ C1] page dumped because: kasan: bad access detected [ 591.667152][ C1] page_owner tracks the page as allocated [ 591.667157][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 8496, tgid 8496 (syz-executor), ts 344214988529, free_ts 344214617988 [ 591.667185][ C1] post_alloc_hook+0x1c1/0x200 [ 591.667209][ C1] get_page_from_freelist+0x1951/0x19e0 [ 591.667224][ C1] __alloc_pages+0x1f0/0x460 [ 591.667237][ C1] alloc_slab_page+0x5d/0x160 [ 591.667251][ C1] new_slab+0x87/0x2d0 [ 591.667263][ C1] ___slab_alloc+0xc5d/0x12f0 [ 591.667286][ C1] __kmem_cache_alloc_node+0x19e/0x250 [ 591.667309][ C1] kmalloc_trace+0x2a/0xe0 [ 591.667330][ C1] alloc_fdtable+0xca/0x2c0 [ 591.667349][ C1] dup_fd+0x786/0xa50 [ 591.667372][ C1] copy_files+0xc3/0x120 [ 591.667387][ C1] copy_process+0x15ab/0x3d80 [ 591.667403][ C1] kernel_clone+0x24b/0x8a0 [ 591.667419][ C1] __x64_sys_clone+0x1b7/0x230 [ 591.667435][ C1] do_syscall_64+0x55/0xa0 [ 591.667448][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.667467][ C1] page last free stack trace: [ 591.667471][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 591.667494][ C1] free_unref_page+0x32/0x2e0 [ 591.667517][ C1] vfree+0x1a6/0x320 [ 591.667535][ C1] do_ip6t_get_ctl+0xf21/0x1210 [ 591.667553][ C1] nf_getsockopt+0x262/0x280 [ 591.667573][ C1] ipv6_getsockopt+0x226/0x2e0 [ 591.667588][ C1] do_sock_getsockopt+0x379/0x450 [ 591.667603][ C1] __x64_sys_getsockopt+0x1d6/0x280 [ 591.667617][ C1] do_syscall_64+0x55/0xa0 [ 591.667630][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.667649][ C1] [ 591.667651][ C1] Memory state around the buggy address: [ 591.667658][ C1] ffff888024d15e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 591.667666][ C1] ffff888024d15f00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 591.667675][ C1] >ffff888024d15f80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 591.667694][ C1] ^ [ 591.667702][ C1] ffff888024d16000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 591.667713][ C1] ffff888024d16080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 591.667720][ C1] ================================================================== [ 591.667735][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 591.667742][ C1] CPU: 1 PID: 15416 Comm: syz.1.2608 Not tainted syzkaller #0 [ 591.667758][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.667767][ C1] Call Trace: [ 591.667773][ C1] <#DB> [ 591.667779][ C1] dump_stack_lvl+0x18c/0x250 [ 591.667831][ C1] ? show_regs_print_info+0x20/0x20 [ 591.667858][ C1] ? load_image+0x420/0x420 [ 591.667890][ C1] panic+0x2dc/0x730 [ 591.667911][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 591.667933][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 591.667958][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 591.667980][ C1] ? _raw_spin_unlock+0x40/0x40 [ 591.668002][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 591.668023][ C1] check_panic_on_warn+0x84/0xa0 [ 591.668044][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 591.668065][ C1] end_report+0x6f/0x130 [ 591.668085][ C1] kasan_report+0x128/0x150 [ 591.668106][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 591.668133][ C1] kasan_check_range+0x241/0x290 [ 591.668153][ C1] ? __bpf_get_stackid+0x6bf/0x900 [ 591.668175][ C1] __asan_memcpy+0x40/0x70 [ 591.668199][ C1] __bpf_get_stackid+0x6bf/0x900 [ 591.668227][ C1] bpf_get_stackid_pe+0x343/0x410 [ 591.668254][ C1] bpf_prog_ebdd8313a69a195f+0x30/0x45 [ 591.668271][ C1] bpf_overflow_handler+0x1fc/0x510 [ 591.668298][ C1] ? __perf_event_overflow+0x4f8/0x630 [ 591.668316][ C1] ? bpf_overflow_handler+0xde/0x510 [ 591.668340][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 591.668369][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 591.668391][ C1] __perf_event_overflow+0x447/0x630 [ 591.668422][ C1] perf_swevent_event+0x319/0x570 [ 591.668444][ C1] ? perf_tp_event+0x1520/0x1520 [ 591.668462][ C1] ? trace_call_bpf+0x5e9/0x6c0 [ 591.668487][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 591.668516][ C1] perf_bp_event+0x319/0x430 [ 591.668539][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 591.668559][ C1] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 591.668599][ C1] ? lock_acquire+0x2c2/0x420 [ 591.668624][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 591.668650][ C1] notifier_call_chain+0x197/0x380 [ 591.668674][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 591.668697][ C1] atomic_notifier_call_chain+0xda/0x180 [ 591.668721][ C1] notify_die+0x145/0x1a0 [ 591.668743][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 591.668771][ C1] ? rcu_is_watching+0x15/0xb0 [ 591.668796][ C1] notify_debug+0x2e/0x50 [ 591.668819][ C1] exc_debug+0xde/0x140 [ 591.668839][ C1] asm_exc_debug+0x1e/0x40 [ 591.668857][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 591.668876][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 591.668908][ C1] RSP: 0018:ffffc900100979b8 EFLAGS: 00050206 [ 591.668923][ C1] RAX: ffffffff84284501 RBX: 1ffff92002012fb7 RCX: 0000000000000e40 [ 591.668936][ C1] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff88805748a1c0 [ 591.668948][ C1] RBP: ffffc90010097b50 R08: ffff88805748afff R09: 1ffff1100ae915ff [ 591.668961][ C1] R10: dffffc0000000000 R11: ffffed100ae91600 R12: ffff88805748a000 [ 591.668974][ C1] R13: 0000200000000180 R14: 0000200000001180 R15: 0000000000001000 [ 591.668992][ C1] ? copy_page_from_iter_atomic+0x2c1/0x1580 [ 591.669028][ C1] [ 591.669033][ C1] [ 591.669037][ C1] copy_page_from_iter_atomic+0x30a/0x1580 [ 591.669066][ C1] ? shmem_get_folio_gfp+0x26d8/0x2aa0 [ 591.669098][ C1] ? iov_iter_zero+0x1170/0x1170 [ 591.669132][ C1] ? shmem_write_begin+0x1cf/0x420 [ 591.669156][ C1] generic_perform_write+0x353/0x5c0 [ 591.669189][ C1] ? generic_file_direct_write+0x3e0/0x3e0 [ 591.669208][ C1] ? down_write+0x16e/0x200 [ 591.669233][ C1] ? file_update_time+0x98/0x1a0 [ 591.669256][ C1] shmem_file_write_iter+0xfb/0x120 [ 591.669279][ C1] vfs_write+0x46c/0x990 [ 591.669309][ C1] ? file_end_write+0x250/0x250 [ 591.669336][ C1] ? __fget_files+0x43d/0x4b0 [ 591.669367][ C1] ? __fdget_pos+0x2a3/0x330 [ 591.669390][ C1] ? ksys_write+0x75/0x260 [ 591.669416][ C1] ksys_write+0x150/0x260 [ 591.669442][ C1] ? __ia32_sys_read+0x90/0x90 [ 591.669470][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 591.669494][ C1] do_syscall_64+0x55/0xa0 [ 591.669509][ C1] ? clear_bhb_loop+0x40/0x90 [ 591.669532][ C1] ? clear_bhb_loop+0x40/0x90 [ 591.669556][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.669578][ C1] RIP: 0033:0x7fb7cbd9cdd9 [ 591.669592][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.669607][ C1] RSP: 002b:00007fb7ccc4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.669624][ C1] RAX: ffffffffffffffda RBX: 00007fb7cc015fa0 RCX: 00007fb7cbd9cdd9 [ 591.669637][ C1] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 000000000000000c [ 591.669648][ C1] RBP: 00007fb7cbe32d69 R08: 0000000000000000 R09: 0000000000000000 [ 591.669659][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.669669][ C1] R13: 00007fb7cc016038 R14: 00007fb7cc015fa0 R15: 00007fff52d03758 [ 591.669693][ C1] [ 591.670276][ C1] Kernel Offset: disabled