last executing test programs: 5m21.229404846s ago: executing program 0 (id=1744): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x592}}, @volatile={0x8, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x28) 5m21.029221652s ago: executing program 0 (id=1746): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfff}}, &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000006c000000760000000000000027000000ffffffff9500000000000000", @ANYRESOCT], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) 5m20.974930554s ago: executing program 0 (id=1747): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x8ab3}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140), 0x1f}, 0x4008001) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e060022003505d25a806f95a2f810ef7167c596be8c6303004800000037153e370248018000f01700d1bd", 0x2c}], 0x1}, 0x41040) 5m16.446536688s ago: executing program 0 (id=1754): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000140), 0x1003, r0}, 0x38) 5m15.642388122s ago: executing program 0 (id=1761): socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x50, 0x1, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0xb2, 0xe7, 0xb, 0x2, 0x0, 0x6c600000000, 0x8000, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp, 0x17320, 0x9, 0xfffffffa, 0x3, 0x0, 0x401, 0x1}, 0xffffffffffffffff, 0xc, r0, 0x7) 5m15.420113582s ago: executing program 0 (id=1763): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x3170fdf7a924cfe9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) r0 = syz_clone(0xc0000300, &(0x7f0000000a00)="71089467c6a72d932f8fb85a108b951b0231a6f924a6f54260c86d963d8864fb1e274dc40fa2815ad4422a8c36055d8866fdfa4a0c630bfab2f1d4846d5053bcaeac4783c10ee38ec1788206b2648e5750939d2dca3c63f540e9671f749184cbd7fa0743951b49f258e56cf30b46e2f57c666307eeae71b9879af3ce082e3ce4761f0a29ce13fe294aa14c2bc0f00ab1768a6ab791fc08ff9d508511cd86d4430c6821f4a3d790b7797046304ee176d3661b4baf62a2f0afcd83039d4f74efe4cd850a6111b6", 0xc6, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="4cd08484a01489c94d3523f9c24b08c7c7b5130ddd96d93a439537bbced31b6e8db0ce92c0a90bf59de560a93d07183a88aedd815058d4054a625ed053a2162af0c666a554f4962c5d9d53272c4bae267e5bed44066e332d6bdf96aea49038e40185b1642fb4f73b32aed6c63d9a638d75efdc74e64d9a30572a27b05787ab32") syz_open_procfs$namespace(r0, &(0x7f0000000c40)='ns/pid\x00') (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', 0x0}, 0x30) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20}) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r2}, 0x4) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, r1, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x26, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2294, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x48}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @generic={0xb, 0x7, 0xc, 0xde2e, 0xfffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='syzkaller\x00', 0xf20, 0x0, 0x0, 0x41000, 0x54, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xa, 0x1, 0x4}, 0x10, 0x29b31, r6, 0x1, &(0x7f00000008c0)=[r3, r7, r3, r1], &(0x7f0000000900)=[{0x1, 0x3, 0x4, 0x7}], 0x10, 0x800}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)='\"\xce4\xe4\xb4\xfeg\xa0\x8a\xe7!\xf9}@\x15\xab\xa3\xfdg>Q\b\xff0|\xfa\xce\x02\x00\x00\x00\x00\x00\x00\x00(<\x86\xc8@3\xeb\x9a\xd5\xf1\xc1\x7f\xca\x13\x90Z\xbb\x00Sv1\x8a#\xbdO\xf5b\xcah\x1f\x05\xd4\xe1\xfcR\xf7\x13\xfa-\xaaO\xab\xde\xff\xbe?\xacfv\xcf\xbb\b\xdf\x02\x00\x00\x00\x00\x00\x00\fk\b/\x06F\x95o:\xdd\x15\xe9`F\xf5\xa3\x8a,\x9f\x17\xca\xa8\x88\xcdwN&$j\xb5u\xed\xc0\x7f\n\t\x98\x9d1\x80\x86\x92\xea\xf4\x8d\t\xbf\xbb\xb9{\xa9\x00\x00\x00\x00\x00\x99\xda\xf6Og\xa8\vE\x00\x00\x1eEYMc\xd9\xf4\a.\xfe\xf2E;l\xf8\x8a4 \x126y\x0e^\xd8\x95K\xb0-\x01\x1d\xb0s\xadMB\x17\xbf\xa9\x1e\xec\x9a\x97\"\xc5KZ\x0f\xaf\x84<\x05\xb4\a\x9f0\x9c\xba\xc1\x96\xc7\x9a\x13rEZ\xc5ep\xe5~\x9b\x16h\xcda\x01\tU\xf25t\xe0\x87K\xc9\x14\x9ey\xd8\x93\xd4\x00\xa5L\xf7\x91\v2%\xdb*y\xed\xacp\xc9r\x92\xd6e\x9a~/\"\x8d<\x1a\x92\x19m\\\'\xa5.\x1c\xc9-\xdb\xbe3\xc0\b@\xc4\x1d@\xa5\xee\xee\xf1Akq(\xd5\x8c^\'\x16I4X>\xefU\xfa\xe1\vz\xb1\xdf)\xf7\xe4\xea\x879pP%\xb2wCn\xd4\xe7\xc0\xffJ)g:\xae\xe6\xed\xb0(\x11\xdcV\xf9\x8e\xd1\xaa`(3dC9\xea*\xd2\xe1j\xfd\xabWl\xf9_\x96!\x97c\xb4\x19+\xe8\x97\xf0\xdc\'\xbe\xcfO\x90A\x1f\x05\x15\x0e8TY\x81\nx\x04\x03$\x94yx\xb0\xe0\xf8\xb1\x93H\x06\xab\\\xde5\x8c\xae\xad/\x9a\xdd}\n\xb8\x0e\xa3\x06\x16\x9byYZ\xffTTXX\xa2\x87\x05\xb7\x175]\x14\x8f\x19\xe7CI\x88\x95\xeb\x81Q\x7f\x95\xfb\xdfl\x98\xea\x1a\xde\xaa\xdf\x94Q;p\xaf\x9a\x84\x8b\xd9XKQ`4u\x7fXo\xf2\a\xef\x8bn\"#\xc6\x19lM-\xeb8\xe7\xb1\x87\xb0=\xbf\"\x80\xd3\xa5\xe8\xf3\xc2h\xe2|\x14\xfau\xdc\xa2\xfc\xf4\x06y.\xf4\xe3$G \b\xd4\xc3\x99\xbf<\xdb\xef\x94\xe1\xec\x0fw\xc9\x02\xbaBa\'\x88\xa8:=\x8f\x8eb\xbe\xd0e\xea\xd2\xd8\xd2\xe9`\xea\xb8\xf3\x14') 5m0.012297711s ago: executing program 32 (id=1763): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x3170fdf7a924cfe9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) r0 = syz_clone(0xc0000300, &(0x7f0000000a00)="71089467c6a72d932f8fb85a108b951b0231a6f924a6f54260c86d963d8864fb1e274dc40fa2815ad4422a8c36055d8866fdfa4a0c630bfab2f1d4846d5053bcaeac4783c10ee38ec1788206b2648e5750939d2dca3c63f540e9671f749184cbd7fa0743951b49f258e56cf30b46e2f57c666307eeae71b9879af3ce082e3ce4761f0a29ce13fe294aa14c2bc0f00ab1768a6ab791fc08ff9d508511cd86d4430c6821f4a3d790b7797046304ee176d3661b4baf62a2f0afcd83039d4f74efe4cd850a6111b6", 0xc6, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="4cd08484a01489c94d3523f9c24b08c7c7b5130ddd96d93a439537bbced31b6e8db0ce92c0a90bf59de560a93d07183a88aedd815058d4054a625ed053a2162af0c666a554f4962c5d9d53272c4bae267e5bed44066e332d6bdf96aea49038e40185b1642fb4f73b32aed6c63d9a638d75efdc74e64d9a30572a27b05787ab32") syz_open_procfs$namespace(r0, &(0x7f0000000c40)='ns/pid\x00') (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', 0x0}, 0x30) (async) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20}) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r2}, 0x4) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', 0x0, r1, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x26, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2294, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x48}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @generic={0xb, 0x7, 0xc, 0xde2e, 0xfffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000300)='syzkaller\x00', 0xf20, 0x0, 0x0, 0x41000, 0x54, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000400)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0xa, 0x1, 0x4}, 0x10, 0x29b31, r6, 0x1, &(0x7f00000008c0)=[r3, r7, r3, r1], &(0x7f0000000900)=[{0x1, 0x3, 0x4, 0x7}], 0x10, 0x800}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)='\"\xce4\xe4\xb4\xfeg\xa0\x8a\xe7!\xf9}@\x15\xab\xa3\xfdg>Q\b\xff0|\xfa\xce\x02\x00\x00\x00\x00\x00\x00\x00(<\x86\xc8@3\xeb\x9a\xd5\xf1\xc1\x7f\xca\x13\x90Z\xbb\x00Sv1\x8a#\xbdO\xf5b\xcah\x1f\x05\xd4\xe1\xfcR\xf7\x13\xfa-\xaaO\xab\xde\xff\xbe?\xacfv\xcf\xbb\b\xdf\x02\x00\x00\x00\x00\x00\x00\fk\b/\x06F\x95o:\xdd\x15\xe9`F\xf5\xa3\x8a,\x9f\x17\xca\xa8\x88\xcdwN&$j\xb5u\xed\xc0\x7f\n\t\x98\x9d1\x80\x86\x92\xea\xf4\x8d\t\xbf\xbb\xb9{\xa9\x00\x00\x00\x00\x00\x99\xda\xf6Og\xa8\vE\x00\x00\x1eEYMc\xd9\xf4\a.\xfe\xf2E;l\xf8\x8a4 \x126y\x0e^\xd8\x95K\xb0-\x01\x1d\xb0s\xadMB\x17\xbf\xa9\x1e\xec\x9a\x97\"\xc5KZ\x0f\xaf\x84<\x05\xb4\a\x9f0\x9c\xba\xc1\x96\xc7\x9a\x13rEZ\xc5ep\xe5~\x9b\x16h\xcda\x01\tU\xf25t\xe0\x87K\xc9\x14\x9ey\xd8\x93\xd4\x00\xa5L\xf7\x91\v2%\xdb*y\xed\xacp\xc9r\x92\xd6e\x9a~/\"\x8d<\x1a\x92\x19m\\\'\xa5.\x1c\xc9-\xdb\xbe3\xc0\b@\xc4\x1d@\xa5\xee\xee\xf1Akq(\xd5\x8c^\'\x16I4X>\xefU\xfa\xe1\vz\xb1\xdf)\xf7\xe4\xea\x879pP%\xb2wCn\xd4\xe7\xc0\xffJ)g:\xae\xe6\xed\xb0(\x11\xdcV\xf9\x8e\xd1\xaa`(3dC9\xea*\xd2\xe1j\xfd\xabWl\xf9_\x96!\x97c\xb4\x19+\xe8\x97\xf0\xdc\'\xbe\xcfO\x90A\x1f\x05\x15\x0e8TY\x81\nx\x04\x03$\x94yx\xb0\xe0\xf8\xb1\x93H\x06\xab\\\xde5\x8c\xae\xad/\x9a\xdd}\n\xb8\x0e\xa3\x06\x16\x9byYZ\xffTTXX\xa2\x87\x05\xb7\x175]\x14\x8f\x19\xe7CI\x88\x95\xeb\x81Q\x7f\x95\xfb\xdfl\x98\xea\x1a\xde\xaa\xdf\x94Q;p\xaf\x9a\x84\x8b\xd9XKQ`4u\x7fXo\xf2\a\xef\x8bn\"#\xc6\x19lM-\xeb8\xe7\xb1\x87\xb0=\xbf\"\x80\xd3\xa5\xe8\xf3\xc2h\xe2|\x14\xfau\xdc\xa2\xfc\xf4\x06y.\xf4\xe3$G \b\xd4\xc3\x99\xbf<\xdb\xef\x94\xe1\xec\x0fw\xc9\x02\xbaBa\'\x88\xa8:=\x8f\x8eb\xbe\xd0e\xea\xd2\xd8\xd2\xe9`\xea\xb8\xf3\x14') 5.940442774s ago: executing program 1 (id=3194): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140), 0x1f}, 0x4008001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0xffffffffffffffff) r1 = getpid() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x40000004) sendmsg$tipc(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="e9623dfe0f747a9bab1ccbda126d1d347f32978c0fca747cf4e1470f60d8eb0a11e419d1ccdb196b7523065612a6ecdb", 0x30}, {&(0x7f0000000b00)="9b11a80b974e60df4aa8901d6aa0b636089fc5d73337e44e3e6f85e35d8e171720df80bf7bc8cec8d22a71217601d0bf6a41d41817f396df2b01232ac5bcd29f9ec395ede7369b16bf75341485af98788703b3a606acc4209e79c41453aabf395d437222a3f6fe9b3e", 0x69}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r3) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000012c0)="d80000001c0081044e81f782db44b9040239321b80cc3dd2a200e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e", 0xbe}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x26, 0xfffffffffffffda9, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5.543224114s ago: executing program 3 (id=3197): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x2, 0x0, 0x40, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_bp={&(0x7f0000000000), 0x9}, 0x8, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x1088, 0xc8, 0xe, 0xd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000003}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x800003}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0xec, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863330281e934a0a688a8a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a", 0x0, 0xfb, 0x60006000, 0x0, 0x69, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab7", 0x2}, 0x50) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xd) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0x4, r0, 0xb) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0, 0x8}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000010000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b05d25a806f8c6394f90424fc602f0017090a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x8102000) sendmsg$kcm(r1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4004800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x101, 0x10001, 0x9, 0x1}, 0x50) 5.145232625s ago: executing program 1 (id=3199): socket$kcm(0x29, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0xd3, 0x4, 0x2, 0x14, 0x0, 0x8, 0x200, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000500), 0xb}, 0x1488, 0x1, 0x81, 0x4, 0x2, 0x4, 0xc, 0x0, 0x800, 0x0, 0x1}, 0x0, 0xd, r0, 0x1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000006c0), 0x1}, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x5, 0x1, 0x8, &(0x7f00000007c0)) r5 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 5.099790786s ago: executing program 5 (id=3200): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0xd, 0x0, &(0x7f0000000900)="00dfb0c0fb1e168d6f7d578888", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300020551b008007a558641cb2900"/40], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.097898646s ago: executing program 2 (id=3201): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = syz_clone(0x19800, &(0x7f0000000000)="409fd79fb0ddf3534a0985096e83e2422994b599", 0x14, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000180)="7d21b216c1951ede3cbbc63c9e56a31cbd69628af93d23fbb081d71c811a33f45adfaa08703290d585442419ea691c336dcd16c4fa738a7dbe8ee4560b76a1e87e159510deada0b47f53") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r1, r0, 0x0, 0x2, &(0x7f0000000200)='[\x00'}, 0x30) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e02000000000000c4000000001000008500000008e2bbc48f66742f99348346f6123d2a79ca949ac55d9caede8b6631aa1e94c4750a8200004e9c4bbadaeca04b83c0f79bfafbf499fb21fe70680c4f8687d70fb306aab500"/103], 0x0, 0xf}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0xdd000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x10001, 0xffffffffffffff08}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)={'full', 0x20, 0xbd, 0x20, 0x7fff}, 0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0000008dedff000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/28], 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) recvmsg$unix(r3, &(0x7f0000001d40)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f00000003c0)=""/191, 0xbf}, {&(0x7f0000001d80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000001a00)=""/47, 0x2f}, {&(0x7f0000001c00)=""/94, 0x5e}], 0x5, &(0x7f0000001d00)}, 0x1) close(r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 5.019278064s ago: executing program 3 (id=3203): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x67}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000340)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xe, 0xfffffffa, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r3, r4], &(0x7f0000000580)=[{0x2, 0x3, 0x6, 0xc}, {0x4, 0x1, 0x1, 0x4}, {0x5, 0x2, 0x5, 0xc}, {0x5, 0x2, 0x7, 0x4}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r7, 0x6, 0x6, &(0x7f0000000140), 0x4) r8 = getpid() r9 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xa43, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x80020, 0x10000000ca, 0x2, 0x2, 0x1000000000000000, 0x1, 0x0, 0x0, 0x80000003, 0x0, 0xb}, r8, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYRES64=r9, @ANYBLOB='<'], 0x9a) 4.879533996s ago: executing program 2 (id=3204): r0 = socket$kcm(0x2, 0x7, 0x0) syz_clone(0x20100000, &(0x7f0000002a00), 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8000, 0x1148c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000180)="b9fff548600d", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x1}, 0x50) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)="b9374f", 0x3}], 0x1, &(0x7f0000000580)=[{0x10, 0x1, 0x2}], 0x10}, 0x42044) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r2, @ANYBLOB="3ee901"], 0x9a) recvmsg(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x1060) 4.833881296s ago: executing program 5 (id=3205): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x9, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{}, 0x0, 0x0}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x24) bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xb}, 0x4021, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000900)="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", 0x136}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x20000000) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) 4.833382756s ago: executing program 3 (id=3206): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000140), 0x1003, r0}, 0x38) 4.602298319s ago: executing program 1 (id=3207): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0xa3, 0x8, 0x5, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x4, 0x0, 0x0, 0x0, 0x7d, 0x83508, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c56, 0x1, @perf_bp={0x0, 0xe}, 0xec1, 0x204, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x800, 0x0, 0x4000000}, 0x0, 0x2, 0xffffffffffffffff, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xb5, 0xfd, 0x8001}]}) syz_clone(0x262a3500, 0x0, 0x2f, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000600), 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0xfffffffe, 0x9, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x11201, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x0, 0x10, 0x6, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4a05, 0x9}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x18870, 0x0, 0xc2ba, 0x0, 0x968d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1802820179274597f3000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) openat$cgroup_ro(r1, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) 4.187199164s ago: executing program 3 (id=3209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESDEC=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1000000004000000000000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0056457c1d687a2f4218000080000000000000000000000069000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0xffffffffffffffff) r5 = getpid() perf_event_open(0x0, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000012c0)="d80000001c0081044e81f782db44b9040239321b80cc3dd2a200e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9e", 0xbe}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x500}, 0x0, 0xffffffffffffffff, r3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a0603000000"], 0xfdef) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r9}, 0x20) recvmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/249, 0xf9}], 0x1}, 0x40000140) 4.092922076s ago: executing program 2 (id=3210): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x185, 0xfffffffc, 0x9, 0xb0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2040, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x38, &(0x7f0000000000)='/proc/snet/ipv5\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x80000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES32=r1, @ANYRES64=r2, @ANYRESHEX=r2, @ANYRESDEC, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1) recvmsg$kcm(r4, 0x0, 0x10020) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000a00)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.067816251s ago: executing program 5 (id=3211): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84000) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002d40), 0x5, 0x0, 0x3c}, 0x0) 3.132701555s ago: executing program 2 (id=3214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2c, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xa1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x21}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4b, 0x28, &(0x7f00000001c0)=""/40, 0x0, 0xa96d08fe101b84f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x0, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x2, 0x4, 0xb, 0x2}, {0x2, 0x3, 0x8, 0x2}], 0x10, 0x668}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xb4, 0x8d, &(0x7f0000000380)="cbfd1c1568ff88759a697e751db1e49c6d8da4e529802c905932aa7b2979c05d593a7b64658e79cf15b8cf904015454b9026408cad445f704fe026c650c3d5c4012ba2fa3a2c2f80008b0089bf179e905f9730cd2a880bd397d777ca1ba55613bbb4e3a0d7fcea65ef59f4f08df942361daf17abdb93d66676af305b2c6fae4772538941d5bc49c52860dc7e424ccd9439f8071e39facedd4e8ff84ad5c26855ba7014c0c910c4d5fa3498fe4fa3555c38ebd11f", &(0x7f0000000440)=""/141, 0x401, 0x0, 0x38, 0xfb, &(0x7f0000000500)="44435aa97f14eb7c6630fbae2c24474f9031d609174caf2d7891de729fff91d94ac5799dab6a0587a4fb2fec04c5f5e940b8fef4963b65f3", &(0x7f0000000540)="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", 0x6, 0x0, 0x8}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x14, 0x7, 0xe5, 0x9, 0x40a14, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x8, 0x5, 0x1, 0x44a00, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%-010d \x00'}, 0x20) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%+9llu \x00'}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x18, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff}, [@map_fd={0x18, 0xa}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000780)='syzkaller\x00', 0x800, 0x4e, &(0x7f00000007c0)=""/78, 0x100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0xd, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[r1, r2, r3, r4, r0, r5, r6, r7, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f0000000e00)) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x400000, 0x0) ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000e80)=r0) (async) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x1) (async) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r0, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x17, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x1d, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x87c}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x3c}, @map_val={0x18, 0x9, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xba}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000fc0)='GPL\x00', 0x6c9a4c11, 0x6c, &(0x7f0000001000)=""/108, 0x100, 0x20, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001380)={0x5, 0x0, 0x81, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f00000013c0)=[{0x3, 0x4, 0x4, 0x6}, {0x1, 0x5, 0x0, 0x5}, {0x3, 0x3, 0xa, 0xa}, {0x4, 0x5, 0x6, 0x8}], 0x10, 0x5}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r8}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001600)={{r2, 0xffffffffffffffff}, &(0x7f0000001580), &(0x7f00000015c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000016c0)={r12, &(0x7f0000001640)="d1f98df811df2db811e7132db17e73d00149dc8c7a98173936522bb8d3bd7a03c7f1827478c043062c7e78cc458bb6ef9c874cd8af9d82d4f8d97210e37b36d08f50c9d3077ed1"}, 0x20) (async) socketpair(0x1e, 0xa, 0x4, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001740)=0xffffffffffffffff, 0x4) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000001780)={r14}, 0x8) sendmsg$sock(r13, &(0x7f0000002b80)={&(0x7f00000017c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001840)="971d7d0873d33303bfe5d1f348dd0b5c58119f3478ce52323d70f052ab4c42b0ef7e3ef0569a594c8426b9bbedce0fc93b5c26c04bc7dbdffc4e94d2619235bb28232feeb8d680a36542548dece9d9685c868d9862c673d151e49a5f0e256bd9f4dd453f3a765f373709bb476bf459d84c7e1b2e92df03e8c16383d2078fe16d49c93ce275494d38da17c6235377d57d", 0x90}, {&(0x7f0000001900)="1041384dea766fc2b18d6d2fa9cf722e8fac363d5127b0a2ff7dbe9c8c20da1280c2baadc5fd12a57d108b4b29599cc376ef0e00cdeeef64dd7113730e4959509cab05056aed5ca7dbb64c38ab81509ca199c11e59d9bb7b9eccea7373e9055debd35b10899464e1a839dc78c91f5aa34c7f89299619ee", 0x77}, {&(0x7f0000001980)="b0113dc085350d5a89e4a99602c55a5b7c0f943f45f0b79ae18878b870a8c82d5448f5a83b4a84d50d68c78af5aa3bf2642801a1a7ed571cea1e6b23a0cbac94e5384f813c5737fc7a74bfddc07d34b6caea4e0143cb9282e6fa556a919448226dd5e13b20cb42b554157908ee8e77f2d64ae4d8ba552d4afbc9d30d0468fa6b514208e339f4b6", 0x87}, {&(0x7f0000001a40)="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", 0x1000}], 0x4, &(0x7f0000002a80)=[@timestamping={{0x14, 0x1, 0x25, 0x171c}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xd8}, 0x840) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002fc0)={r15, 0xe0, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000002d40)=[0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000002dc0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000002e00), &(0x7f0000002e40), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000002e80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000030c0)={0x6, 0x11, &(0x7f0000002bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xaf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002c80)='GPL\x00', 0xffff, 0x28, &(0x7f0000002cc0)=""/40, 0x41100, 0x6d, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003000)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000003040)=[{0x2, 0x5, 0xf, 0x3}, {0x2, 0x0, 0x1, 0x9}, {0x3, 0x1, 0xa, 0x9}, {0x0, 0x1, 0xd, 0x5}, {0x1, 0x3, 0xc, 0x6}, {0x4, 0x4, 0x0, 0x2}], 0x10, 0x5}, 0x94) (async) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000003180)={r14}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000031c0)=@bloom_filter={0x1e, 0x0, 0x866, 0x9, 0x20010, r17, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x5}, 0x50) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000003280)={0x0, 0x2, [@random="63bfb4bb045e", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}]}) 3.089961375s ago: executing program 4 (id=3215): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0xd, 0x0, &(0x7f0000000900)="00dfb0c0fb1e168d6f7d578888", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300020551b008007a558641cb2900"/40], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.945723877s ago: executing program 4 (id=3216): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0], 0x0, 0xd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8004, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f2", 0xd5}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x10, 0x20, 0x10, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100c, 0x3, 0x0, 0x6, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r6, 0x20, &(0x7f0000000900)={&(0x7f0000000700)=""/208, 0xd0, 0x0, &(0x7f0000000800)=""/235, 0xeb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x52, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a00)={0x2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.374205086s ago: executing program 2 (id=3217): socket$kcm(0x29, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0xd3, 0x4, 0x2, 0x14, 0x0, 0x8, 0x200, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x3, @perf_bp={&(0x7f0000000500), 0xb}, 0x1488, 0x1, 0x81, 0x4, 0x2, 0x4, 0xc, 0x0, 0x800, 0x0, 0x1}, 0x0, 0xd, r0, 0x1) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f00000006c0), 0x1}, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x5, 0x1, 0x8, &(0x7f00000007c0)) r5 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 1.373124426s ago: executing program 5 (id=3218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000, {0x0, 0x3000000}}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000140), 0x1003, r0}, 0x38) 1.372704466s ago: executing program 1 (id=3219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000010000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)="cb423a11b33192d673ba4c831a9adca48ca7eb0d2f073f36dfc3a94144bfd9d81639fd65ac4e557e12e7b0d2dfea051a7b440ade19d879e209596bf44477ecf6370e0133e541ef9f9e3631dde33dabf7842deb7a72c3ffe0f611062628683e3db2c685af", &(0x7f0000000140), 0x1003, r0}, 0x38) 1.370518117s ago: executing program 3 (id=3220): r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x8, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.369090187s ago: executing program 4 (id=3221): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xca, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x74, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xa3, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x3, [@struct={0x10, 0x8, 0x0, 0x4, 0x1, 0x6, [{0xe, 0x3, 0x5}, {0x8, 0x1, 0x2}, {0x6, 0x1, 0x9}, {0x4, 0x4, 0xff}, {0x1, 0x4, 0xffffffff}, {0xb, 0x0, 0x6}, {0x10, 0x5, 0x6}, {0x6, 0x4, 0xfffffff0}]}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @fwd={0x4}, @var={0xf, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000400)=""/123, 0xbb, 0x7b, 0x1, 0x40}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xe, 0x2, 0x4, 0x5, 0x80, r0, 0x1, '\x00', r1, r2, 0x1, 0x5, 0x5}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) sendmsg$kcm(r4, &(0x7f0000000980)={&(0x7f0000000580)=@pptp={0x18, 0x2, {0x2, @loopback}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)="c7fca4eae50669904b7df7e4d3e10e8162cc283e51805e1456082fc70793b0dba7f5c602f03bd3d171676741865a509dae1202afd3daad02e84ccb2a386e1babfb9cf02edb272a28f632", 0x4a}], 0x1, &(0x7f00000006c0)=[{0x90, 0x111, 0x8000, "c66507d75a6f16cc98e7aead0a8ee271851529f98db471d2a7d538d9f768aee52acd1841dc6351865a5ea99af4e6192e0dde22361f1ea0685d617f12b923405f5cefcf83348495b4c839e3eb75882368dd3c901ebea71323076831fff6e6a4ac423f06f0822f565a649640dcba9d40d9340681a441e1106901b4a4"}, {0xa8, 0x119, 0x9, "1176c16450d36291f6b87bff26cd8aa6329c976d6ad7beea518eb2772e54f260bca14a2b778d7c60b4c6c2376ec3abffe2e594230f9d290763668eb19e03b5c5d8616c68fef88ce8dd2be2efb16d745af54a01c4a2859d95f90ab670c0ccad103483021b1a348878824fa7ee790fedbbb27866913ac2f6c7c053b1d0389911c4bdee07aa56b130fca3dc0157caf73c113089ad"}, {0xd8, 0x1, 0x10001, "075edc24ad8cf7368bfbc0ebb0b56b15569a34499dcdbcb481cc4bc5762c244e6cb6121f39ef906cd7f9d585ec52492e7cf99ad3e9b4519842138a58c90ff1edf0c2d2b2957d444d75809b8f7ba35ff222f0a26f64720af2d12e0a6c14ce797c65d230520f3ebea1fdde4d79c1fe09681dab581f264fea3f2b4853d90edbc7d3c71288e25346a362f3420592f6d6d59efb3dc4618ec0c051bebe32ef60b692fac63c8f744e8e1193824c9830894f6c5f92136fea010f29f6783ff80131f52dbacb58344ece"}, {0x90, 0x10f, 0xe4, "1472d528855ab4b856624b97a3524144b83784b1471a7390e62c592ab5c68604d3a409eb7bd2e407f68c9e054140da40078bc4d06daa531b7bc07fd473094629f0d7c5665136f65ddbde91933f7f90668f06f5018eee03fbcfbfaf49bd4532d98540c7eadceec56e6c9bff53bd5f6a20e812addf4db4e6322e01e8e9569e"}], 0x2a0}, 0x28048080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r1, r2, 0x4, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r0, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@cgroup=r4, 0xffffffffffffffff, 0x18, 0x18, 0x0, @void, @value=r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0x3, [@fwd={0x3}, @ptr={0x3, 0x0, 0x0, 0x2, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @var={0x2, 0x0, 0x0, 0xe, 0x2, 0x1}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @typedef={0x4, 0x0, 0x0, 0x8, 0x4}, @enum64={0x3, 0x6, 0x0, 0x13, 0x0, 0xb, [{0x5, 0x10, 0x80000001}, {0x4, 0x1, 0x2}, {0x4, 0x101, 0x2}, {0x6, 0xf, 0xda08}, {0x10, 0x4, 0x7ff}, {0xe, 0x4, 0x691}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1}, {0x5, 0x1}, {0xf, 0x5}, {0x6, 0x1}, {0x8, 0x4}, {0x1}]}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000d80)=""/67, 0x10f, 0x43, 0x0, 0x8}, 0x28) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000e40)=r4, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0xd, &(0x7f0000000e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff001, 0x0, 0x0, 0x0, 0xfff}, [@ldst={0x1, 0xa8e21f4669ccc716, 0x1, 0x2, 0xb, 0x150}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x23}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000f00)='GPL\x00', 0x9, 0xaa, &(0x7f0000000f40)=""/170, 0x41000, 0x7, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001040)={0x2, 0x7, 0x7a, 0x1ff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001080)=[r9], &(0x7f00000010c0)=[{0x0, 0x2, 0xd}, {0x4, 0x2, 0xf, 0x2}, {0x5, 0x4, 0xb, 0x2}, {0x3, 0x2, 0xe, 0x2}, {0x3, 0x3, 0xa, 0xc}, {0x2, 0x4, 0x5, 0xa}, {0x3, 0x2, 0x6, 0x3}, {0x1, 0x1, 0x8, 0xb}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x6}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0xf29028a6c7010d7e, 0x0) openat$cgroup_type(r4, &(0x7f0000001280), 0x2, 0x0) openat$cgroup_type(r8, &(0x7f00000012c0), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001300)={r5}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x1c3881, 0x0) ioctl$TUNSETVNETBE(r11, 0x400454de, &(0x7f0000001380)=0x1) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f00000013c0)=0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400)={r3, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001700)={0x3, 0x4, 0x4, 0xa, 0x0, r11, 0x7fffffff, '\x00', r1, r2, 0x0, 0x3, 0x5}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x2, '\x00', r1, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001880)={0x2, 0x28, &(0x7f0000001440)=@raw=[@jmp={0x5, 0x0, 0x6, 0x7, 0x0, 0x6, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6d5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0xae, 0x5, 0x7, 0xce16, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @jmp={0x5, 0x0, 0xd, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000001580)='syzkaller\x00', 0x5, 0xed, &(0x7f00000015c0)=""/237, 0x41000, 0x20, '\x00', r1, @fallback=0x1d, r4, 0x8, &(0x7f00000016c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r10, 0x4, &(0x7f0000001800)=[r13, r14, r3], &(0x7f0000001840)=[{0x3, 0x3, 0x9, 0x5}, {0x2, 0x5, 0x6, 0x1}, {0x2, 0x5, 0x4, 0x7}, {0x0, 0x5, 0xb, 0x1}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001940)=r10, 0x4) socketpair(0x1e, 0xa, 0x0, &(0x7f0000001980)) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, r3, 0xfffffffa, '\x00', r1, r4, 0x3}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001a40)={r4, r16, 0x0, r15}, 0x10) perf_event_open(&(0x7f0000001a80)={0x2, 0x80, 0x6a, 0x9, 0x1, 0x0, 0x0, 0xaf, 0x18, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x4, @perf_config_ext={0x66, 0x8}, 0x200, 0x8001, 0x1, 0x5, 0xf04, 0x2, 0x2, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x8, r4, 0x1) 1.157148256s ago: executing program 4 (id=3222): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0xf}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[], 0xcfa4) (fail_nth: 12) 771.678174ms ago: executing program 5 (id=3223): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x462, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x9, 0x81, r2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000016000bdc8c00000000", 0xd}, {&(0x7f0000000180)="1954d21b1992c4", 0x7}], 0x2}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r4, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x91}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffe, r5}, 0x38) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a875bb98222f90a00fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0xb9, &(0x7f0000000080)=""/185}, 0x80) 771.163284ms ago: executing program 3 (id=3224): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0xbb414, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_config_ext={0x7, 0x10000007}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3250}, 0x0, 0x0, 0x4, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r1, 0xb) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) (async) socketpair(0x29, 0x80000, 0x1, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, r3}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x10, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000d00)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4e29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef44c94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75be4b09000000000000c00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cfd261be12697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f5fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb2332667f663936ccf25f7597a2270724527bf468d22836dd4cab25582180b72c51742c4e5c373a1008dd4cfba648e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30c1d3", 0x2f9}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @loopback}}}], 0x20}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_config_ext={0x1, 0xffffffffffffff80}, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffbbfb, 0x0, 0x6, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x10) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x32efe636, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x1, 0x3f6, 0x7ffffffc, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001400)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) (rerun: 32) 650.487471ms ago: executing program 4 (id=3225): r0 = socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xe02, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open$cgroup(&(0x7f0000002c40)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r0, &(0x7f0000000b40)={&(0x7f0000000240)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(cast5-generic)\x00'}, 0x80, &(0x7f0000000a00), 0x0, &(0x7f0000000ac0)}, 0x4004010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000007000000010086060000000314000000000000000000000007000000940401000000000014000000000000000100000001"], 0x48}, 0x840) sendmsg$sock(r4, &(0x7f0000000680)={&(0x7f0000000400)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x81b}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x78}, 0x80) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() sendmsg$unix(r6, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee01}}}], 0x20, 0x4c0d5}, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x1d, &(0x7f0000000100), 0x4) recvmsg(r5, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 619.378809ms ago: executing program 1 (id=3226): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x404, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0xd, 0x0, &(0x7f0000000900)="00dfb0c0fb1e168d6f7d578888", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300020551b008007a558641cb2900"/40], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 572.358439ms ago: executing program 2 (id=3227): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000003e0081064e81ff83db4cb9040a1d080006007c09e8fc55a10a0015040400142603600e1208000f00000004bcb3d26f000800024004000000035c0461c1d67f6f94007134cf9df359d4aae88a22dab59e7a8f46236efb8000a007a264cf6ad4161f3e4e7ce06bbace8017cbec4c2ee5a7cef4090000001fb71b27d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ea37b00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffff05c1c9b6278754ca397c388b0dd6e4edef3d93", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x10, 0x3, 0xe, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8}, 0x2200, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x1, 0x0, 0x0, 0x545, 0x0, 0x0, 0x40f00, 0x34}, 0x94) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8824", 0x2}], 0x1}, 0x45) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000100), 0x4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8912, &(0x7f0000000080)) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)="e7", 0x1}], 0x1}, 0x4000001) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@fallback=r1, 0xffffffffffffffff, 0x27, 0x202c, 0x0, @void, @void, @value=r9}, 0x20) recvmsg$unix(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x121) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@fallback=r0, 0x3, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000180)=[0x0], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b80)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="100000000820000000000000", @ANYRES32, @ANYBLOB="9f246fd173406692147abdbc019afb01c719b2e7a900ba024cec0af37e201d3e221fc4cdb6dad6f82ccf963411781809888558461591ddb2cca02b47ba6549f9e05944ef0d4a1de01eac73be11bbfd9e11740b07baf257c6ce16e7989b1efb7ab603a7081b3b8aa2a7d047afab5d07f6e785e841be1c674922d00bf0ccdae76941e5122903e2c27e574d4e8db4b613981394515c53f63824df544e91fc0f33ea59ab223d0370cd8311fffd582af159f356c70feebb27e6beb7429c0d22a0c03b72b3e6946ecd2f148f901ee766fb06522381d24ec1697c673939ef278eed705238fbf3d5bfd4e228c1518c48274908ebfd4d51104d34c21244c569cc25fc0bcfb0b4cbb76fe0afe915400950dbe7170ebc0d05d09b8f2fc500562bab324c6f70592f6d631ca6b2b85c6bf9f013492dd667c4af7e458fa151b3289d696ba82f8a", @ANYRES64=r10], 0x20) 136.758569ms ago: executing program 5 (id=3228): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 637.25µs ago: executing program 1 (id=3229): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bond_slave_1\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bond_slave_1\x00', 0x400}) socketpair(0xae11da41d28efda4, 0x3, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000640)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)=""/239, 0xef}, {&(0x7f0000000340)=""/96, 0x60}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/71, 0x47}], 0x5, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x1) (async) recvmsg$unix(r2, &(0x7f0000000640)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)=""/239, 0xef}, {&(0x7f0000000340)=""/96, 0x60}, {&(0x7f00000003c0)=""/179, 0xb3}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/71, 0x47}], 0x5, &(0x7f00000005c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x18}, 0x18) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@cgroup=r8, 0x7, 0x1, 0x2, &(0x7f0000000780)=[0x0], 0x1, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)={@cgroup=r12, r1, 0x10, 0x2005, r15, @value=r7, @void, @void, @void, r17}, 0x20) write$cgroup_devices(r8, &(0x7f0000000900)={'c', ' *:* ', 'w\x00'}, 0x8) r18 = openat$cgroup_ro(r1, &(0x7f0000000940)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r18, 0x800454d3, &(0x7f0000000980)) (async) ioctl$TUNGETSNDBUF(r18, 0x800454d3, &(0x7f0000000980)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r13, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0], 0x0, 0xf0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) openat$cgroup_ro(r6, &(0x7f0000000d00)='cpu.stat\x00', 0x0, 0x0) (async) r21 = openat$cgroup_ro(r6, &(0x7f0000000d00)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', r19, r21, 0x5, 0x2, 0x1}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x6, '\x00', r19, r21, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r14, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000dc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000e00)=[0x0], &(0x7f0000000e40)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000e80)=[{}, {}], 0x10, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=r20, 0x4) (async) r24 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=r20, 0x4) r25 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x11, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x1, 0x7, 0x3, 0x3, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000001180)='syzkaller\x00', 0x7fff, 0x0, 0x0, 0x41100, 0x4, '\x00', r19, 0x1b, r24, 0x8, &(0x7f0000001200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001240)={0x4, 0x10, 0x0, 0x1000}, 0x10, r23, 0x0, 0x0, &(0x7f0000001280)=[r12], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001580)={r25, 0x0, 0x1e, 0x77, &(0x7f0000001380)="64e36203a6481ce8581b36feccada204f8f53b65a59ee5fe9178769f974f", &(0x7f00000013c0)=""/119, 0x6, 0x0, 0x2, 0xee, &(0x7f0000001440)='*r', &(0x7f0000001480)="894ad9bedd0caf6e50cc8101fc30822c1cdb3b268cd728f706ad011007a9e38593cdcde8cf0f07597c8d3d493d920cd840ff5ee51e2a845148e1099b895cb35f31266819235cd102bb29e6196b67fb410790b6dd5a8dd93e9c07c49cc32763769b9afa8b19f6c46cb60927cc77f94c4339049b0fbffe9d0d0c590f127078812155c13b717edaaae2ad03e5e928b193bbc687488edb8785fa338e9032d25dde6e4a0210ddf00c007ea57dbfdf245ba9fae687dfcd63ae73d03770f716ec433f14db3b18a6435b01224ecd05b0a0a0cb5f81c0da01bf7ad3c5040006d2f4cb0ea7524add816958e48bf4fe86b666ae", 0x2, 0x0, 0x7}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001600)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x24, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0xb, 0x9, 0x1, 0x10, 0xffffffffffffffe8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, r10}, @call={0x85, 0x0, 0x0, 0x90}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000001780)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', r22, 0x0, r9, 0x8, &(0x7f00000017c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001800)={0x1, 0xa, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001840)=[r9, r11, r12, 0xffffffffffffffff], &(0x7f0000001880)=[{0x4, 0x4, 0x1}, {0x5, 0x3, 0x1, 0x8}, {0x2, 0x4, 0xa, 0x2}, {0x0, 0x1, 0x0, 0x5}], 0x10, 0x8}, 0x94) mkdirat$cgroup(r12, &(0x7f0000001980)='syz1\x00', 0x1ff) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000019c0)=r12, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={@cgroup=r16, 0xd, 0x1, 0x1, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b00)={@cgroup=r16, 0xd, 0x1, 0x1, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001a40)=[0x0, 0x0], &(0x7f0000001a80)=[0x0, 0x0, 0x0], &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg(r14, &(0x7f0000002100)={&(0x7f0000001b40)=@isdn={0x22, 0x90, 0x9, 0x7, 0x7}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001bc0)="16df4023", 0x4}, {&(0x7f0000001c00)="02b2c6ce6285bf7ba2437103eea138d0bb86ee305f3791eda12557d66011eb907b27e0f792e3fda37206701183f20d1cc0438694f90277209f00e41fe840af96af4cbbcd71ade35462600929c0f92455a52af4cd96fd932ce34489b95104cd7b9036a429c23a4245747618963da4dc3cc585a3819918b4b6f1f152445bd73a5a14a918bd1678abe95bd0b530583e8a696c2f1c0092ac623954d78ef437967c9b97eb7a8e1f6752c4d08609cbaaf6476270dd8ee57b665a1179257fbba3dd28b83b1a7f62e6049b8ffa45f69e79bfd311c5c95a", 0xd3}, {&(0x7f0000001d00)="e2fa8087293193dd9b4e", 0xa}, {&(0x7f0000001d40)="f5b8bd7dc13a4b75a6382408ec4f743550213ed5e84b06604031f7e53d1495c8cba70b10612342c9eb9dc0d55dc64121f0c2777f42027ac9ae58e8d30834d867fad619832bab5d7275824d5d7c0be1789650773e1e77be2b1d96377118edddf721eae7b8c0fa2f837c7c5dc0a1827cefc7b9284c27be935adf53e96261", 0x7d}, {&(0x7f0000001dc0)="d37af8aabafd033eec5188c8e077e295c224b2867ab2ec25dbed66bdd43a6e1c", 0x20}, {&(0x7f0000001e00)="512a200b5cafffe3098c2e03a57febf1f86e9332073da69b542261f06814b50a58057cacf19b5e5ad84a1701230f37dd62aa93853b2bff3bf1aedb48d99ef1", 0x3f}, {&(0x7f0000001e40)="796668122d75db9547d704", 0xb}, {&(0x7f0000001e80)="0c36b9e5dd4cabc7e3f1c3e80c52383d07af83b67f03727fd9360356c1436d3b1799e563724ac8211ad08852c51243add5535ef18da02e83fe2f789b41c8883602d86d1b69a6a98d18391a000e6da23d87ac541884214a8c5050d9a7d237137d51744328f9e4efd8358f9467162ef91d2cd0af42203d0e5a01cd5ed7a0ee1842f7bcd7d970a6b3a530c253484b524c79a3ef6b2f9748808cb91de85584800b0be54be054da9ffe3c18430757da28a52256f98022fda8cdfb827e18c00216fb4b5ff02a052a45f0af7ab9d8ead1172dcf465acf9d5bc836caf1f94d55beff1148363b4a066643a02bd56880bc2ae64a7a23d620", 0xf3}], 0x8, &(0x7f0000002000)=[{0x48, 0x1, 0x0, "fccbaac3ea67cfef3f5f951b5f46dc68076e15358b36305021e0e89ffe9b775c8611abb79aef1a71217de5e1abbfffe820ee"}, {0xb0, 0x29, 0xff, "bf4f78deac317d573c3a4af7fe27cd24c5fc1e64bae3657d9fdd037474a777853808337d4a17ffe5dab3a9579c8af5913e8bc0b8cf3108f7c48403cab7386ccf0678d710835134f498166326a348fa29a41affa1c50e678903f60375390dcaccbba56935def0315494edf64f505b9a8f3790a952c95dec5bb8232580ee2a9fe341ceb8ac4093e03f136f5b0fe2edfdb30b5920ae81a7a2b050fc36c8b18b"}], 0xf8}, 0x4) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000002140)=0x7) syz_clone(0x40004000, &(0x7f0000002180)="9eb109d0003d597baaa7f4f4fdf3e5de800d57b5709a0eacbcd0df59924189f49da957a0f30978ad0911723a3272458c1cbf0d6a936d5b1a2e5833be60d487b52869baa938b6e1f0d9a659ec83124fde9a1ad95a7fe1fbb066aa486f63c510c6ace47e34bbbeb381bc97d81bdd0a6b9b0ac60c2b23ef3303", 0x78, &(0x7f0000002200), &(0x7f0000002240), &(0x7f0000002280)) (async) syz_clone(0x40004000, &(0x7f0000002180)="9eb109d0003d597baaa7f4f4fdf3e5de800d57b5709a0eacbcd0df59924189f49da957a0f30978ad0911723a3272458c1cbf0d6a936d5b1a2e5833be60d487b52869baa938b6e1f0d9a659ec83124fde9a1ad95a7fe1fbb066aa486f63c510c6ace47e34bbbeb381bc97d81bdd0a6b9b0ac60c2b23ef3303", 0x78, &(0x7f0000002200), &(0x7f0000002240), &(0x7f0000002280)) 0s ago: executing program 4 (id=3230): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x98, &(0x7f00000002c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x961}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x2, 0x2, 0x0, 0x41f0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80), 0x0, 0x10, 0x101}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/200, 0xc8}], 0x1, &(0x7f00000008c0)=""/70, 0x46}, 0x10000) kernel console output (not intermixed with test programs): [ 823.635573][ T4287] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 823.644282][ T4287] Bluetooth: hci5: Injecting HCI hardware error event [ 823.653171][T11442] Bluetooth: hci5: hardware error 0x00 [ 824.221059][T14424] validate_nla: 6 callbacks suppressed [ 824.221079][T14424] netlink: 'syz.3.2459': attribute type 3 has an invalid length. [ 824.290084][T14424] netlink: 'syz.3.2459': attribute type 8 has an invalid length. [ 824.327486][T14424] __nla_validate_parse: 6 callbacks suppressed [ 824.327502][T14424] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.2459'. [ 825.008359][T12701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.161360][T12701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.297790][T12701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.436253][T12701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.695010][T14468] netlink: 'syz.5.2474': attribute type 3 has an invalid length. [ 825.702803][T14468] netlink: 'syz.5.2474': attribute type 8 has an invalid length. [ 825.741962][T14468] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2474'. [ 825.776912][T14476] netlink: 'syz.2.2473': attribute type 3 has an invalid length. [ 825.794085][T11442] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 825.801286][T14476] netlink: 'syz.2.2473': attribute type 8 has an invalid length. [ 825.823225][T11442] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 825.833259][T11442] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 825.841700][T11442] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 825.846529][T14476] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.2473'. [ 825.868615][T14480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 825.878360][T14480] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 825.892038][T14480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 825.892494][T14461] netlink: 'syz.3.2472': attribute type 4 has an invalid length. [ 825.944453][T14461] netlink: 69192 bytes leftover after parsing attributes in process `syz.3.2472'. [ 825.986001][T14483] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2476'. [ 826.003388][T12701] device .*! left promiscuous mode [ 826.317197][T12701] device ip6gretap0 left promiscuous mode [ 826.323811][T12701] @: port 1(ip6gretap0) entered disabled state [ 826.415607][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.424007][T14491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.436417][T14491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.455666][T14491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.689329][T14504] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2480'. [ 826.865107][T14505] netlink: 'syz.4.2479': attribute type 12 has an invalid length. [ 826.872988][T14505] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2479'. [ 827.339658][T14507] device syzkaller0 entered promiscuous mode [ 827.393367][T14524] netlink: 'syz.3.2486': attribute type 3 has an invalid length. [ 827.412293][T14524] netlink: 'syz.3.2486': attribute type 8 has an invalid length. [ 827.428944][T14524] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.2486'. [ 827.567558][T14532] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2484'. [ 827.595191][T14532] netlink: zone id is out of range [ 827.608503][T14532] netlink: zone id is out of range [ 827.642071][T14532] netlink: zone id is out of range [ 827.656484][T14532] netlink: zone id is out of range [ 827.670712][T14532] netlink: zone id is out of range [ 827.685268][T14532] netlink: zone id is out of range [ 827.697547][T14536] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2487'. [ 827.703240][T14532] netlink: zone id is out of range [ 827.713450][T14532] netlink: zone id is out of range [ 827.715211][T14536] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 827.719326][T14532] netlink: zone id is out of range [ 827.959317][T14480] Bluetooth: hci1: command 0x0409 tx timeout [ 829.654525][T14478] chnl_net:caif_netlink_parms(): no params data found [ 829.688158][T14534] __nla_validate_parse: 1 callbacks suppressed [ 829.688176][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2487'. [ 829.739725][T14542] netlink: 'syz.5.2489': attribute type 11 has an invalid length. [ 829.773782][T14542] netlink: 'syz.5.2489': attribute type 11 has an invalid length. [ 829.781832][T14542] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.2489'. [ 829.877990][T14546] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2490'. [ 830.034182][T14480] Bluetooth: hci1: command 0x041b tx timeout [ 830.224598][T14478] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.244817][T14478] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.253283][T14478] device bridge_slave_0 entered promiscuous mode [ 830.355528][T14478] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.362954][T14478] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.384994][T14478] device bridge_slave_1 entered promiscuous mode [ 830.481436][T14478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.512823][T14571] validate_nla: 2 callbacks suppressed [ 830.512859][T14571] netlink: 'syz.5.2497': attribute type 3 has an invalid length. [ 830.565324][T14571] netlink: 'syz.5.2497': attribute type 8 has an invalid length. [ 830.586754][T14571] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2497'. [ 830.721040][T14478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.896341][T14478] team0: Port device team_slave_0 added [ 831.077431][T14478] team0: Port device team_slave_1 added [ 831.098946][T14594] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2500'. [ 831.207959][T14478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.223361][T14478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.292874][T14478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.331953][T12701] device hsr_slave_0 left promiscuous mode [ 831.350393][T12701] device hsr_slave_1 left promiscuous mode [ 831.362922][T12701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.371969][T12701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.383337][T12701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.393301][T12701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.430142][T12701] device veth0_macvtap left promiscuous mode [ 831.439183][T12701] device veth1_vlan left promiscuous mode [ 832.119298][T14480] Bluetooth: hci1: command 0x040f tx timeout [ 832.228120][T12701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 832.282969][T12701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 832.643563][T12701] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 832.686113][T12701] bond0 (unregistering): Released all slaves [ 832.755807][T14478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.763092][T14478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.782032][T14627] netlink: 'syz.2.2510': attribute type 3 has an invalid length. [ 832.802872][T14478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.803876][T14627] netlink: 'syz.2.2510': attribute type 8 has an invalid length. [ 832.824090][T14587] device syzkaller0 entered promiscuous mode [ 832.861388][T14627] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.2510'. [ 832.943548][T14478] device hsr_slave_0 entered promiscuous mode [ 832.978541][T14478] device hsr_slave_1 entered promiscuous mode [ 832.989133][T14478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.001641][T14478] Cannot create hsr debugfs directory [ 833.012208][T14630] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2511'. [ 833.161022][T14634] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2512'. [ 833.177901][T14634] net_ratelimit: 305 callbacks suppressed [ 833.178037][T14634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.194203][T14480] Bluetooth: hci1: command 0x0419 tx timeout [ 837.184165][T14678] netlink: 'syz.3.2523': attribute type 3 has an invalid length. [ 837.193400][T14681] device syzkaller0 entered promiscuous mode [ 837.211593][T14678] netlink: 'syz.3.2523': attribute type 8 has an invalid length. [ 837.230215][T14678] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.2523'. [ 837.419101][T14691] netlink: 154020 bytes leftover after parsing attributes in process `syz.5.2524'. [ 837.480469][T14691] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 837.621105][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2524'. [ 837.671094][T14695] netlink: 'syz.3.2525': attribute type 2 has an invalid length. [ 837.683751][T14695] netlink: 'syz.3.2525': attribute type 11 has an invalid length. [ 837.691592][T14695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2525'. [ 837.761853][T14699] netlink: 'syz.3.2525': attribute type 21 has an invalid length. [ 837.785724][T14699] netlink: 'syz.3.2525': attribute type 1 has an invalid length. [ 837.840589][T14699] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2525'. [ 837.973211][T14478] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 838.032097][T14478] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 838.067469][T14478] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 838.094693][T14478] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 838.309446][T14478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.375724][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 838.407783][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 838.441311][T14478] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.474937][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 838.514524][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 838.523825][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.530951][T12703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.589781][T14732] netlink: 'syz.4.2535': attribute type 3 has an invalid length. [ 838.601588][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 838.619816][T14732] netlink: 'syz.4.2535': attribute type 8 has an invalid length. [ 838.628827][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 838.640610][T14732] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.2535'. [ 838.661716][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 838.694397][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.701667][T12703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.726193][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 838.772441][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 838.797893][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 838.825429][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 838.864825][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 838.928981][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 838.941350][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 839.024928][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 839.034519][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 839.056811][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 839.094710][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 839.128529][T14740] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2537'. [ 839.157332][T14478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 839.544070][T14745] device syzkaller0 entered promiscuous mode [ 839.870982][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 839.891673][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 839.921467][T14478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.966498][T14771] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2544'. [ 840.007173][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 840.018765][T14771] netlink: 'syz.5.2544': attribute type 2 has an invalid length. [ 840.036066][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 840.077614][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 840.083888][T14771] netlink: 17267 bytes leftover after parsing attributes in process `syz.5.2544'. [ 840.102426][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 840.222982][T14478] device veth0_vlan entered promiscuous mode [ 840.239362][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 840.254580][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 840.291222][T14478] device veth1_vlan entered promiscuous mode [ 840.375197][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 840.403266][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 840.417932][T14788] netlink: 'syz.5.2547': attribute type 3 has an invalid length. [ 840.446334][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 840.454171][T14788] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2547'. [ 840.478776][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 840.503249][T14478] device veth0_macvtap entered promiscuous mode [ 840.546116][T14478] device veth1_macvtap entered promiscuous mode [ 840.596343][T14478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.652948][T14478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.673373][T14478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.684934][T14478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.695430][T14478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 840.708834][T14478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 840.735237][T14478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.752477][T14797] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 840.777432][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 840.814563][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 840.848234][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 840.903253][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 840.948498][T14478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 840.974042][T14478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.011548][T14478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.076477][T14478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.116065][T14478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.127953][T14478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.140423][T14478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.156313][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 841.171057][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 841.200975][T14478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.234896][T14478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.276929][T14478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.297764][T14478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.350895][T14825] netlink: zone id is out of range [ 841.411514][T14825] netlink: zone id is out of range [ 841.431699][T14826] netlink: zone id is out of range [ 841.438061][T14125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.453020][T14125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.460576][T14825] netlink: zone id is out of range [ 841.463442][T14826] netlink: zone id is out of range [ 841.480809][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 841.508599][T14826] netlink: zone id is out of range [ 841.520305][T14825] netlink: zone id is out of range [ 841.541568][T14825] netlink: zone id is out of range [ 841.546821][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.565647][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.579549][T14826] netlink: zone id is out of range [ 841.588736][T14125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 841.614887][T14825] netlink: zone id is out of range [ 843.573138][T14895] validate_nla: 4 callbacks suppressed [ 843.573155][T14895] netlink: 'syz.1.2569': attribute type 33 has an invalid length. [ 843.629029][T14895] __nla_validate_parse: 4 callbacks suppressed [ 843.629045][T14895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2569'. [ 844.006917][T14908] netlink: 'syz.4.2573': attribute type 3 has an invalid length. [ 844.029887][T14908] netlink: 'syz.4.2573': attribute type 8 has an invalid length. [ 844.085049][T14908] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.2573'. [ 844.130093][T14916] device syzkaller0 entered promiscuous mode [ 844.452079][T14929] tap0: tun_chr_ioctl cmd 1074025675 [ 844.464308][T14929] tap0: persist disabled [ 851.068873][T14988] netlink: 'syz.5.2588': attribute type 3 has an invalid length. [ 851.102559][T14988] netlink: 'syz.5.2588': attribute type 8 has an invalid length. [ 851.134497][T14988] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2588'. [ 851.540135][T15007] netlink: 'syz.3.2598': attribute type 10 has an invalid length. [ 851.612477][T15007] device syz_tun entered promiscuous mode [ 852.019509][T15031] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2604'. [ 852.097375][T15031] net_ratelimit: 7300 callbacks suppressed [ 852.097392][T15031] netlink: zone id is out of range [ 852.160883][T15038] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.2606'. [ 852.165530][T15031] netlink: del zone limit has 4 unknown bytes [ 852.244618][T15038] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 852.432275][T15029] netlink: 108384 bytes leftover after parsing attributes in process `syz.2.2602'. [ 853.146973][T15066] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2613'. [ 853.381621][T15074] netlink: 'syz.1.2616': attribute type 10 has an invalid length. [ 853.449913][T15074] device syz_tun entered promiscuous mode [ 853.634279][T15074] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 853.663823][T15085] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2617'. [ 853.950778][T15093] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2621'. [ 853.993086][T15093] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2621'. [ 854.133600][T15098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2621'. [ 854.188061][T15105] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2624'. [ 854.833526][T15122] netlink: 'syz.4.2629': attribute type 39 has an invalid length. [ 854.880635][T15124] netlink: 'syz.5.2630': attribute type 27 has an invalid length. [ 854.903800][T15124] netlink: 'syz.5.2630': attribute type 4 has an invalid length. [ 854.964052][T15127] netlink: 'syz.1.2631': attribute type 3 has an invalid length. [ 855.433560][T15137] netlink: 'syz.5.2634': attribute type 10 has an invalid length. [ 855.462844][T15137] device syz_tun entered promiscuous mode [ 855.600432][T15137] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 856.224350][T15165] netlink: 'syz.1.2644': attribute type 2 has an invalid length. [ 856.685431][T15172] __nla_validate_parse: 4 callbacks suppressed [ 856.685468][T15172] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2648'. [ 856.738104][T15175] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2646'. [ 856.775422][T15170] device syzkaller0 entered promiscuous mode [ 856.782152][T15175] openvswitch: netlink: Message has 6 unknown bytes. [ 856.860158][T15172] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 857.598893][ T4287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 857.609695][ T4287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 857.627739][ T4287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 857.644999][ T4287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 857.653260][ T4287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 857.661707][ T4287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 859.452082][T15186] netlink: 'syz.4.2652': attribute type 21 has an invalid length. [ 859.471722][T15186] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2652'. [ 859.481630][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'. [ 859.719221][ T4287] Bluetooth: hci0: command 0x0409 tx timeout [ 860.059165][T15190] chnl_net:caif_netlink_parms(): no params data found [ 860.936734][T15190] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.955228][T15190] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.974166][T15190] device bridge_slave_0 entered promiscuous mode [ 860.990735][T15238] netlink: 'syz.1.2664': attribute type 21 has an invalid length. [ 861.008301][T15245] netlink: 'syz.5.2661': attribute type 3 has an invalid length. [ 861.016291][T15238] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2664'. [ 861.021793][T15245] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2661'. [ 861.035648][T15238] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2664'. [ 861.045935][T15241] netlink: 'syz.4.2662': attribute type 10 has an invalid length. [ 861.131352][T15190] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.147750][T15190] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.178389][T15190] device bridge_slave_1 entered promiscuous mode [ 861.194981][T15248] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2666'. [ 861.266062][T15190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 861.311023][T15248] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 861.373502][T15248] CPU: 0 PID: 15248 Comm: syz.3.2666 Not tainted syzkaller #0 [ 861.381025][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 861.384638][T15255] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2669'. [ 861.391179][T15248] Call Trace: [ 861.391191][T15248] [ 861.391201][T15248] dump_stack_lvl+0x188/0x24e [ 861.391233][T15248] ? show_regs_print_info+0x12/0x12 [ 861.391252][T15248] ? load_image+0x410/0x410 [ 861.421275][T15248] sysfs_warn_dup+0x8a/0xa0 [ 861.425807][T15248] sysfs_do_create_link_sd+0xc0/0x110 [ 861.431192][T15248] device_add+0x83b/0x1050 [ 861.435652][T15248] wiphy_register+0x1d8b/0x2aa0 [ 861.440550][T15248] ? cfg80211_event_work+0x40/0x40 [ 861.445704][T15248] ? minstrel_ht_alloc+0x894/0xa20 [ 861.450829][T15248] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 861.456928][T15248] ieee80211_register_hw+0x2d48/0x39f0 [ 861.462423][T15248] ? ieee80211_register_hw+0xf41/0x39f0 [ 861.467985][T15248] ? ieee80211_register_hw+0xf41/0x39f0 [ 861.473560][T15248] ? ieee80211_tasklet_handler+0x20/0x20 [ 861.479214][T15248] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 861.485146][T15248] ? __debug_object_init+0xed/0x440 [ 861.490384][T15248] ? memset+0x1e/0x40 [ 861.494399][T15248] ? __hrtimer_init+0x189/0x270 [ 861.499369][T15248] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 861.505133][T15248] ? memcpy+0x3c/0x60 [ 861.509225][T15248] hwsim_new_radio_nl+0xab7/0xc90 [ 861.514385][T15248] genl_family_rcv_msg_doit+0x22f/0x350 [ 861.519957][T15248] ? end_current_label_crit_section+0x170/0x170 [ 861.526233][T15248] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 861.532175][T15248] ? bpf_lsm_capable+0x5/0x10 [ 861.536880][T15248] ? security_capable+0x85/0xb0 [ 861.541743][T15248] genl_rcv_msg+0x601/0x790 [ 861.546262][T15248] ? genl_bind+0x360/0x360 [ 861.550686][T15248] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 861.557043][T15248] netlink_rcv_skb+0x1ef/0x440 [ 861.561806][T15248] ? genl_bind+0x360/0x360 [ 861.566219][T15248] ? netlink_ack+0x1160/0x1160 [ 861.570984][T15248] ? down_read+0x1a8/0x2d0 [ 861.575402][T15248] genl_rcv+0x24/0x40 [ 861.579386][T15248] netlink_unicast+0x7ad/0x920 [ 861.584184][T15248] netlink_sendmsg+0x8ad/0xbd0 [ 861.588972][T15248] ? netlink_getsockopt+0x550/0x550 [ 861.594178][T15248] ? apparmor_socket_sendmsg+0x8a/0x330 [ 861.599797][T15248] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 861.605097][T15248] ? security_socket_sendmsg+0x7c/0xa0 [ 861.610661][T15248] ? netlink_getsockopt+0x550/0x550 [ 861.615861][T15248] ____sys_sendmsg+0x5ed/0x9a0 [ 861.620629][T15248] ? __sys_sendmsg_sock+0x30/0x30 [ 861.625642][T15248] ? __import_iovec+0x306/0x510 [ 861.630498][T15248] ? import_iovec+0x6f/0xa0 [ 861.635005][T15248] ___sys_sendmsg+0x2a2/0x360 [ 861.639685][T15248] ? __sys_sendmsg+0x2a0/0x2a0 [ 861.644446][T15248] ? perf_trace_preemptirq_template+0xa8/0x320 [ 861.650707][T15248] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 861.656871][T15248] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 861.663021][T15248] ? lockdep_hardirqs_on+0x94/0x140 [ 861.668231][T15248] ? __se_sys_sendmsg+0xee/0x2b0 [ 861.673162][T15248] ? kasan_check_range+0x80/0x290 [ 861.678195][T15248] __se_sys_sendmsg+0x1c3/0x2b0 [ 861.683044][T15248] ? __x64_sys_sendmsg+0x80/0x80 [ 861.687989][T15248] ? lockdep_hardirqs_on+0x94/0x140 [ 861.693189][T15248] do_syscall_64+0x4c/0xa0 [ 861.697604][T15248] ? clear_bhb_loop+0x60/0xb0 [ 861.702277][T15248] ? clear_bhb_loop+0x60/0xb0 [ 861.706946][T15248] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.712846][T15248] RIP: 0033:0x7fcbe7f9e159 [ 861.717255][T15248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.736890][T15248] RSP: 002b:00007fcbe8d8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.745497][T15248] RAX: ffffffffffffffda RBX: 00007fcbe8225fa0 RCX: 00007fcbe7f9e159 [ 861.753482][T15248] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 861.761554][T15248] RBP: 00007fcbe803506b R08: 0000000000000000 R09: 0000000000000000 [ 861.769611][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.777599][T15248] R13: 00007fcbe8226038 R14: 00007fcbe8225fa0 R15: 00007ffe5d2a6ad8 [ 861.785707][T15248] [ 861.802773][ T4287] Bluetooth: hci0: command 0x041b tx timeout [ 861.824857][T15190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 861.984333][T15190] team0: Port device team_slave_0 added [ 862.005388][T15190] team0: Port device team_slave_1 added [ 862.012249][T15267] netlink: 'syz.5.2671': attribute type 10 has an invalid length. [ 862.082427][T15190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.121017][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.192563][T15190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.231942][T15269] netlink: 'syz.1.2673': attribute type 7 has an invalid length. [ 862.245176][T15273] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2672'. [ 862.302407][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2672'. [ 862.312522][T15190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.322154][T15190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 862.349247][T15190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.564497][T15190] device hsr_slave_0 entered promiscuous mode [ 862.585268][T15190] device hsr_slave_1 entered promiscuous mode [ 862.603784][T15190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.642742][T15190] Cannot create hsr debugfs directory [ 863.237720][T15190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.391585][T15190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.556957][T15190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.686601][T15190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.874007][ T4287] Bluetooth: hci0: command 0x040f tx timeout [ 863.964080][T15332] netlink: 'syz.4.2691': attribute type 10 has an invalid length. [ 863.988304][T15332] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2691'. [ 864.004790][T15332] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 864.133165][T15190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 864.318050][T15190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 864.346992][T15190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 864.385988][T15190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 864.646933][T15190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 864.666845][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 864.765931][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 864.830262][T15190] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.922853][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 864.944950][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 864.973891][T12703] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.981171][T12703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.097259][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 865.144568][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 865.170999][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 865.202378][T12703] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.209610][T12703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.245481][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 865.291537][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 865.392343][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 865.437033][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 865.456462][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 865.528966][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 865.550141][T12703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 865.595133][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 865.617863][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 865.729743][T15190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.786432][T15190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 865.859469][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 865.877466][T15401] netlink: 'syz.1.2703': attribute type 3 has an invalid length. [ 865.892423][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 865.930026][T15401] netlink: 'syz.1.2703': attribute type 8 has an invalid length. [ 865.955561][T15401] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.2703'. [ 865.962952][ T4287] Bluetooth: hci0: command 0x0419 tx timeout [ 866.467439][T15412] netlink: 'syz.3.2708': attribute type 9 has an invalid length. [ 866.493300][T15414] netlink: 'syz.1.2709': attribute type 10 has an invalid length. [ 866.504595][T15412] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2708'. [ 868.552737][T15441] netlink: 'syz.1.2712': attribute type 10 has an invalid length. [ 868.608254][T15441] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 868.840214][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 868.857632][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 868.909331][T15190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.093472][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 869.114726][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 869.150375][T15445] netlink: 'syz.4.2716': attribute type 3 has an invalid length. [ 869.179957][T15445] netlink: 'syz.4.2716': attribute type 8 has an invalid length. [ 869.199261][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 869.201480][T15445] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.2716'. [ 869.214969][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 869.230090][T15190] device veth0_vlan entered promiscuous mode [ 869.258526][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 869.281324][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 869.316587][T15190] device veth1_vlan entered promiscuous mode [ 869.422180][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 869.436844][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 869.472154][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 869.487616][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 869.512593][T15190] device veth0_macvtap entered promiscuous mode [ 869.544505][T12700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 869.575085][T15190] device veth1_macvtap entered promiscuous mode [ 869.616309][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.642355][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.652791][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.664799][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.675019][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.685905][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.696843][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.710801][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.722431][T15190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 869.732965][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 869.742209][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 869.756340][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.767737][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.778512][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.789278][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.801001][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.812107][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.823230][T15190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 869.849276][T15190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.898985][T15190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 869.937608][T15190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.961475][T15478] netlink: 'syz.4.2722': attribute type 3 has an invalid length. [ 869.974568][T15190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.004030][T15190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.007827][T15478] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2722'. [ 870.012804][T15190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.046788][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.053183][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.175433][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 870.210407][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 873.287016][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.331577][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.364839][T13670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 873.434212][T14125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.442082][T14125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.485165][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 874.039668][T15502] netlink: 'syz.2.2729': attribute type 3 has an invalid length. [ 874.056392][T15510] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2730'. [ 874.071423][T15502] netlink: 'syz.2.2729': attribute type 8 has an invalid length. [ 874.101769][T15502] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.2729'. [ 874.147121][T15512] netlink: 'syz.3.2728': attribute type 10 has an invalid length. [ 875.066217][T15535] delete_channel: no stack [ 875.091284][T15535] delete_channel: no stack [ 876.765799][T15531] netlink: 'syz.2.2733': attribute type 21 has an invalid length. [ 876.775723][T15531] netlink: 'syz.2.2733': attribute type 1 has an invalid length. [ 876.783571][T15531] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2733'. [ 876.805623][T15535] netlink: 'syz.3.2736': attribute type 9 has an invalid length. [ 877.146017][T15549] device netdevsim0 entered promiscuous mode [ 877.231944][T15551] netlink: 'syz.4.2742': attribute type 29 has an invalid length. [ 877.272197][T15551] netlink: 'syz.4.2742': attribute type 29 has an invalid length. [ 877.316303][T15556] netlink: 'syz.4.2742': attribute type 29 has an invalid length. [ 877.343308][T15557] netlink: 'syz.4.2742': attribute type 29 has an invalid length. [ 877.502717][T15553] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2743'. [ 878.113329][T15551] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2742'. [ 878.143557][T15556] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2742'. [ 878.281882][T15581] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2748'. [ 878.366020][T15583] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2749'. [ 878.773052][T15581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2748'. [ 879.083266][T15601] validate_nla: 6 callbacks suppressed [ 879.083304][T15601] netlink: 'syz.1.2754': attribute type 10 has an invalid length. [ 879.252418][T15601] team0: Port device virt_wifi0 added [ 879.309341][T15604] netlink: 'syz.1.2754': attribute type 21 has an invalid length. [ 879.324247][T15604] netlink: 'syz.1.2754': attribute type 1 has an invalid length. [ 879.417426][T15608] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2756'. [ 879.439348][T15611] netlink: 'syz.5.2757': attribute type 3 has an invalid length. [ 879.458041][T15611] netlink: 'syz.5.2757': attribute type 8 has an invalid length. [ 879.467825][T15611] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2757'. [ 879.609540][T15615] delete_channel: no stack [ 879.845902][T15624] netlink: 'syz.1.2760': attribute type 39 has an invalid length. [ 880.169427][T15624] device hsr_slave_1 left promiscuous mode [ 880.314018][T15629] netlink: 'syz.3.2763': attribute type 1 has an invalid length. [ 880.362013][T15629] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2763'. [ 880.546191][T15637] device syzkaller0 entered promiscuous mode [ 881.763856][T15653] netlink: 'syz.5.2767': attribute type 21 has an invalid length. [ 881.805749][T15664] netlink: 'syz.4.2772': attribute type 3 has an invalid length. [ 881.814678][T15664] netlink: 'syz.4.2772': attribute type 8 has an invalid length. [ 881.823870][T15664] __nla_validate_parse: 2 callbacks suppressed [ 881.823903][T15664] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.2772'. [ 881.906095][T15667] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2774'. [ 882.829879][T15694] netlink: 8964 bytes leftover after parsing attributes in process `syz.1.2779'. [ 882.885157][T15702] device syzkaller0 entered promiscuous mode [ 883.716205][T15724] netlink: 197344 bytes leftover after parsing attributes in process `syz.5.2787'. [ 884.055961][T15738] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2790'. [ 884.475391][T15746] validate_nla: 57 callbacks suppressed [ 884.475410][T15746] netlink: 'syz.2.2792': attribute type 4 has an invalid length. [ 884.511049][T15747] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.2801'. [ 884.534296][T15746] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2792'. [ 884.562619][T15753] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2791'. [ 884.612100][T15747] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 884.653827][T15747] CPU: 0 PID: 15747 Comm: syz.5.2801 Not tainted syzkaller #0 [ 884.661346][T15747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 884.671426][T15747] Call Trace: [ 884.674987][T15747] [ 884.677928][T15747] dump_stack_lvl+0x188/0x24e [ 884.682633][T15747] ? show_regs_print_info+0x12/0x12 [ 884.687853][T15747] ? load_image+0x410/0x410 [ 884.692396][T15747] sysfs_warn_dup+0x8a/0xa0 [ 884.696923][T15747] sysfs_do_create_link_sd+0xc0/0x110 [ 884.702506][T15747] device_add+0x83b/0x1050 [ 884.706982][T15747] wiphy_register+0x1d8b/0x2aa0 [ 884.711889][T15747] ? cfg80211_event_work+0x40/0x40 [ 884.717034][T15747] ? minstrel_ht_alloc+0x894/0xa20 [ 884.722182][T15747] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 884.728289][T15747] ieee80211_register_hw+0x2d48/0x39f0 [ 884.733776][T15747] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 884.739961][T15747] ? ieee80211_register_hw+0xf41/0x39f0 [ 884.745543][T15747] ? ieee80211_register_hw+0xf41/0x39f0 [ 884.751128][T15747] ? ieee80211_tasklet_handler+0x20/0x20 [ 884.756790][T15747] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 884.762739][T15747] ? __debug_object_init+0xed/0x440 [ 884.768227][T15747] ? memset+0x1e/0x40 [ 884.772214][T15747] ? __hrtimer_init+0x189/0x270 [ 884.777066][T15747] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 884.782808][T15747] ? memcpy+0x3c/0x60 [ 884.786786][T15747] hwsim_new_radio_nl+0xab7/0xc90 [ 884.791824][T15747] genl_family_rcv_msg_doit+0x22f/0x350 [ 884.797455][T15747] ? rcu_is_watching+0x11/0xa0 [ 884.802221][T15747] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 884.808110][T15747] ? lockdep_hardirqs_on+0x94/0x140 [ 884.813341][T15747] ? genl_rcv_msg+0x5d9/0x790 [ 884.818015][T15747] genl_rcv_msg+0x601/0x790 [ 884.822521][T15747] ? genl_bind+0x360/0x360 [ 884.826927][T15747] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 884.833265][T15747] netlink_rcv_skb+0x1ef/0x440 [ 884.838027][T15747] ? genl_bind+0x360/0x360 [ 884.842442][T15747] ? netlink_ack+0x1160/0x1160 [ 884.847205][T15747] ? down_read+0x1a8/0x2d0 [ 884.851622][T15747] genl_rcv+0x24/0x40 [ 884.855600][T15747] netlink_unicast+0x7ad/0x920 [ 884.860371][T15747] netlink_sendmsg+0x8ad/0xbd0 [ 884.865138][T15747] ? netlink_getsockopt+0x550/0x550 [ 884.870338][T15747] ? netlink_getsockopt+0x550/0x550 [ 884.875527][T15747] ____sys_sendmsg+0x5ed/0x9a0 [ 884.880286][T15747] ? iovec_from_user+0x2d7/0x360 [ 884.885229][T15747] ? __sys_sendmsg_sock+0x30/0x30 [ 884.890244][T15747] ? __import_iovec+0x306/0x510 [ 884.895118][T15747] ? import_iovec+0x6f/0xa0 [ 884.899622][T15747] ___sys_sendmsg+0x2a2/0x360 [ 884.904322][T15747] ? __sys_sendmsg+0x2a0/0x2a0 [ 884.909118][T15747] __se_sys_sendmsg+0x1c3/0x2b0 [ 884.913962][T15747] ? perf_trace_preemptirq_template+0x268/0x320 [ 884.920224][T15747] ? __x64_sys_sendmsg+0x80/0x80 [ 884.925170][T15747] ? lockdep_hardirqs_on+0x94/0x140 [ 884.930367][T15747] do_syscall_64+0x4c/0xa0 [ 884.934783][T15747] ? clear_bhb_loop+0x60/0xb0 [ 884.939453][T15747] ? clear_bhb_loop+0x60/0xb0 [ 884.944128][T15747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 884.950024][T15747] RIP: 0033:0x7feeeb79e159 [ 884.954435][T15747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.974118][T15747] RSP: 002b:00007feeec58a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.982530][T15747] RAX: ffffffffffffffda RBX: 00007feeeba25fa0 RCX: 00007feeeb79e159 [ 884.990587][T15747] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 884.998550][T15747] RBP: 00007feeeb83506b R08: 0000000000000000 R09: 0000000000000000 [ 885.006520][T15747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.014489][T15747] R13: 00007feeeba26038 R14: 00007feeeba25fa0 R15: 00007ffebceb2cb8 [ 885.022559][T15747] [ 885.156755][T15753] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2791'. [ 885.260584][T15754] netlink: 'syz.1.2791': attribute type 21 has an invalid length. [ 885.467388][T15760] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2793'. [ 885.691330][T15773] netlink: 'syz.2.2797': attribute type 12 has an invalid length. [ 885.864643][T15780] device syzkaller0 entered promiscuous mode [ 886.850859][T15801] netlink: 'syz.3.2805': attribute type 21 has an invalid length. [ 886.885921][T15801] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 886.933716][T15801] __nla_validate_parse: 2 callbacks suppressed [ 886.933733][T15801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2805'. [ 887.275425][T15819] netlink: 'syz.4.2811': attribute type 12 has an invalid length. [ 887.314376][T15819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2811'. [ 887.375173][T15817] netlink: 11262 bytes leftover after parsing attributes in process `syz.5.2810'. [ 887.876458][T15835] device syzkaller0 entered promiscuous mode [ 887.916261][T15837] netlink: 'syz.5.2815': attribute type 3 has an invalid length. [ 887.993833][T15837] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2815'. [ 888.667371][T15845] netlink: 'syz.5.2819': attribute type 4 has an invalid length. [ 888.708974][T15845] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2819'. [ 889.348328][T15867] netlink: 'syz.4.2826': attribute type 3 has an invalid length. [ 889.369686][T15867] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2826'. [ 889.458254][T15870] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 889.651206][T15876] device syzkaller0 entered promiscuous mode [ 890.289669][T15900] netlink: 'syz.4.2838': attribute type 21 has an invalid length. [ 890.336524][T15898] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 890.626089][T15910] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2842'. [ 890.698654][T15921] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2845'. [ 890.883702][T15921] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2845'. [ 890.952875][T15923] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2845'. [ 891.022553][T15924] device syzkaller0 entered promiscuous mode [ 891.039336][T15927] IPv6: NLM_F_CREATE should be specified when creating new route [ 891.238634][T15938] netlink: 'syz.4.2849': attribute type 21 has an invalid length. [ 891.547845][T15945] delete_channel: no stack [ 892.779299][T15990] device syzkaller0 entered promiscuous mode [ 892.812291][T15993] __nla_validate_parse: 2 callbacks suppressed [ 892.812328][T15993] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.2863'. [ 894.307501][T16055] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2877'. [ 894.376793][T16055] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 894.598295][T16066] device syzkaller0 entered promiscuous mode [ 895.378259][T16095] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2889'. [ 895.438558][T16095] openvswitch: netlink: Message has 6 unknown bytes. [ 896.008924][ T4287] Bluetooth: hci3: ISO packet for unknown connection handle 8 [ 896.320305][T16122] netlink: 'syz.2.2894': attribute type 5 has an invalid length. [ 896.993482][T16129] device syzkaller0 entered promiscuous mode [ 897.548141][T16162] netlink: 87536 bytes leftover after parsing attributes in process `syz.3.2906'. [ 898.664186][T16192] device syzkaller0 entered promiscuous mode [ 899.097857][T16199] netlink: 'syz.3.2917': attribute type 10 has an invalid length. [ 899.599968][T16199] team0 (unregistering): Port device team_slave_1 removed [ 900.135161][T16208] delete_channel: no stack [ 900.372377][T16216] netlink: 'syz.3.2924': attribute type 3 has an invalid length. [ 900.421329][T16216] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2924'. [ 900.466654][T16220] netlink: 15478 bytes leftover after parsing attributes in process `syz.5.2925'. [ 900.484846][T16221] netlink: 'syz.3.2924': attribute type 6 has an invalid length. [ 900.624844][T16221] netlink: 108328 bytes leftover after parsing attributes in process `syz.3.2924'. [ 900.651646][T16223] tun0: tun_chr_ioctl cmd 1074812118 [ 900.885321][T16232] netlink: 'syz.5.2928': attribute type 3 has an invalid length. [ 900.931814][T16232] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2928'. [ 901.078141][T16237] netlink: 'syz.1.2929': attribute type 3 has an invalid length. [ 901.125506][T16237] netlink: 197592 bytes leftover after parsing attributes in process `syz.1.2929'. [ 901.172141][T14480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 901.180853][T14480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 901.191614][T14480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 901.200231][T14480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 901.214890][T14480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 901.222327][T14480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 901.265211][T12667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.471706][T12667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.621244][T12667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.453092][T16263] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2935'. [ 902.496048][T16250] device syzkaller0 entered promiscuous mode [ 902.616928][T12667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.990176][T16275] netlink: 'syz.5.2939': attribute type 3 has an invalid length. [ 903.014029][T16275] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2939'. [ 903.060351][T16276] tun0: tun_chr_ioctl cmd 1074812118 [ 903.183390][T12667] device 0 left promiscuous mode [ 903.257019][T16239] chnl_net:caif_netlink_parms(): no params data found [ 903.317722][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 903.471778][T16293] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2943'. [ 903.821041][T16298] netlink: 'syz.3.2944': attribute type 22 has an invalid length. [ 903.835982][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2944'. [ 904.008859][T16239] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.053362][T16239] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.084124][T16239] device bridge_slave_0 entered promiscuous mode [ 904.307530][T16239] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.323975][T16239] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.357819][T16239] device bridge_slave_1 entered promiscuous mode [ 904.602772][T16239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.762817][T16239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.812776][T16320] device syzkaller0 entered promiscuous mode [ 904.916794][T16239] team0: Port device team_slave_0 added [ 904.975876][T16239] team0: Port device team_slave_1 added [ 905.113803][T16239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.140191][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.229464][T16332] netlink: 'syz.3.2950': attribute type 3 has an invalid length. [ 905.277926][T16239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.304656][T16332] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2950'. [ 905.393907][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 905.535291][T16239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.563874][T16239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.603340][T16239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.736288][T16342] netlink: 'syz.1.2961': attribute type 3 has an invalid length. [ 905.751675][T16342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2961'. [ 905.957041][T16239] device hsr_slave_0 entered promiscuous mode [ 906.051652][T16239] device hsr_slave_1 entered promiscuous mode [ 906.160075][T16239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 906.184595][T16239] Cannot create hsr debugfs directory [ 906.227163][T16357] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2956'. [ 906.262733][T16353] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.2955'. [ 906.308504][T16351] tun0: tun_chr_ioctl cmd 1074812118 [ 907.473964][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 907.484704][T12667] device hsr_slave_0 left promiscuous mode [ 907.520724][T12667] device hsr_slave_1 left promiscuous mode [ 907.549873][T12667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.577564][T12667] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.621980][T12667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.673810][T12667] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.725603][T12667] device batadv0 left promiscuous mode [ 907.731300][T12667] bridge0: port 3(batadv0) entered disabled state [ 907.782525][T12667] device bridge_slave_0 left promiscuous mode [ 907.834325][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.981637][T12667] device veth1_macvtap left promiscuous mode [ 907.999223][T12667] device veth0_macvtap left promiscuous mode [ 908.032472][T12667] device veth1_vlan left promiscuous mode [ 909.542997][T12667] team0 (unregistering): Port device team_slave_1 removed [ 909.561835][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 910.236300][T12667] team0 (unregistering): Port device bridge0 removed [ 910.424466][T16432] netlink: 15478 bytes leftover after parsing attributes in process `syz.1.2968'. [ 911.007351][T16447] netlink: 'syz.3.2976': attribute type 3 has an invalid length. [ 911.058974][T16447] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2976'. [ 911.108834][T16239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 911.147974][T16239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 911.169367][T16239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 911.192014][T16239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 911.368054][T16461] netlink: 'syz.2.2979': attribute type 10 has an invalid length. [ 912.172804][T16461] team0 (unregistering): Port device team_slave_0 removed [ 912.361369][T16461] team0 (unregistering): Port device team_slave_1 removed [ 912.431341][T16476] netlink: 'syz.3.2982': attribute type 17 has an invalid length. [ 912.459259][T16476] netlink: 'syz.3.2982': attribute type 16 has an invalid length. [ 912.483833][T16476] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2982'. [ 912.674968][T16239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.733753][T16491] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.2984'. [ 912.743237][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.765159][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.831736][T16239] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.888872][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.909552][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.938374][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.945672][T12667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.971767][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 913.015442][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 913.034743][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.069612][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.077004][T12667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.127595][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.166635][T16510] netlink: 'syz.1.2990': attribute type 3 has an invalid length. [ 913.184350][T16510] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2990'. [ 913.195851][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.211268][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.242075][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.257597][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 913.274893][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 913.293052][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 913.357528][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 913.433219][T16239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.456436][T16239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 913.474679][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 913.484842][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 913.505520][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 913.554726][T16533] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2991'. [ 914.056140][T16548] device syzkaller0 entered promiscuous mode [ 914.182465][T16550] netlink: 'syz.1.2995': attribute type 10 has an invalid length. [ 915.347729][T16550] team0 (unregistering): Port device team_slave_0 removed [ 915.389520][T16550] team0 (unregistering): Port device team_slave_1 removed [ 915.421884][T16550] team0 (unregistering): Port device virt_wifi0 removed [ 915.548997][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 915.604734][T12667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 915.643232][T16239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.661820][T16572] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3000'. [ 915.784069][T16576] netlink: 'syz.1.3001': attribute type 3 has an invalid length. [ 915.792128][T16576] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3001'. [ 916.637128][T16628] device syzkaller0 entered promiscuous mode [ 917.192290][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 917.207014][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 917.231034][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 917.242620][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 917.286056][T16239] device veth0_vlan entered promiscuous mode [ 917.292943][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 917.305982][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 917.342830][T16239] device veth1_vlan entered promiscuous mode [ 917.397612][T16643] netlink: 'syz.2.3014': attribute type 3 has an invalid length. [ 917.432829][T16643] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3014'. [ 917.440599][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 917.467807][T12678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 917.500886][T16239] device veth0_macvtap entered promiscuous mode [ 917.544371][T16239] device veth1_macvtap entered promiscuous mode [ 917.638912][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.682244][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.724453][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.737336][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.749718][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.761362][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.771733][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.782611][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.799912][T16239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.469218][T16656] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.476697][T16656] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.552785][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 920.563275][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 920.571720][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 920.599447][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 920.620815][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.652127][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.692573][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.713845][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.726288][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.738054][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.748328][T16239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.759510][T16239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.772830][T16239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.784544][T16666] netlink: 'syz.3.3020': attribute type 7 has an invalid length. [ 920.809285][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 920.844414][T13671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 920.880224][T16239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.932671][T16239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.002799][T16239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.011963][T16239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.145290][T12669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.155436][T12669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.163021][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 921.222970][T14127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.234551][T14127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.243087][T14127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 921.990552][T16706] device syzkaller0 entered promiscuous mode [ 922.544405][T16718] Ÿë: port 1(ip6gretap0) entered blocking state [ 922.567641][T16718] Ÿë: port 1(ip6gretap0) entered disabled state [ 922.589066][T16718] device ip6gretap0 entered promiscuous mode [ 922.673944][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 922.691054][ T4287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 922.702590][ T4287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 922.722868][ T4287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 922.739438][ T4287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 922.749212][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 923.146318][ T5187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.348753][ T5187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 923.954544][ T5187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.256554][ T5187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.428962][T16755] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3044'. [ 924.441035][T16755] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3044'. [ 924.503812][T16755] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3044'. [ 924.544541][T16755] netlink: 'syz.4.3044': attribute type 17 has an invalid length. [ 924.564792][T16755] netlink: 'syz.4.3044': attribute type 16 has an invalid length. [ 924.627877][T16755] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3044'. [ 924.691297][T16760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3046'. [ 924.700656][T16722] chnl_net:caif_netlink_parms(): no params data found [ 924.802145][T16760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3046'. [ 924.831602][T16765] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3046'. [ 924.840768][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 924.937915][T16760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3046'. [ 925.030238][T16782] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3048'. [ 925.051706][ T5187] device .*! left promiscuous mode [ 925.152323][T16787] netlink: 'syz.4.3048': attribute type 2 has an invalid length. [ 925.278131][T16722] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.314131][T16722] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.366121][T16722] device bridge_slave_0 entered promiscuous mode [ 925.375487][T16782] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3048'. [ 925.425253][T16787] device 0 entered promiscuous mode [ 925.638104][T16722] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.658184][T16722] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.684088][T16722] device bridge_slave_1 entered promiscuous mode [ 925.892649][T16722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.012929][T16722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.253078][T16722] team0: Port device team_slave_0 added [ 926.357895][T16722] team0: Port device team_slave_1 added [ 926.492366][T16722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.534585][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.621708][T16722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.924246][T14480] Bluetooth: hci4: command 0x041b tx timeout [ 927.299689][T16722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.313843][T16722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.450200][T16722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.564714][T16826] device syzkaller0 entered promiscuous mode [ 927.863221][T16722] device hsr_slave_0 entered promiscuous mode [ 927.906962][T16722] device hsr_slave_1 entered promiscuous mode [ 927.922659][T16722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 927.940745][T16722] Cannot create hsr debugfs directory [ 927.961466][T16856] IPv6: Can't replace route, no match found [ 928.465556][T16866] netlink: 'syz.2.3068': attribute type 2 has an invalid length. [ 928.979397][T14480] Bluetooth: hci1: ISO packet for unknown connection handle 23 [ 928.994077][T14480] Bluetooth: hci4: command 0x040f tx timeout [ 929.014244][T16866] device 0 entered promiscuous mode [ 929.216419][T16888] FAULT_INJECTION: forcing a failure. [ 929.216419][T16888] name failslab, interval 1, probability 0, space 0, times 0 [ 929.229611][T16888] CPU: 0 PID: 16888 Comm: syz.4.3071 Not tainted syzkaller #0 [ 929.237099][T16888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.247179][T16888] Call Trace: [ 929.250474][T16888] [ 929.253426][T16888] dump_stack_lvl+0x188/0x24e [ 929.258142][T16888] ? show_regs_print_info+0x12/0x12 [ 929.263373][T16888] ? load_image+0x410/0x410 [ 929.267900][T16888] ? skb_network_protocol+0x52f/0x790 [ 929.273312][T16888] should_fail_ex+0x390/0x4c0 [ 929.278030][T16888] should_failslab+0x5/0x20 [ 929.282552][T16888] slab_pre_alloc_hook+0x59/0x300 [ 929.287609][T16888] ? netif_skb_features+0xafa/0x1630 [ 929.292913][T16888] kmem_cache_alloc+0x56/0x2f0 [ 929.297694][T16888] ? skb_clone+0x1e7/0x370 [ 929.302148][T16888] skb_clone+0x1e7/0x370 [ 929.306413][T16888] ? dev_queue_xmit_nit+0x200/0xba0 [ 929.311642][T16888] dev_queue_xmit_nit+0x23b/0xba0 [ 929.316700][T16888] ? dev_queue_xmit_nit+0x29/0xba0 [ 929.321836][T16888] ? validate_xmit_skb+0x7ca/0xe80 [ 929.326977][T16888] dev_hard_start_xmit+0x158/0x8b0 [ 929.332214][T16888] ? validate_xmit_skb_list+0x120/0x120 [ 929.337796][T16888] __dev_queue_xmit+0x1b4b/0x3810 [ 929.342852][T16888] ? __dev_queue_xmit+0x281/0x3810 [ 929.347990][T16888] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 929.354002][T16888] ? netdev_core_pick_tx+0x360/0x360 [ 929.359321][T16888] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 929.365504][T16888] ? lockdep_hardirqs_on+0x94/0x140 [ 929.370726][T16888] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 929.376908][T16888] ? skb_release_data+0x1d3/0x7e0 [ 929.381969][T16888] __bpf_redirect+0x8c7/0x1110 [ 929.386784][T16888] bpf_clone_redirect+0x311/0x4a0 [ 929.391960][T16888] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 929.397453][T16888] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 929.403475][T16888] ? __lock_acquire+0x7c40/0x7c40 [ 929.408534][T16888] ? lock_chain_count+0x20/0x20 [ 929.413413][T16888] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 929.419672][T16888] ? lockdep_hardirqs_on+0x94/0x140 [ 929.424896][T16888] ? ktime_get+0x7b/0x270 [ 929.429256][T16888] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 929.435529][T16888] ? ktime_get_real_ts64+0x440/0x440 [ 929.440843][T16888] ? read_lock_is_recursive+0x10/0x10 [ 929.446323][T16888] ? __cant_sleep+0x220/0x220 [ 929.451028][T16888] ? ktime_get+0x247/0x270 [ 929.455475][T16888] bpf_test_run+0x2b6/0x830 [ 929.460019][T16888] ? dst_hold+0xb0/0xb0 [ 929.464208][T16888] ? eth_get_headlen+0x200/0x200 [ 929.469169][T16888] ? __build_skb+0x24b/0x3b0 [ 929.473792][T16888] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 929.479203][T16888] ? cpu_online+0xa0/0xa0 [ 929.483550][T16888] bpf_prog_test_run+0x31c/0x390 [ 929.488596][T16888] __sys_bpf+0x62b/0x780 [ 929.492863][T16888] ? bpf_link_show_fdinfo+0x380/0x380 [ 929.498315][T16888] ? lock_chain_count+0x20/0x20 [ 929.503191][T16888] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 929.509212][T16888] __x64_sys_bpf+0x78/0x90 [ 929.513664][T16888] do_syscall_64+0x4c/0xa0 [ 929.518094][T16888] ? clear_bhb_loop+0x60/0xb0 [ 929.522893][T16888] ? clear_bhb_loop+0x60/0xb0 [ 929.527589][T16888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.533599][T16888] RIP: 0033:0x7fa9fb79e159 [ 929.538025][T16888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.557646][T16888] RSP: 002b:00007fa9fc58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 929.566093][T16888] RAX: ffffffffffffffda RBX: 00007fa9fba25fa0 RCX: 00007fa9fb79e159 [ 929.574069][T16888] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 929.582053][T16888] RBP: 00007fa9fc58f090 R08: 0000000000000000 R09: 0000000000000000 [ 929.590028][T16888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.598010][T16888] R13: 00007fa9fba26038 R14: 00007fa9fba25fa0 R15: 00007ffe787feaf8 [ 929.605991][T16888] [ 930.235764][ T5187] device hsr_slave_0 left promiscuous mode [ 930.302679][ T5187] device hsr_slave_1 left promiscuous mode [ 930.311567][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.327551][T16899] netlink: 'syz.1.3073': attribute type 3 has an invalid length. [ 930.336750][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.345640][T16899] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3073'. [ 930.357306][ T5187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.369119][ T5187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.401646][ T5187] device veth0_macvtap left promiscuous mode [ 931.078808][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 931.490474][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.498986][T16902] netlink: 'syz.2.3075': attribute type 2 has an invalid length. [ 931.506918][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.514645][T16902] netlink: 119 bytes leftover after parsing attributes in process `syz.2.3075'. [ 931.531886][T16903] netlink: 'syz.4.3074': attribute type 10 has an invalid length. [ 931.563399][T16903] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 931.572470][T16906] netlink: 'syz.2.3075': attribute type 21 has an invalid length. [ 931.583819][T16906] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3075'. [ 931.593044][T16907] netlink: 'syz.2.3075': attribute type 21 has an invalid length. [ 931.604026][T16907] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3075'. [ 931.617527][T16915] device syzkaller0 entered promiscuous mode [ 931.889244][T16924] netlink: 'syz.2.3079': attribute type 39 has an invalid length. [ 931.996764][T16924] device hsr_slave_1 left promiscuous mode [ 932.163497][T16934] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.3083'. [ 932.172427][T16930] netlink: 'syz.5.3082': attribute type 2 has an invalid length. [ 932.208224][T16930] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3082'. [ 932.248791][T16935] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 932.264375][T16935] syzkaller1: linktype set to 773 [ 932.280479][T16722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 932.311306][T16722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 932.408773][T16722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 932.446072][T16722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 932.502890][T16940] FAULT_INJECTION: forcing a failure. [ 932.502890][T16940] name failslab, interval 1, probability 0, space 0, times 0 [ 932.515799][T16940] CPU: 0 PID: 16940 Comm: syz.2.3084 Not tainted syzkaller #0 [ 932.523294][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 932.533355][T16940] Call Trace: [ 932.536648][T16940] [ 932.539594][T16940] dump_stack_lvl+0x188/0x24e [ 932.544295][T16940] ? show_regs_print_info+0x12/0x12 [ 932.549511][T16940] ? load_image+0x410/0x410 [ 932.554048][T16940] should_fail_ex+0x390/0x4c0 [ 932.558752][T16940] should_failslab+0x5/0x20 [ 932.563257][T16940] slab_pre_alloc_hook+0x59/0x300 [ 932.568311][T16940] kmem_cache_alloc+0x56/0x2f0 [ 932.573094][T16940] ? dst_alloc+0x101/0x160 [ 932.577530][T16940] dst_alloc+0x101/0x160 [ 932.581793][T16940] ip_route_output_key_hash_rcu+0x14e4/0x23f0 [ 932.587876][T16940] ? ip_route_output_key_hash+0x139/0x330 [ 932.593602][T16940] ip_route_output_key_hash+0x1ef/0x330 [ 932.599171][T16940] ? ip_route_input_rcu+0x30a0/0x30a0 [ 932.604549][T16940] ? memset+0x1e/0x40 [ 932.608531][T16940] ip_route_output_flow+0x26/0x150 [ 932.613648][T16940] ip_tunnel_xmit+0x9a2/0x25d0 [ 932.618441][T16940] ? ip_tunnel_xmit+0xf0/0x25d0 [ 932.623294][T16940] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 932.628321][T16940] ? skb_push+0x8a/0xd0 [ 932.632479][T16940] ? gre_build_header+0x251/0x9a0 [ 932.637507][T16940] ipgre_xmit+0x7e4/0xb60 [ 932.641842][T16940] dev_hard_start_xmit+0x292/0x8b0 [ 932.646950][T16940] ? validate_xmit_skb_list+0x120/0x120 [ 932.652494][T16940] __dev_queue_xmit+0x1b4b/0x3810 [ 932.657517][T16940] ? __dev_queue_xmit+0x281/0x3810 [ 932.662630][T16940] ? netdev_core_pick_tx+0x360/0x360 [ 932.667924][T16940] ? skb_release_data+0x1d3/0x7e0 [ 932.672953][T16940] __bpf_redirect+0x8c7/0x1110 [ 932.677764][T16940] bpf_clone_redirect+0x311/0x4a0 [ 932.682798][T16940] bpf_prog_973cd02a7a0e8181+0x56/0x5b [ 932.688276][T16940] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 932.694276][T16940] ? __lock_acquire+0x7c40/0x7c40 [ 932.699496][T16940] ? lock_chain_count+0x20/0x20 [ 932.704364][T16940] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 932.710607][T16940] ? lockdep_hardirqs_on+0x94/0x140 [ 932.715809][T16940] ? ktime_get+0x7b/0x270 [ 932.720311][T16940] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 932.726557][T16940] ? ktime_get_real_ts64+0x440/0x440 [ 932.731843][T16940] ? read_lock_is_recursive+0x10/0x10 [ 932.737211][T16940] ? perf_trace_preemptirq_template+0x268/0x320 [ 932.743449][T16940] ? __cant_sleep+0x220/0x220 [ 932.748123][T16940] ? ktime_get+0x247/0x270 [ 932.752548][T16940] bpf_test_run+0x2b6/0x830 [ 932.757095][T16940] ? dst_hold+0xb0/0xb0 [ 932.761253][T16940] ? eth_get_headlen+0x200/0x200 [ 932.766182][T16940] ? __build_skb+0x24b/0x3b0 [ 932.770797][T16940] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 932.776182][T16940] ? cpu_online+0xa0/0xa0 [ 932.780631][T16940] bpf_prog_test_run+0x31c/0x390 [ 932.785748][T16940] __sys_bpf+0x62b/0x780 [ 932.789998][T16940] ? bpf_link_show_fdinfo+0x380/0x380 [ 932.795382][T16940] ? lock_chain_count+0x20/0x20 [ 932.800248][T16940] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 932.806336][T16940] __x64_sys_bpf+0x78/0x90 [ 932.810759][T16940] do_syscall_64+0x4c/0xa0 [ 932.815176][T16940] ? clear_bhb_loop+0x60/0xb0 [ 932.819852][T16940] ? clear_bhb_loop+0x60/0xb0 [ 932.824529][T16940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 932.830423][T16940] RIP: 0033:0x7ffb6479e159 [ 932.834831][T16940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.854457][T16940] RSP: 002b:00007ffb656b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 932.862863][T16940] RAX: ffffffffffffffda RBX: 00007ffb64a25fa0 RCX: 00007ffb6479e159 [ 932.870826][T16940] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 932.878802][T16940] RBP: 00007ffb656b7090 R08: 0000000000000000 R09: 0000000000000000 [ 932.886790][T16940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.894766][T16940] R13: 00007ffb64a26038 R14: 00007ffb64a25fa0 R15: 00007ffeb8610e78 [ 932.902768][T16940] [ 933.572016][T16722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.612811][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 933.636626][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 933.682292][T16969] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3088'. [ 933.691974][T16722] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.695018][T16965] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3090'. [ 933.774387][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 933.790477][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 933.820980][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.828194][T12680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.865078][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 933.909812][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 933.934142][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.941320][T12680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.999930][T16977] netlink: 'syz.4.3091': attribute type 21 has an invalid length. [ 934.056928][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 934.076311][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 934.101241][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 934.150000][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 934.182309][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 934.229493][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 934.245978][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 934.269147][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 934.298904][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 934.349963][T16722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 934.380120][T16722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 934.411858][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 934.438248][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 934.458304][T12680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 935.045977][T14127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 935.064741][T14127] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 935.079739][T16722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.137031][T14199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 935.155023][T14199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 935.203108][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 935.222901][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 935.237033][T16722] device veth0_vlan entered promiscuous mode [ 935.254816][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 935.263426][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 935.289821][T16722] device veth1_vlan entered promiscuous mode [ 935.340551][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 935.355349][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 935.374500][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 935.395060][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 935.419037][T16722] device veth0_macvtap entered promiscuous mode [ 935.442532][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 935.462387][T16722] device veth1_macvtap entered promiscuous mode [ 935.515173][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.543881][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.563698][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.583883][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.603965][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.623814][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.643813][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.663768][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.695410][T16722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.709820][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 935.720765][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 935.739464][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.768902][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.778844][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.814799][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.839398][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.875788][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.895806][T16722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.923725][T16722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.945065][T16722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.971724][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 935.997267][ T5188] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 936.018295][T16722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.049332][T16722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.070117][T16722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.082904][T16722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 936.763666][T12667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.771531][T12667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.832701][T14199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 936.874268][T17031] FAULT_INJECTION: forcing a failure. [ 936.874268][T17031] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 936.883735][T17032] delete_channel: no stack [ 936.892084][ T5187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 936.939646][ T5187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.954599][T17031] CPU: 1 PID: 17031 Comm: syz.1.3094 Not tainted syzkaller #0 [ 936.962124][T17031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 936.972282][T17031] Call Trace: [ 936.975625][T17031] [ 936.978580][T17031] dump_stack_lvl+0x188/0x24e [ 936.983287][T17031] ? show_regs_print_info+0x12/0x12 [ 936.988540][T17031] ? load_image+0x410/0x410 [ 936.993529][T17031] ? __lock_acquire+0x7c40/0x7c40 [ 936.997850][ T5187] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 936.998689][T17031] should_fail_ex+0x390/0x4c0 [ 937.010640][T17031] prepare_alloc_pages+0x1e1/0x5b0 [ 937.015813][T17031] __alloc_pages+0x130/0x4f0 [ 937.020434][T17031] ? zone_statistics+0x170/0x170 [ 937.025413][T17031] ? verify_lock_unused+0x140/0x140 [ 937.030648][T17031] __folio_alloc+0xe/0x30 [ 937.035004][T17031] vma_alloc_folio+0x499/0x900 [ 937.039797][T17031] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 937.046066][T17031] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 937.052602][T17031] ? shmem_replace_folio+0xdc0/0xdc0 [ 937.057937][T17031] ? xas_load+0x119/0x140 [ 937.062289][T17031] ? __filemap_get_folio+0x10f/0xde0 [ 937.067596][T17031] ? __filemap_get_folio+0xb43/0xde0 [ 937.072894][T17031] ? __filemap_get_folio+0x10f/0xde0 [ 937.078184][T17031] ? page_cache_prev_miss+0x380/0x380 [ 937.083572][T17031] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 937.089561][T17031] ? do_user_addr_fault+0x8c7/0xb20 [ 937.094857][T17031] shmem_get_folio_gfp+0x1439/0x35e0 [ 937.100278][T17031] shmem_write_begin+0xee/0x3f0 [ 937.105134][T17031] generic_perform_write+0x2fa/0x5c0 [ 937.110427][T17031] ? generic_file_direct_write+0x330/0x330 [ 937.116231][T17031] ? __file_remove_privs+0x5f0/0x5f0 [ 937.121509][T17031] ? rwsem_write_trylock+0x135/0x1c0 [ 937.126791][T17031] ? clear_nonspinnable+0x60/0x60 [ 937.131818][T17031] ? generic_write_checks_count+0x363/0x440 [ 937.137708][T17031] __generic_file_write_iter+0x148/0x2a0 [ 937.143340][T17031] generic_file_write_iter+0xab/0x2e0 [ 937.148710][T17031] vfs_write+0x482/0x9a0 [ 937.152958][T17031] ? file_end_write+0x250/0x250 [ 937.157811][T17031] ? __fget_files+0x3fc/0x460 [ 937.162493][T17031] ? __fdget_pos+0x2ae/0x360 [ 937.167083][T17031] ? ksys_write+0x70/0x260 [ 937.171497][T17031] ksys_write+0x14d/0x260 [ 937.175841][T17031] ? __ia32_sys_read+0x80/0x80 [ 937.180605][T17031] ? lockdep_hardirqs_on+0x94/0x140 [ 937.185803][T17031] do_syscall_64+0x4c/0xa0 [ 937.190237][T17031] ? clear_bhb_loop+0x60/0xb0 [ 937.194914][T17031] ? clear_bhb_loop+0x60/0xb0 [ 937.199601][T17031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.205494][T17031] RIP: 0033:0x7fb5a5f9e159 [ 937.209988][T17031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.229590][T17031] RSP: 002b:00007fb5a6df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 937.237998][T17031] RAX: ffffffffffffffda RBX: 00007fb5a6225fa0 RCX: 00007fb5a5f9e159 [ 937.245961][T17031] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 937.253934][T17031] RBP: 00007fb5a6df4090 R08: 0000000000000000 R09: 0000000000000000 [ 937.261907][T17031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.269886][T17031] R13: 00007fb5a6226038 R14: 00007fb5a6225fa0 R15: 00007ffdd739a8e8 [ 937.277880][T17031] [ 937.407435][T17030] delete_channel: no stack [ 937.587029][T17048] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3098'. [ 939.937526][T17048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.992737][T17048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.014073][T17048] bond0 (unregistering): Released all slaves [ 942.654126][T17124] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.3117'. [ 942.748288][T17133] FAULT_INJECTION: forcing a failure. [ 942.748288][T17133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.761612][T17133] CPU: 0 PID: 17133 Comm: syz.2.3121 Not tainted syzkaller #0 [ 942.769795][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.779896][T17133] Call Trace: [ 942.783239][T17133] [ 942.786246][T17133] dump_stack_lvl+0x188/0x24e [ 942.790969][T17133] ? show_regs_print_info+0x12/0x12 [ 942.796204][T17133] ? load_image+0x410/0x410 [ 942.800826][T17133] ? _raw_spin_lock_irq+0xb7/0xf0 [ 942.805885][T17133] ? _raw_spin_unlock_irq+0x1f/0x40 [ 942.811165][T17133] ? lockdep_hardirqs_on+0x94/0x140 [ 942.816585][T17133] should_fail_ex+0x390/0x4c0 [ 942.821319][T17133] copy_page_from_iter_atomic+0x21d/0x12e0 [ 942.827184][T17133] ? pipe_zero+0x140/0x140 [ 942.831726][T17133] ? PageHeadHuge+0x8e/0x1c0 [ 942.836350][T17133] ? shmem_write_begin+0x1b4/0x3f0 [ 942.841501][T17133] generic_perform_write+0x34f/0x5c0 [ 942.846841][T17133] ? generic_file_direct_write+0x330/0x330 [ 942.852679][T17133] ? __file_remove_privs+0x5f0/0x5f0 [ 942.858128][T17133] ? rwsem_write_trylock+0x135/0x1c0 [ 942.863432][T17133] ? clear_nonspinnable+0x60/0x60 [ 942.868477][T17133] ? generic_write_checks_count+0x363/0x440 [ 942.874744][T17133] __generic_file_write_iter+0x148/0x2a0 [ 942.880403][T17133] generic_file_write_iter+0xab/0x2e0 [ 942.885965][T17133] vfs_write+0x482/0x9a0 [ 942.890355][T17133] ? file_end_write+0x250/0x250 [ 942.895213][T17133] ? __fget_files+0x3fc/0x460 [ 942.900167][T17133] ? __fdget_pos+0x2ae/0x360 [ 942.904845][T17133] ? ksys_write+0x70/0x260 [ 942.909382][T17133] ksys_write+0x14d/0x260 [ 942.913800][T17133] ? __ia32_sys_read+0x80/0x80 [ 942.918564][T17133] ? lockdep_hardirqs_on+0x94/0x140 [ 942.923858][T17133] do_syscall_64+0x4c/0xa0 [ 942.928275][T17133] ? clear_bhb_loop+0x60/0xb0 [ 942.933047][T17133] ? clear_bhb_loop+0x60/0xb0 [ 942.937718][T17133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 942.943613][T17133] RIP: 0033:0x7ffb6479e159 [ 942.948214][T17133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.968359][T17133] RSP: 002b:00007ffb656b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 942.977123][T17133] RAX: ffffffffffffffda RBX: 00007ffb64a25fa0 RCX: 00007ffb6479e159 [ 942.985097][T17133] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 942.993161][T17133] RBP: 00007ffb656b7090 R08: 0000000000000000 R09: 0000000000000000 [ 943.001308][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.009382][T17133] R13: 00007ffb64a26038 R14: 00007ffb64a25fa0 R15: 00007ffeb8610e78 [ 943.017391][T17133] [ 943.776017][T17141] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3124'. [ 943.834128][T17141] : renamed from caif0 [ 943.923360][T17141] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 945.800246][T17178] FAULT_INJECTION: forcing a failure. [ 945.800246][T17178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 945.871859][T17178] CPU: 1 PID: 17178 Comm: syz.5.3134 Not tainted syzkaller #0 [ 945.879381][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.889543][T17178] Call Trace: [ 945.892835][T17178] [ 945.895778][T17178] dump_stack_lvl+0x188/0x24e [ 945.900479][T17178] ? show_regs_print_info+0x12/0x12 [ 945.905695][T17178] ? load_image+0x410/0x410 [ 945.910221][T17178] ? __lock_acquire+0x7c40/0x7c40 [ 945.915277][T17178] should_fail_ex+0x390/0x4c0 [ 945.919993][T17178] prepare_alloc_pages+0x1e1/0x5b0 [ 945.925230][T17178] __alloc_pages+0x130/0x4f0 [ 945.929929][T17178] ? zone_statistics+0x170/0x170 [ 945.934906][T17178] ? verify_lock_unused+0x140/0x140 [ 945.940230][T17178] __folio_alloc+0xe/0x30 [ 945.944587][T17178] vma_alloc_folio+0x499/0x900 [ 945.949636][T17178] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 945.955522][T17178] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 945.961282][T17178] ? shmem_replace_folio+0xdc0/0xdc0 [ 945.966635][T17178] ? xas_load+0x127/0x140 [ 945.970999][T17178] ? __filemap_get_folio+0x10f/0xde0 [ 945.976316][T17178] ? __filemap_get_folio+0xb43/0xde0 [ 945.981642][T17178] ? __filemap_get_folio+0x10f/0xde0 [ 945.986962][T17178] ? page_cache_prev_miss+0x380/0x380 [ 945.992373][T17178] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 945.998382][T17178] ? do_user_addr_fault+0x8c7/0xb20 [ 946.003616][T17178] shmem_get_folio_gfp+0x1439/0x35e0 [ 946.008964][T17178] shmem_write_begin+0xee/0x3f0 [ 946.013847][T17178] generic_perform_write+0x2fa/0x5c0 [ 946.019178][T17178] ? generic_file_direct_write+0x330/0x330 [ 946.025009][T17178] ? __file_remove_privs+0x5f0/0x5f0 [ 946.030412][T17178] ? rwsem_write_trylock+0x135/0x1c0 [ 946.035723][T17178] ? clear_nonspinnable+0x60/0x60 [ 946.040781][T17178] ? generic_write_checks_count+0x363/0x440 [ 946.046720][T17178] __generic_file_write_iter+0x148/0x2a0 [ 946.052395][T17178] generic_file_write_iter+0xab/0x2e0 [ 946.057806][T17178] vfs_write+0x482/0x9a0 [ 946.062094][T17178] ? file_end_write+0x250/0x250 [ 946.066991][T17178] ? __fget_files+0x3fc/0x460 [ 946.071792][T17178] ? __fdget_pos+0x2ae/0x360 [ 946.076414][T17178] ? ksys_write+0x70/0x260 [ 946.080868][T17178] ksys_write+0x14d/0x260 [ 946.085231][T17178] ? __ia32_sys_read+0x80/0x80 [ 946.090295][T17178] ? lockdep_hardirqs_on+0x94/0x140 [ 946.095518][T17178] do_syscall_64+0x4c/0xa0 [ 946.099955][T17178] ? clear_bhb_loop+0x60/0xb0 [ 946.104792][T17178] ? clear_bhb_loop+0x60/0xb0 [ 946.109489][T17178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.115502][T17178] RIP: 0033:0x7feeeb79e159 [ 946.119936][T17178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.139746][T17178] RSP: 002b:00007feeec58a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 946.148188][T17178] RAX: ffffffffffffffda RBX: 00007feeeba25fa0 RCX: 00007feeeb79e159 [ 946.156275][T17178] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 946.164279][T17178] RBP: 00007feeec58a090 R08: 0000000000000000 R09: 0000000000000000 [ 946.172287][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.180286][T17178] R13: 00007feeeba26038 R14: 00007feeeba25fa0 R15: 00007ffebceb2cb8 [ 946.188313][T17178] [ 946.215821][T17177] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3133'. [ 946.229269][T17181] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3133'. [ 946.697945][T17195] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3136'. [ 946.985308][T17208] netlink: 'syz.5.3140': attribute type 3 has an invalid length. [ 947.059406][T17208] netlink: 16066 bytes leftover after parsing attributes in process `syz.5.3140'. [ 947.078856][T17210] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.3141'. [ 947.266198][T17220] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.3141'. [ 947.450666][T17219] netlink: 'syz.4.3142': attribute type 7 has an invalid length. [ 947.470923][T17219] netlink: 'syz.4.3142': attribute type 6 has an invalid length. [ 947.499056][T17229] netlink: 'syz.5.3145': attribute type 10 has an invalid length. [ 947.514657][T17229] netlink: 'syz.5.3145': attribute type 19 has an invalid length. [ 947.559575][T17229] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3145'. [ 947.909635][T17241] device syzkaller0 entered promiscuous mode [ 948.058886][T17239] netlink: 'syz.3.3148': attribute type 3 has an invalid length. [ 948.074255][T17239] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3148'. [ 948.552440][T17258] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3154'. [ 948.553992][T17262] FAULT_INJECTION: forcing a failure. [ 948.553992][T17262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.574963][T17262] CPU: 0 PID: 17262 Comm: syz.1.3155 Not tainted syzkaller #0 [ 948.582458][T17262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 948.592532][T17262] Call Trace: [ 948.595809][T17262] [ 948.598737][T17262] dump_stack_lvl+0x188/0x24e [ 948.603418][T17262] ? show_regs_print_info+0x12/0x12 [ 948.608613][T17262] ? load_image+0x410/0x410 [ 948.613111][T17262] ? _raw_spin_lock_irq+0xb7/0xf0 [ 948.618174][T17262] ? _raw_spin_unlock_irq+0x1f/0x40 [ 948.625911][T17262] ? lockdep_hardirqs_on+0x94/0x140 [ 948.631117][T17262] should_fail_ex+0x390/0x4c0 [ 948.635798][T17262] copy_page_from_iter_atomic+0x21d/0x12e0 [ 948.641624][T17262] ? pipe_zero+0x140/0x140 [ 948.646046][T17262] ? PageHeadHuge+0x8e/0x1c0 [ 948.650635][T17262] ? shmem_write_begin+0x1b4/0x3f0 [ 948.655748][T17262] generic_perform_write+0x34f/0x5c0 [ 948.661073][T17262] ? generic_file_direct_write+0x330/0x330 [ 948.666880][T17262] ? __file_remove_privs+0x5f0/0x5f0 [ 948.672386][T17262] ? rwsem_write_trylock+0x135/0x1c0 [ 948.677783][T17262] ? clear_nonspinnable+0x60/0x60 [ 948.682827][T17262] ? generic_write_checks_count+0x363/0x440 [ 948.688723][T17262] __generic_file_write_iter+0x148/0x2a0 [ 948.694367][T17262] generic_file_write_iter+0xab/0x2e0 [ 948.699798][T17262] vfs_write+0x482/0x9a0 [ 948.704065][T17262] ? file_end_write+0x250/0x250 [ 948.708927][T17262] ? __fget_files+0x3fc/0x460 [ 948.713632][T17262] ? __fdget_pos+0x2ae/0x360 [ 948.718243][T17262] ? ksys_write+0x70/0x260 [ 948.722682][T17262] ksys_write+0x14d/0x260 [ 948.727021][T17262] ? __ia32_sys_read+0x80/0x80 [ 948.731794][T17262] ? lockdep_hardirqs_on+0x94/0x140 [ 948.736998][T17262] do_syscall_64+0x4c/0xa0 [ 948.741412][T17262] ? clear_bhb_loop+0x60/0xb0 [ 948.746085][T17262] ? clear_bhb_loop+0x60/0xb0 [ 948.750847][T17262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 948.756739][T17262] RIP: 0033:0x7fb5a5f9e159 [ 948.761156][T17262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.780775][T17262] RSP: 002b:00007fb5a6df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.789450][T17262] RAX: ffffffffffffffda RBX: 00007fb5a6225fa0 RCX: 00007fb5a5f9e159 [ 948.797416][T17262] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 948.805382][T17262] RBP: 00007fb5a6df4090 R08: 0000000000000000 R09: 0000000000000000 [ 948.813432][T17262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.821396][T17262] R13: 00007fb5a6226038 R14: 00007fb5a6225fa0 R15: 00007ffdd739a8e8 [ 948.829380][T17262] [ 948.913859][T14480] Bluetooth: hci1: command 0x0406 tx timeout [ 949.090105][T14199] device hsr_slave_0 left promiscuous mode [ 949.099970][T14199] device hsr_slave_1 left promiscuous mode [ 949.143917][T14199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.151727][T14199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.191024][T14199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.212721][T14199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.265207][T14199] device bridge_slave_1 left promiscuous mode [ 949.273209][T14199] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.312916][T14199] device bridge_slave_0 left promiscuous mode [ 949.332320][T14199] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.378453][T17275] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3162'. [ 950.147653][T14199] device veth1_macvtap left promiscuous mode [ 950.153828][T14199] device veth0_macvtap left promiscuous mode [ 950.165609][T14199] device veth1_vlan left promiscuous mode [ 950.171996][T14199] device veth0_vlan left promiscuous mode [ 950.424187][T17300] FAULT_INJECTION: forcing a failure. [ 950.424187][T17300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 950.447554][T17300] CPU: 0 PID: 17300 Comm: syz.5.3168 Not tainted syzkaller #0 [ 950.455069][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.465234][T17300] Call Trace: [ 950.468530][T17300] [ 950.471480][T17300] dump_stack_lvl+0x188/0x24e [ 950.476175][T17300] ? show_regs_print_info+0x12/0x12 [ 950.481465][T17300] ? load_image+0x410/0x410 [ 950.486149][T17300] ? __lock_acquire+0x7c40/0x7c40 [ 950.491178][T17300] should_fail_ex+0x390/0x4c0 [ 950.495868][T17300] prepare_alloc_pages+0x1e1/0x5b0 [ 950.501011][T17300] __alloc_pages+0x130/0x4f0 [ 950.505628][T17300] ? zone_statistics+0x170/0x170 [ 950.510629][T17300] ? verify_lock_unused+0x140/0x140 [ 950.515848][T17300] __folio_alloc+0xe/0x30 [ 950.520184][T17300] vma_alloc_folio+0x499/0x900 [ 950.524965][T17300] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 950.530773][T17300] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 950.536499][T17300] ? shmem_replace_folio+0xdc0/0xdc0 [ 950.541788][T17300] ? xas_load+0x127/0x140 [ 950.546113][T17300] ? __filemap_get_folio+0x10f/0xde0 [ 950.551399][T17300] ? __filemap_get_folio+0xb43/0xde0 [ 950.556692][T17300] ? __filemap_get_folio+0x10f/0xde0 [ 950.562074][T17300] ? page_cache_prev_miss+0x380/0x380 [ 950.567458][T17300] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 950.573445][T17300] ? do_user_addr_fault+0x8c7/0xb20 [ 950.578662][T17300] shmem_get_folio_gfp+0x1439/0x35e0 [ 950.583971][T17300] shmem_write_begin+0xee/0x3f0 [ 950.588835][T17300] generic_perform_write+0x2fa/0x5c0 [ 950.594138][T17300] ? generic_file_direct_write+0x330/0x330 [ 950.599944][T17300] ? __file_remove_privs+0x5f0/0x5f0 [ 950.605233][T17300] ? rwsem_write_trylock+0x135/0x1c0 [ 950.610531][T17300] ? clear_nonspinnable+0x60/0x60 [ 950.615546][T17300] ? generic_write_checks_count+0x363/0x440 [ 950.621440][T17300] __generic_file_write_iter+0x148/0x2a0 [ 950.627080][T17300] generic_file_write_iter+0xab/0x2e0 [ 950.632454][T17300] vfs_write+0x482/0x9a0 [ 950.636727][T17300] ? file_end_write+0x250/0x250 [ 950.641578][T17300] ? __fget_files+0x3fc/0x460 [ 950.646279][T17300] ? __fdget_pos+0x2ae/0x360 [ 950.650872][T17300] ? ksys_write+0x70/0x260 [ 950.655456][T17300] ksys_write+0x14d/0x260 [ 950.659805][T17300] ? __ia32_sys_read+0x80/0x80 [ 950.664589][T17300] ? lockdep_hardirqs_on+0x94/0x140 [ 950.669801][T17300] do_syscall_64+0x4c/0xa0 [ 950.674232][T17300] ? clear_bhb_loop+0x60/0xb0 [ 950.678902][T17300] ? clear_bhb_loop+0x60/0xb0 [ 950.683579][T17300] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.689489][T17300] RIP: 0033:0x7feeeb79e159 [ 950.693900][T17300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.713704][T17300] RSP: 002b:00007feeec58a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 950.722138][T17300] RAX: ffffffffffffffda RBX: 00007feeeba25fa0 RCX: 00007feeeb79e159 [ 950.730121][T17300] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 950.738116][T17300] RBP: 00007feeec58a090 R08: 0000000000000000 R09: 0000000000000000 [ 950.746084][T17300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.754058][T17300] R13: 00007feeeba26038 R14: 00007feeeba25fa0 R15: 00007ffebceb2cb8 [ 950.762050][T17300] [ 951.466335][T14199] team0 (unregistering): Port device team_slave_1 removed [ 951.509479][T14199] team0 (unregistering): Port device team_slave_0 removed [ 951.551642][T14199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.605916][T14199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.905249][T14199] bond0 (unregistering): Released all slaves [ 952.011094][T17302] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 952.020403][T17302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.039588][T17302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.052901][T17302] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 952.077348][T17286] netlink: 'syz.2.3164': attribute type 3 has an invalid length. [ 952.090390][T17286] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3164'. [ 952.420369][T17326] netlink: 'syz.1.3173': attribute type 22 has an invalid length. [ 952.721485][T17335] netlink: 'syz.3.3176': attribute type 3 has an invalid length. [ 952.784133][T17337] netlink: 'syz.4.3177': attribute type 29 has an invalid length. [ 952.808045][T17335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3176'. [ 952.835106][T17337] netlink: 'syz.4.3177': attribute type 29 has an invalid length. [ 952.967393][T17344] netlink: 'syz.2.3179': attribute type 4 has an invalid length. [ 952.980259][T17344] netlink: 'syz.2.3179': attribute type 26 has an invalid length. [ 952.988531][T17344] netlink: 'syz.2.3179': attribute type 26 has an invalid length. [ 953.015024][T17344] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.3179'. [ 953.082342][T17354] FAULT_INJECTION: forcing a failure. [ 953.082342][T17354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 953.095587][T17354] CPU: 1 PID: 17354 Comm: syz.3.3181 Not tainted syzkaller #0 [ 953.103121][T17354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.113206][T17354] Call Trace: [ 953.116504][T17354] [ 953.119456][T17354] dump_stack_lvl+0x188/0x24e [ 953.124164][T17354] ? show_regs_print_info+0x12/0x12 [ 953.129397][T17354] ? load_image+0x410/0x410 [ 953.133926][T17354] ? _raw_spin_lock_irq+0xb7/0xf0 [ 953.139082][T17354] ? _raw_spin_unlock_irq+0x1f/0x40 [ 953.144347][T17354] ? lockdep_hardirqs_on+0x94/0x140 [ 953.149580][T17354] should_fail_ex+0x390/0x4c0 [ 953.154292][T17354] copy_page_from_iter_atomic+0x21d/0x12e0 [ 953.160145][T17354] ? pipe_zero+0x140/0x140 [ 953.164604][T17354] ? PageHeadHuge+0x8e/0x1c0 [ 953.169221][T17354] ? shmem_write_begin+0x1b4/0x3f0 [ 953.174373][T17354] generic_perform_write+0x34f/0x5c0 [ 953.179707][T17354] ? generic_file_direct_write+0x330/0x330 [ 953.185543][T17354] ? __file_remove_privs+0x5f0/0x5f0 [ 953.190860][T17354] ? rwsem_write_trylock+0x135/0x1c0 [ 953.196179][T17354] ? clear_nonspinnable+0x60/0x60 [ 953.201323][T17354] ? generic_write_checks_count+0x363/0x440 [ 953.207519][T17354] __generic_file_write_iter+0x148/0x2a0 [ 953.213195][T17354] generic_file_write_iter+0xab/0x2e0 [ 953.218605][T17354] vfs_write+0x482/0x9a0 [ 953.222890][T17354] ? file_end_write+0x250/0x250 [ 953.227772][T17354] ? __fget_files+0x3fc/0x460 [ 953.232519][T17354] ? __fdget_pos+0x2ae/0x360 [ 953.237134][T17354] ? ksys_write+0x70/0x260 [ 953.241593][T17354] ksys_write+0x14d/0x260 [ 953.245956][T17354] ? __ia32_sys_read+0x80/0x80 [ 953.250759][T17354] ? lockdep_hardirqs_on+0x94/0x140 [ 953.255999][T17354] do_syscall_64+0x4c/0xa0 [ 953.260445][T17354] ? clear_bhb_loop+0x60/0xb0 [ 953.265142][T17354] ? clear_bhb_loop+0x60/0xb0 [ 953.269824][T17354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 953.275732][T17354] RIP: 0033:0x7f3543f9e159 [ 953.280145][T17354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.299763][T17354] RSP: 002b:00007f3544df8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.308193][T17354] RAX: ffffffffffffffda RBX: 00007f3544225fa0 RCX: 00007f3543f9e159 [ 953.316181][T17354] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 953.324161][T17354] RBP: 00007f3544df8090 R08: 0000000000000000 R09: 0000000000000000 [ 953.332138][T17354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 953.340112][T17354] R13: 00007f3544226038 R14: 00007f3544225fa0 R15: 00007ffd45a197d8 [ 953.348096][T17354] [ 953.366760][T17344] netlink: 'syz.2.3179': attribute type 4 has an invalid length. [ 953.385331][T17344] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.3179'. [ 953.702296][T17363] device wlan1 entered promiscuous mode [ 953.719211][T17360] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3183'. [ 953.753278][T17355] device syzkaller0 entered promiscuous mode [ 954.513420][T17384] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3193'. [ 954.589247][T17392] FAULT_INJECTION: forcing a failure. [ 954.589247][T17392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 954.606029][T17392] CPU: 1 PID: 17392 Comm: syz.2.3195 Not tainted syzkaller #0 [ 954.613539][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.623623][T17392] Call Trace: [ 954.626920][T17392] [ 954.629875][T17392] dump_stack_lvl+0x188/0x24e [ 954.634582][T17392] ? show_regs_print_info+0x12/0x12 [ 954.639983][T17392] ? load_image+0x410/0x410 [ 954.644521][T17392] ? __lock_acquire+0x7c40/0x7c40 [ 954.649600][T17392] should_fail_ex+0x390/0x4c0 [ 954.654317][T17392] prepare_alloc_pages+0x1e1/0x5b0 [ 954.659626][T17392] __alloc_pages+0x130/0x4f0 [ 954.664252][T17392] ? zone_statistics+0x170/0x170 [ 954.669229][T17392] ? verify_lock_unused+0x140/0x140 [ 954.674466][T17392] __folio_alloc+0xe/0x30 [ 954.678833][T17392] vma_alloc_folio+0x499/0x900 [ 954.683650][T17392] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 954.689491][T17392] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 954.695246][T17392] ? shmem_replace_folio+0xdc0/0xdc0 [ 954.700578][T17392] ? xas_load+0x127/0x140 [ 954.704946][T17392] ? __filemap_get_folio+0x10f/0xde0 [ 954.710260][T17392] ? __filemap_get_folio+0xb43/0xde0 [ 954.715577][T17392] ? __filemap_get_folio+0x10f/0xde0 [ 954.720896][T17392] ? page_cache_prev_miss+0x380/0x380 [ 954.726394][T17392] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 954.732399][T17392] ? do_user_addr_fault+0x8c7/0xb20 [ 954.737636][T17392] shmem_get_folio_gfp+0x1439/0x35e0 [ 954.742988][T17392] shmem_write_begin+0xee/0x3f0 [ 954.747874][T17392] generic_perform_write+0x2fa/0x5c0 [ 954.753204][T17392] ? generic_file_direct_write+0x330/0x330 [ 954.759043][T17392] ? __file_remove_privs+0x5f0/0x5f0 [ 954.764352][T17392] ? rwsem_write_trylock+0x135/0x1c0 [ 954.769673][T17392] ? clear_nonspinnable+0x60/0x60 [ 954.774723][T17392] ? generic_write_checks_count+0x363/0x440 [ 954.780658][T17392] __generic_file_write_iter+0x148/0x2a0 [ 954.786331][T17392] generic_file_write_iter+0xab/0x2e0 [ 954.791739][T17392] vfs_write+0x482/0x9a0 [ 954.796018][T17392] ? file_end_write+0x250/0x250 [ 954.800914][T17392] ? __fget_files+0x3fc/0x460 [ 954.805626][T17392] ? __fdget_pos+0x2ae/0x360 [ 954.810261][T17392] ? ksys_write+0x70/0x260 [ 954.814681][T17392] ksys_write+0x14d/0x260 [ 954.819098][T17392] ? __ia32_sys_read+0x80/0x80 [ 954.823881][T17392] ? lockdep_hardirqs_on+0x94/0x140 [ 954.829082][T17392] do_syscall_64+0x4c/0xa0 [ 954.833492][T17392] ? clear_bhb_loop+0x60/0xb0 [ 954.838211][T17392] ? clear_bhb_loop+0x60/0xb0 [ 954.842885][T17392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 954.848775][T17392] RIP: 0033:0x7ffb6479e159 [ 954.853186][T17392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.872798][T17392] RSP: 002b:00007ffb656b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 954.881207][T17392] RAX: ffffffffffffffda RBX: 00007ffb64a25fa0 RCX: 00007ffb6479e159 [ 954.889370][T17392] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 954.897334][T17392] RBP: 00007ffb656b7090 R08: 0000000000000000 R09: 0000000000000000 [ 954.905385][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.913352][T17392] R13: 00007ffb64a26038 R14: 00007ffb64a25fa0 R15: 00007ffeb8610e78 [ 954.921353][T17392] [ 955.067924][T17399] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3197'. [ 955.093334][T17402] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3198'. [ 955.309054][T17404] device syzkaller0 entered promiscuous mode [ 955.720302][ T4287] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 955.839161][T17427] FAULT_INJECTION: forcing a failure. [ 955.839161][T17427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 955.852398][T17427] CPU: 1 PID: 17427 Comm: syz.4.3208 Not tainted syzkaller #0 [ 955.859878][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.869948][T17427] Call Trace: [ 955.873225][T17427] [ 955.876151][T17427] dump_stack_lvl+0x188/0x24e [ 955.880830][T17427] ? show_regs_print_info+0x12/0x12 [ 955.886025][T17427] ? lockdep_hardirqs_on+0x94/0x140 [ 955.891222][T17427] ? asm_sysvec_call_function_single+0x16/0x20 [ 955.897413][T17427] should_fail_ex+0x390/0x4c0 [ 955.902093][T17427] copy_page_from_iter_atomic+0x21d/0x12e0 [ 955.907997][T17427] ? pipe_zero+0x140/0x140 [ 955.912429][T17427] ? PageHeadHuge+0x8e/0x1c0 [ 955.917042][T17427] ? shmem_write_begin+0x1b4/0x3f0 [ 955.922261][T17427] generic_perform_write+0x34f/0x5c0 [ 955.927581][T17427] ? generic_file_direct_write+0x330/0x330 [ 955.933403][T17427] ? __file_remove_privs+0x5f0/0x5f0 [ 955.938703][T17427] ? rwsem_write_trylock+0x135/0x1c0 [ 955.943989][T17427] ? clear_nonspinnable+0x60/0x60 [ 955.949009][T17427] ? generic_write_checks_count+0x363/0x440 [ 955.954897][T17427] __generic_file_write_iter+0x148/0x2a0 [ 955.960533][T17427] generic_file_write_iter+0xab/0x2e0 [ 955.965902][T17427] vfs_write+0x482/0x9a0 [ 955.970144][T17427] ? file_end_write+0x250/0x250 [ 955.974993][T17427] ? __fget_files+0x3fc/0x460 [ 955.979673][T17427] ? __fdget_pos+0x2ae/0x360 [ 955.984263][T17427] ? ksys_write+0x70/0x260 [ 955.988676][T17427] ksys_write+0x14d/0x260 [ 955.993005][T17427] ? __ia32_sys_read+0x80/0x80 [ 955.997767][T17427] ? lockdep_hardirqs_on+0x94/0x140 [ 956.002965][T17427] do_syscall_64+0x4c/0xa0 [ 956.007399][T17427] ? clear_bhb_loop+0x60/0xb0 [ 956.012087][T17427] ? clear_bhb_loop+0x60/0xb0 [ 956.016777][T17427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 956.022676][T17427] RIP: 0033:0x7fa9fb79e159 [ 956.027085][T17427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.046686][T17427] RSP: 002b:00007fa9fc58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 956.055333][T17427] RAX: ffffffffffffffda RBX: 00007fa9fba25fa0 RCX: 00007fa9fb79e159 [ 956.063325][T17427] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 956.071298][T17427] RBP: 00007fa9fc58f090 R08: 0000000000000000 R09: 0000000000000000 [ 956.079268][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 956.087246][T17427] R13: 00007fa9fba26038 R14: 00007fa9fba25fa0 R15: 00007ffe787feaf8 [ 956.095248][T17427] [ 956.473524][T17441] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3211'. [ 956.677790][T17440] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3212'. [ 957.087044][T17441] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3211'. [ 957.441641][T17460] validate_nla: 5 callbacks suppressed [ 957.441659][T17460] netlink: 'syz.4.3216': attribute type 3 has an invalid length. [ 957.455727][T17460] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3216'. [ 958.831031][T17445] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3211'. [ 958.875285][T17462] device wlan1 entered promiscuous mode [ 959.053735][T17471] netlink: 'syz.3.3220': attribute type 3 has an invalid length. [ 959.057087][T17473] device syzkaller0 entered promiscuous mode [ 959.094976][T17471] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3220'. [ 959.187697][T17477] FAULT_INJECTION: forcing a failure. [ 959.187697][T17477] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 959.206736][T17477] CPU: 0 PID: 17477 Comm: syz.4.3222 Not tainted syzkaller #0 [ 959.214252][T17477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.224329][T17477] Call Trace: [ 959.227640][T17477] [ 959.230590][T17477] dump_stack_lvl+0x188/0x24e [ 959.235308][T17477] ? show_regs_print_info+0x12/0x12 [ 959.240534][T17477] ? load_image+0x410/0x410 [ 959.245071][T17477] ? __lock_acquire+0x7c40/0x7c40 [ 959.250133][T17477] ? perf_trace_lock_acquire+0x101/0x3f0 [ 959.255810][T17477] should_fail_ex+0x390/0x4c0 [ 959.260529][T17477] prepare_alloc_pages+0x1e1/0x5b0 [ 959.265687][T17477] __alloc_pages+0x130/0x4f0 [ 959.270317][T17477] ? zone_statistics+0x170/0x170 [ 959.275301][T17477] ? verify_lock_unused+0x140/0x140 [ 959.280538][T17477] __folio_alloc+0xe/0x30 [ 959.284901][T17477] vma_alloc_folio+0x499/0x900 [ 959.289702][T17477] ? mpol_shared_policy_lookup+0x147/0x1e0 [ 959.295544][T17477] shmem_alloc_and_acct_folio+0x463/0xbd0 [ 959.301312][T17477] ? shmem_replace_folio+0xdc0/0xdc0 [ 959.306653][T17477] ? xas_load+0x127/0x140 [ 959.311020][T17477] ? __filemap_get_folio+0x10f/0xde0 [ 959.316345][T17477] ? __filemap_get_folio+0xb43/0xde0 [ 959.321661][T17477] ? __filemap_get_folio+0x10f/0xde0 [ 959.326979][T17477] ? page_cache_prev_miss+0x380/0x380 [ 959.332379][T17477] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 959.338478][T17477] ? do_user_addr_fault+0x8c7/0xb20 [ 959.343698][T17477] shmem_get_folio_gfp+0x1439/0x35e0 [ 959.349139][T17477] shmem_write_begin+0xee/0x3f0 [ 959.354043][T17477] generic_perform_write+0x2fa/0x5c0 [ 959.359373][T17477] ? generic_file_direct_write+0x330/0x330 [ 959.365196][T17477] ? __file_remove_privs+0x5f0/0x5f0 [ 959.370518][T17477] ? rwsem_write_trylock+0x135/0x1c0 [ 959.375804][T17477] ? clear_nonspinnable+0x60/0x60 [ 959.380832][T17477] ? generic_write_checks_count+0x363/0x440 [ 959.386729][T17477] __generic_file_write_iter+0x148/0x2a0 [ 959.392368][T17477] generic_file_write_iter+0xab/0x2e0 [ 959.397748][T17477] vfs_write+0x482/0x9a0 [ 959.401998][T17477] ? file_end_write+0x250/0x250 [ 959.406856][T17477] ? __fget_files+0x3fc/0x460 [ 959.411653][T17477] ? __fdget_pos+0x2ae/0x360 [ 959.416289][T17477] ? ksys_write+0x70/0x260 [ 959.420806][T17477] ksys_write+0x14d/0x260 [ 959.425156][T17477] ? __ia32_sys_read+0x80/0x80 [ 959.429925][T17477] ? lockdep_hardirqs_on+0x94/0x140 [ 959.435128][T17477] do_syscall_64+0x4c/0xa0 [ 959.439542][T17477] ? clear_bhb_loop+0x60/0xb0 [ 959.444212][T17477] ? clear_bhb_loop+0x60/0xb0 [ 959.448883][T17477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 959.454774][T17477] RIP: 0033:0x7fa9fb79e159 [ 959.459214][T17477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.478919][T17477] RSP: 002b:00007fa9fc58f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 959.487338][T17477] RAX: ffffffffffffffda RBX: 00007fa9fba25fa0 RCX: 00007fa9fb79e159 [ 959.495445][T17477] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 0000000000000003 [ 959.503425][T17477] RBP: 00007fa9fc58f090 R08: 0000000000000000 R09: 0000000000000000 [ 959.511404][T17477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.519376][T17477] R13: 00007fa9fba26038 R14: 00007fa9fba25fa0 R15: 00007ffe787feaf8 [ 959.527362][T17477] [ 959.717886][T17479] netlink: 'syz.5.3223': attribute type 3 has an invalid length. [ 959.752515][T17479] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3223'. [ 959.960099][T17486] netlink: 'syz.4.3225': attribute type 13 has an invalid length. [ 959.979197][T17486] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3225'. [ 960.022239][T17491] netlink: 'syz.2.3227': attribute type 10 has an invalid length. [ 960.111283][T17491] device netdevsim0 left promiscuous mode [ 960.829334][ C0] [ 960.829344][ C0] ================================ [ 960.829349][ C0] WARNING: inconsistent lock state [ 960.829377][ C0] syzkaller #0 Not tainted [ 960.829387][ C0] -------------------------------- [ 960.829391][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 960.829398][ C0] syz.4.3230/17504 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 960.829416][ C0] ffff888023a1a068 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 960.829553][ C0] {INITIAL USE} state was registered at: [ 960.829560][ C0] lock_acquire+0x1bb/0x4a0 [ 960.829581][ C0] _raw_spin_lock+0x2a/0x40 [ 960.829602][ C0] htab_lock_bucket+0x179/0x2f0 [ 960.829619][ C0] __htab_lru_percpu_map_update_elem+0x26e/0x970 [ 960.829636][ C0] bpf_percpu_hash_update+0x115/0x200 [ 960.829653][ C0] bpf_map_update_value+0x30f/0x670 [ 960.829671][ C0] map_update_elem+0x4fa/0x6a0 [ 960.829690][ C0] __sys_bpf+0x4ec/0x780 [ 960.829708][ C0] __x64_sys_bpf+0x78/0x90 [ 960.829726][ C0] do_syscall_64+0x4c/0xa0 [ 960.829741][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.829768][ C0] irq event stamp: 1010 [ 960.829774][ C0] hardirqs last enabled at (1009): [] syscall_enter_from_user_mode+0x21/0x80 [ 960.829799][ C0] hardirqs last disabled at (1010): [] exc_debug+0x6e/0x130 [ 960.829819][ C0] softirqs last enabled at (726): [] bpf_prog_load+0x111d/0x1530 [ 960.829843][ C0] softirqs last disabled at (724): [] bpf_ksym_add+0x28/0x330 [ 960.829861][ C0] [ 960.829861][ C0] other info that might help us debug this: [ 960.829866][ C0] Possible unsafe locking scenario: [ 960.829866][ C0] [ 960.829870][ C0] CPU0 [ 960.829873][ C0] ---- [ 960.829877][ C0] lock(&htab->lockdep_key); [ 960.829887][ C0] [ 960.829890][ C0] lock(&htab->lockdep_key); [ 960.829899][ C0] [ 960.829899][ C0] *** DEADLOCK *** [ 960.829899][ C0] [ 960.829903][ C0] no locks held by syz.4.3230/17504. [ 960.829910][ C0] [ 960.829910][ C0] stack backtrace: [ 960.829915][ C0] CPU: 0 PID: 17504 Comm: syz.4.3230 Not tainted syzkaller #0 [ 960.829930][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 960.829939][ C0] Call Trace: [ 960.829945][ C0] <#DB> [ 960.830053][ C0] dump_stack_lvl+0x188/0x24e [ 960.830075][ C0] ? show_regs_print_info+0x12/0x12 [ 960.830100][ C0] ? print_usage_bug+0x42a/0x690 [ 960.830123][ C0] ? verify_lock_unused+0x15/0x140 [ 960.830149][ C0] lock_acquire+0x2df/0x4a0 [ 960.830174][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 960.830195][ C0] ? read_lock_is_recursive+0x10/0x10 [ 960.830217][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 960.830254][ C0] ? perf_trace_lock_acquire+0x342/0x3f0 [ 960.830278][ C0] _raw_spin_lock+0x2a/0x40 [ 960.830299][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 960.830317][ C0] htab_lock_bucket+0x179/0x2f0 [ 960.830339][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 960.830366][ C0] ? look_up_lock_class+0x75/0x140 [ 960.830388][ C0] ? verify_lock_unused+0x15/0x140 [ 960.830412][ C0] ? htab_map_hash+0x2ed/0x6d0 [ 960.830432][ C0] htab_lru_map_delete_elem+0x1a1/0x760 [ 960.830453][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 960.830473][ C0] ? htab_lru_map_update_elem+0xe60/0xe60 [ 960.830495][ C0] ? look_up_lock_class+0x75/0x140 [ 960.830521][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 960.830541][ C0] bpf_overflow_handler+0x50b/0x790 [ 960.830563][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 960.830581][ C0] ? perf_swevent_overflow+0x230/0x230 [ 960.830608][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 960.830635][ C0] __perf_event_overflow+0x457/0x630 [ 960.830665][ C0] perf_swevent_event+0x315/0x570 [ 960.830692][ C0] ? perf_tp_event+0xc10/0xc10 [ 960.830727][ C0] perf_bp_event+0x311/0x3f0 [ 960.830753][ C0] ? perf_trace_lock_acquire+0x342/0x3f0 [ 960.830774][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 960.830825][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 960.830877][ C0] ? read_lock_is_recursive+0x10/0x10 [ 960.830907][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 960.830965][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 960.830983][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 960.831006][ C0] notify_die+0x141/0x1a0 [ 960.831027][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 960.831061][ C0] notify_debug+0x20/0x30 [ 960.831080][ C0] exc_debug+0xd9/0x130 [ 960.831101][ C0] asm_exc_debug+0x1a/0x40 [ 960.831116][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 960.831135][ C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 960.831149][ C0] RSP: 0018:ffffc900036d7d48 EFLAGS: 00050206 [ 960.831163][ C0] RAX: ffffffff84164501 RBX: 0000000000000090 RCX: 000000000000008f [ 960.831174][ C0] RDX: 0000000000000090 RSI: 0000200000000301 RDI: ffffc900036d7dc1 [ 960.831185][ C0] RBP: 0000000000000000 R08: ffffc900036d7e4f R09: 1ffff920006dafc9 [ 960.831197][ C0] R10: dffffc0000000000 R11: fffff520006dafca R12: 00007fffffffef70 [ 960.831208][ C0] R13: 0000000000000090 R14: ffffc900036d7dc0 R15: 0000200000000300 [ 960.831227][ C0] ? _copy_from_user+0x21/0x170 [ 960.831252][ C0] [ 960.831258][ C0] [ 960.831262][ C0] _copy_from_user+0xf4/0x170 [ 960.831283][ C0] __sys_bpf+0x2ea/0x780 [ 960.831307][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 960.831344][ C0] ? lock_chain_count+0x20/0x20 [ 960.831381][ C0] __x64_sys_bpf+0x78/0x90 [ 960.831403][ C0] do_syscall_64+0x4c/0xa0 [ 960.831418][ C0] ? clear_bhb_loop+0x60/0xb0 [ 960.831434][ C0] ? clear_bhb_loop+0x60/0xb0 [ 960.831451][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 960.831475][ C0] RIP: 0033:0x7fa9fb79e159 [ 960.831489][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 960.831502][ C0] RSP: 002b:00007fa9f99f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 960.831518][ C0] RAX: ffffffffffffffda RBX: 00007fa9fba26090 RCX: 00007fa9fb79e159 [ 960.831530][ C0] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 960.831540][ C0] RBP: 00007fa9fb83506b R08: 0000000000000000 R09: 0000000000000000 [ 960.831550][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 960.831560][ C0] R13: 00007fa9fba26128 R14: 00007fa9fba26090 R15: 00007ffe787feaf8 [ 960.831586][ C0]