last executing test programs: 3m56.445562828s ago: executing program 0 (id=158): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)="0000ffff", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f00fe805e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x922000000003, 0x11) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8941, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r3}, 0x18) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3931}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='qdisc_enqueue\x00', r8}, 0x18) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3m53.771006546s ago: executing program 0 (id=167): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000000006400000181100", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r6, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x35, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000040) r7 = socket$kcm(0xa, 0x2, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x30000000) sendmsg$kcm(r7, &(0x7f0000003c00)={&(0x7f0000001a80)=@in6={0xa, 0x4e22, 0xffffffff, @loopback}, 0x80, &(0x7f0000000840)=[{0x0}], 0x1}, 0x0) close(r0) 3m51.482830106s ago: executing program 0 (id=176): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000"], 0xd8}}, 0x4000040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) 3m49.617804833s ago: executing program 0 (id=181): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400042, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async, rerun: 32) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec9b2a7a", 0xd}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) (async, rerun: 32) close(r2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x37, 0x1, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0x8e}, @typed={0x4107, 0xca}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) (async) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1}, 0x48) (async, rerun: 32) r4 = socket$kcm(0xa, 0x5, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) 3m48.401033023s ago: executing program 0 (id=187): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000880)="5886975b0f87389089ade39fdb4e29e0d71defbbe2ef573c527038ca059c28dc8d61de0db3c2342853fd5594c3648150308edb6bddfc0a6df69b83a2595fe5ab07d73f38c63205f08da23fbaeb2547250462c8c85009e4b510fb88ff95bd03b1bea5e2604dd7f437a01799cf33e42e37259e0b71b01d32ab07b5d8621f372c1651bb2ac63f7d487c1f0a429d4421f56f75", 0x91}], 0x1}, 0x4004024) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c000004006e00140001800600060088470000080015"], 0x2c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000002026aaba09a6c66500000000000000d706a0315cd90fa7864ce5c5cb530f94bcf730a31e3e64f2ef7a9e195ed0ee5d7c435950a57c6e8dc10253f43725922efb4963561c6bf19b6f112e01a81e6c2445c50f1c836bd6cbe772e6f1294d877fcb80a328d8c433da5c13f4af1fdd228679e0ca5059849ba12a189cf2255b44df039e4ac0990037f23fc4fdb617db", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000580)='%^/\':%}[:-\'+[\xaf\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x100}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119f00000000008510000002000000c50000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0x80, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4125, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000040601"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000240)=@pppol2tpv3in6, 0x80, &(0x7f00000002c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/151, 0x97}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/4096, 0x1000}], 0x4}, 0x2000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x12}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448d788dd965f7a33121800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES16=r6], 0xa0}}, 0x0) 3m44.649405002s ago: executing program 0 (id=211): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x24}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xc5, [@rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0xd9, 0x0, 0x3, [0x4, 0x6]}]}}}], 0x28}, 0x20000001) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) 3m29.42318266s ago: executing program 32 (id=211): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x24040808) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f00000003c0)={0x2, 0x4e24, @rand_addr=0x24}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x24, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0xc5, [@rand_addr=0x64010100]}, @timestamp={0x44, 0xc, 0xd9, 0x0, 0x3, [0x4, 0x6]}]}}}], 0x28}, 0x20000001) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc101500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000e4140380100000800c00018006000100d10300000c0000800800034000000002"], 0x1574}, 0x1, 0x0, 0x0, 0x4000850}, 0x840) 3m10.256385559s ago: executing program 3 (id=358): r0 = socket$kcm(0x21, 0x2, 0xa) fstat(r0, &(0x7f00000004c0)) socket$kcm(0x25, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0xe4, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)=@newtaction={0x94, 0x30, 0x53b, 0x70bd27, 0x0, {}, [{0x80, 0x1, [@m_simple={0x7c, 0x1, 0x0, 0x0, {{0xb}, {0x50, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x4a, 0x3, '\\^]!${{%@:\x00\x17\xfc\x92Qz\xa2(q\xf7\x1c\xe4/\xc9\xedF.U\xb5-\xa3\xd2\xc9\x8e\x85\xf7/&U!\x14Y\xbe\xe5\xa4qfM\xab>#E\xd5\xa30\xa6\xfc\xa3{\x1b`j\xf3%\xa9d\xc0[A%'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x94}}, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x2, 0x48b81, r7, 0x401, '\x00', 0x0, r7, 0x4, 0x3, 0x4, 0xb, @value=r7}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000010) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c", 0x29}], 0x2}, 0x0) r11 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000023c0)={r11, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ff03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000009c0)={0x440, 0x3f3, 0x800, 0x70bd2c, 0x25dfdbfd, {0x0, 0x2, 0xd, [0x7fff, 0x2, 0x1a, 0x4, 0x2, 0x11, 0xb, 0x6, 0x32d1, 0xfffffff8, 0x9, 0x4, 0xf39, 0x0, 0x3, 0x5, 0x7ff, 0x8, 0x0, 0xa, 0xfff, 0x2, 0x8d, 0x6, 0x1, 0x2, 0x9, 0x9, 0x7, 0x2, 0x2, 0x2, 0x200, 0x80000000, 0xfff, 0x9, 0x2, 0x7fff, 0x800, 0x7, 0xfc, 0xe, 0x4000000, 0x1, 0x7, 0x6, 0x9, 0x1, 0xfffffff7, 0x8d, 0xf, 0x3, 0xfffffff8, 0x9, 0xa6d, 0x10, 0x5, 0xe4, 0x9, 0xdf, 0x2, 0x800, 0x7, 0x125c], [0x2, 0xfffff6fa, 0x91d, 0xfff, 0xffffffff, 0x4, 0x100, 0x4, 0x8001, 0xf32, 0xffffffdf, 0x6, 0x7, 0x401, 0x8, 0x8, 0x7, 0xf, 0x7f, 0x7, 0x4, 0x6, 0x5, 0x3, 0x7, 0x6b, 0x8, 0x8000, 0x1, 0x10001, 0x10000, 0x5, 0x5, 0x8e, 0x80000001, 0x4, 0x0, 0x9, 0x10001, 0x101, 0x65, 0x5f14, 0x9, 0xffff, 0x7, 0x40, 0x1c8c, 0x7f, 0x8000, 0x1f, 0x2, 0x7f, 0x8, 0x3, 0x9, 0xffff, 0x81, 0x80000001, 0x7, 0x9, 0xe, 0x1ff, 0x4, 0x6], [0x5, 0x2, 0x1000, 0xd, 0x7, 0xffffffff, 0x7, 0x1d73, 0x16400, 0xfd2e, 0x3, 0x9, 0x1f4fa5e1, 0x101, 0x5, 0x4, 0x6, 0x7, 0x400, 0x9, 0xfffffffa, 0x5, 0x20800000, 0x2, 0x7, 0x9, 0x4, 0x2, 0x1, 0x80000000, 0x200, 0x0, 0x7, 0xa71, 0x0, 0x7f, 0x5, 0xff, 0x8000, 0x4, 0x9338, 0xdd3, 0x1, 0x10000, 0x0, 0x8, 0x1, 0x9, 0x3, 0x3ff, 0x206, 0x8001, 0x4, 0x9b6, 0x3, 0xc, 0x9, 0x7, 0x3, 0xe, 0x7fffffff, 0xd, 0x8], [0xea, 0x0, 0x3, 0xe, 0x8, 0x0, 0x1, 0x5, 0x4, 0x3, 0x1, 0x27, 0x84, 0xfff, 0x7, 0xabd, 0xa5, 0xa, 0x1ff, 0x3, 0x0, 0x1, 0x3, 0x3, 0xb3, 0x65fe5906, 0x8, 0x3ffc0000, 0x9f32, 0x80000000, 0x6, 0x6, 0x9, 0x7fffffff, 0x200, 0x5, 0x2, 0x8, 0x4, 0x200, 0x50d, 0x6, 0x7, 0x3, 0xb, 0x92, 0x1ff, 0x48000000, 0xf003, 0x32a4, 0x80000000, 0x30e, 0x47, 0x5, 0xf, 0x7, 0x8, 0x6, 0x9, 0x7, 0xfffffffc, 0x7ff, 0x9a2, 0xfffffffd], 0x1d, ['\x00', '{\x00', 'GPL\x00', '^/\xd5*^\x00', 'syzkaller\x00', '(\x00', '$[.\x00']}, [""]}, 0x440}, 0x1, 0x0, 0x0, 0x20000}, 0x4044010) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, 0x0}, 0x80d1) 3m9.882952974s ago: executing program 3 (id=364): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x803fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000002cc0)=ANY=[], 0x0, 0x9, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x7, 0x0, &(0x7f0000000280)="f525690f58114c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0x7, 0x0, &(0x7f0000000280)="f525690f58114c", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000088429419a00cb0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) (async) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socketpair(0x18, 0xa, 0x3, &(0x7f00000000c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r6) (async) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) 3m9.264477361s ago: executing program 3 (id=370): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000"], 0xd8}}, 0x4000040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf250400000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) 3m9.018508811s ago: executing program 3 (id=373): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffff}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffd, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffd, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) (async) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0xd8ff, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) (async) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0xd8ff, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x7, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000070040000908000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000fdffffffffffffff0000000000000000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000b700000095000000000017fa5a59770000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000b700000095000000000017fa5a59770000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3m8.499447228s ago: executing program 3 (id=378): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @call={0x85, 0x0, 0x0, 0x9d}, @call={0x85, 0x0, 0x0, 0x64}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, @ldst={0x1, 0x3, 0x1, 0x8, 0x8, 0x0, 0x4}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0xd8, &(0x7f00000003c0)=""/216, 0x1f00, 0xa, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x2, 0xff, 0x8}, 0x10, 0x1a836, 0xffffffffffffffff, 0x5, &(0x7f0000000500)=[0x1], &(0x7f0000000540)=[{0x0, 0x4, 0x1, 0x3}, {0x3, 0x5, 0x0, 0x9}, {0x4, 0x3, 0x3, 0xc}, {0x5, 0x5, 0x0, 0x3}, {0x3, 0x4, 0x7, 0x3}], 0x10, 0x1}, 0x94) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1c3}, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xfc, &(0x7f0000000100)=""/252, 0x40f00, 0x48, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x119d4, r2, 0xa, &(0x7f0000000700)=[0xffffffffffffffff, r3], &(0x7f0000000740)=[{0x1, 0x4, 0xf, 0xb}, {0x2, 0x3, 0xe, 0x8}, {0x1, 0x5, 0xa, 0x2}, {0x2, 0x2, 0xa, 0x5}, {0x3, 0x1, 0x4, 0x7}, {0x3, 0x2, 0x3, 0x4}, {0x5, 0x1, 0xe, 0x1}, {0x0, 0x4, 0x10, 0xc}, {0x5, 0x3, 0xa}, {0x4, 0x4, 0x0, 0x2}], 0x10, 0x2}, 0x94) socketpair(0x1d, 0xa813c8d617524836, 0x81, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x52020000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)=@gettaction={0x150, 0x32, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10001}, @action_gd=@TCA_ACT_TAB={0x94, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7c}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)='%ps \x00'}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xc, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000c80)='syzkaller\x00', 0x4, 0x44, &(0x7f0000000cc0)=""/68, 0x40f00, 0x40, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000d40)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0x7, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000dc0)=[{0x2, 0x1, 0x2, 0xa}, {0x1, 0x5, 0x0, 0x6}], 0x10, 0x7f}, 0x94) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r3, 0x58, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(r8, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)=@delqdisc={0x94, 0x25, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x7, 0xa}, {0xfff3, 0xc}, {0xb}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4810}, 0xc1) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x4c, 0x1, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc4}, 0x20000080) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001640)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001600)={&(0x7f0000001380)={0x25c, 0x12, 0x200, 0x70bd26, 0x25dfdbfb, {0x11, 0x2, 0x9, 0x9, {0x4e20, 0x4e22, [0x9071, 0x0, 0x2], [0xfffffffe, 0xffffffff, 0xffffffff, 0x2], 0x0, [0x1, 0x1]}, 0x7fffffff, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x73, 0x1, "7e4550544eb82bb7aa98e716a91d88935483cbbade416c0a2b8b07415b7f8c117b608d93113b4bca9368eea6542c1303022be289a9e7a68faebab357b880c77f4fd2eda6f5e015c54d56e325c2524907955a3cec868c636e64077a20681614eace6440cfa50d90736d8343daa0f4a0"}, @INET_DIAG_REQ_BYTECODE={0x19, 0x1, "a8c8e448a83afd054e4856e94bdbb138f6c648c03a"}, @INET_DIAG_REQ_BYTECODE={0xc6, 0x1, "2d0eac559a404caab404870b41dbd3116b36ea5349560e6a642e834e223059d7019ceb0cea8e6687d719c5fe1b64d84660d77000304809943d9438be5da2eb1749e9c8947aa42d31c2f56250c7512ac33404bf2811a0e9f676a02fe5633bf412e8b1ed73df279f37133e9e2258e78d67d6cb340d701d557e2a59452d26d82c87a8f1492d393555fc508f4323eb56b1a2779da7afdd6c90ec2a8d99446c2fe702abf1d67054e3ca41ae8d3d0f8b9ab63acf35de9f507e61e635d1537e054c6f00e107"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "7c3c0608ef852b205cfb0aa7f5b53f2a20f91c1e79e50b351e122034a957fd30522d79e8e7ea5341af7f37d7dd8daeaaf429c69a008360fa805a027aa7f4a7f7dea8a9e54004abf23ff1272cedc6dcb55ca1c71a0e4bde84ebea063a1735c7ce6de868a43350266d2276b925762a2206ab4715c86effa6e5d20d90516635271da2f77f0f22356a1f80a8b592761783f9858d5f551500f91119326e666a148c22f4ce94aaecc01a25b44ec034af4188e0172d2c"}]}, 0x25c}}, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001680)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001700)=""/220, 0xdc}, {&(0x7f0000001800)=""/209, 0xd1}], 0x2, &(0x7f0000001940)=""/115, 0x73}, 0x2001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r3, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0x6, 0x14, &(0x7f0000001a00)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffff800}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x100}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0x1, 0x5, 0x1, 0x20, 0x8}], &(0x7f0000001ac0)='syzkaller\x00', 0x7, 0x2f, &(0x7f0000001b00)=""/47, 0x40f00, 0x4, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001b40)={0x2, 0x2, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000001c40)=[r0, r6, r0, r3, r10, r6, r3], &(0x7f0000001c80)=[{0x2, 0x3, 0x1, 0x3}, {0x3, 0x3, 0x6, 0x6}, {0x3, 0x2, 0x9, 0xc}, {0x2, 0x1, 0x2, 0x1}, {0x4, 0x2, 0x4, 0xa}, {0x3, 0x4, 0x3, 0x1}, {0x4, 0x4, 0xa}, {0x3, 0x4, 0xb, 0xc}, {0x3, 0x5, 0xd, 0x7}], 0x10, 0x10}, 0x94) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000001e00)) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e40), 0x400000, 0x0) fstat(r8, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r11, 0x400454ce, r12) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001f00)={r8}) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)={0x1b, 0x0, 0x0, 0x0, 0x0, r6, 0x7, '\x00', r9, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r13, 0x7f, '\x00', r9, r1, 0x1, 0x5}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000003300)={&(0x7f0000002040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f00000020c0)=""/211, 0xd3}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003200)=""/196, 0xc4}, 0x10000) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003680)=@bpf_tracing={0x1a, 0x18, &(0x7f0000003340)=@raw=[@tail_call, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @ldst={0x1, 0x0, 0x2, 0x4, 0xb, 0x80}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x5}, @map_val={0x18, 0x8e95a80aa9c0461c, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}], &(0x7f0000003400)='syzkaller\x00', 0x9, 0xe2, &(0x7f0000003440)=""/226, 0x40f00, 0x11, '\x00', r9, 0x1a, r1, 0x8, &(0x7f0000003540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000003580)={0x3, 0xa, 0x9, 0x10000}, 0x10, 0x11865, r7, 0x6, &(0x7f00000035c0)=[r3, r10, r13, r6], &(0x7f0000003600)=[{0x1, 0x3, 0xf, 0xb}, {0x0, 0x5, 0x10, 0x1}, {0x5, 0x5, 0xd, 0xc}, {0x2, 0x2, 0x5, 0x8}, {0x1, 0x3, 0xd}, {0x4, 0x1, 0x2, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003900)={r14, 0x0, 0x14, 0x99, &(0x7f0000003740)="3d0902d05983843a6eef57803277a15ed3c6915c", &(0x7f0000003780)=""/153, 0x4, 0x0, 0x79, 0x37, &(0x7f0000003840)="a9125bc443d5f6f83c8a02537546e93a83d8b267a095779f37b0f95b8a0d1b9f20ed3d488c3df681f741e96c44e6a3bd01afe576209bd17245b24707d66b4589c6f08d22e3be1d91bf67fe22a7f4d93ecaf2c1d0dc7b8570a3c2e95d7efae8ddcc99f0a60dc5b859f349ac4cb2ee01a5722ebc0bb7d2639ad9", &(0x7f00000038c0)="4742fb639bc586e9db5259d09c1a646f9e24767cd3741ad96c4ae2c38b2e5f3193d0d5d829abc62230f688119b481dea04579d6d58d69e", 0x0, 0x0, 0xa9}, 0x50) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f00000039c0)={0x3, &(0x7f0000003980)=[{0x2, 0x9, 0x39, 0x6}, {0x3, 0x9, 0x9, 0x3}, {0x7, 0x2, 0x8, 0x4}]}) mkdir(&(0x7f0000003a00)='./file0\x00', 0x91) 3m8.369271521s ago: executing program 3 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x4, 0x4, 0xc, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x5, 0x0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xee1aa83b25ee3ed3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x3400, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x818) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000021cc0000020700000008800000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffffffffffff0000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0xfc, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 3m7.804806618s ago: executing program 5 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002d00010026bd7000fcdbdf25043f000004000e800c00098008"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000000) 3m7.500682106s ago: executing program 5 (id=389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400000400e0900010073797a3000"], 0xf8}}, 0x80) 3m7.264406738s ago: executing program 5 (id=392): socket$kcm(0x10, 0x2, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff000000000000000c00000000020000000000000802000000000061"], 0x0, 0x44}, 0x28) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0xfffffffffffffffc, &(0x7f0000000300), &(0x7f0000000940), 0x4, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='svcrdma_decode_rqst\x00', r2}, 0x18) syz_clone(0x108200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000011c0)={0x3, 0x80, 0x4, 0xa3, 0x61, 0x76, 0x0, 0xfffffffffffffff9, 0x8000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001140), 0xb}, 0x412, 0xdcc8, 0x5, 0x2, 0x81, 0x10000, 0x1, 0x0, 0x81, 0x0, 0x4c}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000}, 0x108800}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3m4.524386389s ago: executing program 5 (id=397): openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000900)='io.pressure\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000800000000000ede6abbcd2f8", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000800000000000ede6abbcd2f8", @ANYRES32, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xa, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xa, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m3.565196444s ago: executing program 5 (id=407): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, &(0x7f0000000340)={[], [{@subj_type={'subj_type', 0x3d, 'syz1\x00'}}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0, 0x0, 0xbe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10058, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0xffffff48, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) 3m3.394037787s ago: executing program 5 (id=410): socket$kcm(0x23, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(r0) (async) close(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10240, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x1, 0x1942}, 0x14440, 0x5bb, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10240, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x1, 0x1942}, 0x14440, 0x5bb, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) (async) socketpair(0x28, 0x1, 0x28, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000180000000400ef990a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socket$kcm(0xa, 0x922000000003, 0x11) (async) r6 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x800, 0x83}, 0x80, 0x0}, 0x800) socket$kcm(0x1e, 0x4, 0x0) (async) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r7) (async) close(r7) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b640000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v'], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 2m52.938072439s ago: executing program 33 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1a, 0x4, 0x4, 0xc, 0x0, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x5, 0x0}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xee1aa83b25ee3ed3, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x81}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x3400, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, r2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000340)=""/250, 0x37, 0xfa, 0x9}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x818) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x10c38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x25, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x1000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000021cc0000020700000008800000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffffffffffff0000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0xfc, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 2m48.167431017s ago: executing program 34 (id=410): socket$kcm(0x23, 0x5, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) close(r0) (async) close(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10240, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x1, 0x1942}, 0x14440, 0x5bb, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x3, 0x10240, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x1, 0x1942}, 0x14440, 0x5bb, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) (async) socketpair(0x28, 0x1, 0x28, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000180000000400ef990a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085000000b5000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socket$kcm(0xa, 0x922000000003, 0x11) (async) r6 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000cc0)=@l2tp6={0xa, 0x0, 0x1000, @mcast1, 0x800, 0x83}, 0x80, 0x0}, 0x800) socket$kcm(0x1e, 0x4, 0x0) (async) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) close(r7) (async) close(r7) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, 0x0, &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000003b640000950a030000000000b88166989a2144c4935cd0a0ac5b95d50e314f5291c01024194fa3573d7c84920d37af3d720892ebc02aa51b49"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v'], 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 6.907791315s ago: executing program 2 (id=1394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.387180803s ago: executing program 2 (id=1399): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000700000000000000000080000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) 5.059378805s ago: executing program 2 (id=1404): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000f4ffffff00"/21], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2, 0x1, 0x7fff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x157, 0x0, 0xfff, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 4.097311098s ago: executing program 2 (id=1409): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x25, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r1, 0x0, 0x20}, 0x38) 3.473785448s ago: executing program 4 (id=1413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)='U', 0x1080}], 0x29a, 0x0, 0x3e80}, 0x0) 3.315851818s ago: executing program 1 (id=1414): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x7, 0x81, 0x81, 0x0, 0x2, 0x120, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7ff, 0x2, @perf_config_ext={0x7, 0x16}, 0x211, 0x0, 0x1ff, 0x0, 0x0, 0x40, 0x6, 0x0, 0x0, 0x0, 0x8}, r1, 0xf, 0xffffffffffffffff, 0x9) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x1}}, 0x10, &(0x7f0000000280)=[{&(0x7f00000000c0)="10a918fee28ba86b47600556690a0f395105a8f242701be120f950fbb8c67cfc4e052928680413826a478d7cbba511688986eebdd67698094f13c2560e849dc02c5703139907511a2390ed754f6fbfe5b60060f10a", 0x55}, {&(0x7f0000000140)}, {&(0x7f0000000180)="6042cf9a74820b0521c9e829ced89d047fa99b1a32f62d793e855b8f3cbba380dbb71644f3970df2a5194f0deecd5b270e6e55cc46e1db6cd93d41f69238453322ffac9ac4b7d85dd46aedf7c786717c4efb396c43a68caa098a0dcdaf42d8a7bac9bbc3ed92383bed5453b6f5f55854749f60de9846297c44b27ded9c1e059c371247e9537b3dc7e58e591db915bdfad562ffedfd140a978cf5e211a54b6cf2561a2bf3afc1b94c1af329a93e1eecf4acde2af5843abd0211", 0xb9}, {&(0x7f0000000140)="fd713522548d430d6abe042aac3f3ca6470100000000c300000000000000173383a9319d962a35428fb029f32ef4fcaf78091ab809341af1", 0x38}], 0x4, &(0x7f00000002c0)="81ce5e7975fd4bdde308f111020f1a36df55d1f2823538c4ada60b893658d3be4ed98d12fe98c2b9bd2c1d49dadd2846cdcbb5ee1cc437bbe2e2af801b97a18daecfd0f939febb94c3751420bd9f55ccd1a445d8217d2e277c2ed233", 0x5c, 0x40488c0}, 0x24044006) 2.685857841s ago: executing program 4 (id=1415): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x89, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x80) 2.564366064s ago: executing program 7 (id=1417): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000600850000009e"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) 2.509481475s ago: executing program 1 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 2.402443442s ago: executing program 7 (id=1419): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r1, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.35340805s ago: executing program 6 (id=1420): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.695069195s ago: executing program 4 (id=1421): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.579579354s ago: executing program 6 (id=1422): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x3}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1.26550131s ago: executing program 2 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.16568336s ago: executing program 6 (id=1424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.131251996s ago: executing program 7 (id=1425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000200)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 1.065381604s ago: executing program 4 (id=1426): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.06498312s ago: executing program 1 (id=1427): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 837.211983ms ago: executing program 7 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETLINK(0xffffffffffffffff, 0x541b, 0x200000000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='neigh_create\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f80ae"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) 834.160298ms ago: executing program 4 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) 830.728441ms ago: executing program 2 (id=1430): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r1, 0xb701, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x2}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41fe) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1100c80a00000000000000000029200020eedc0000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2c, 0x2, 0x3, &(0x7f0000000300)) socketpair(0x27, 0x800, 0x853d, &(0x7f0000000600)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 694.727052ms ago: executing program 1 (id=1431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r2}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x30, 0x25, 0x300, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) 625.288071ms ago: executing program 6 (id=1432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 476.614879ms ago: executing program 4 (id=1433): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800e000000000000000000000000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r2, &(0x7f0000000980), 0x20000992) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 455.219153ms ago: executing program 6 (id=1434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0xe, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 400.992441ms ago: executing program 7 (id=1435): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 360.876317ms ago: executing program 1 (id=1436): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000380)='task_rename\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 269.165701ms ago: executing program 6 (id=1437): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYRES32=0x1, @ANYBLOB="bdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 198.246364ms ago: executing program 1 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000540)='(pu&00\t||') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x51}}, {{0x5, 0x0, 0x3}}, [], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 7 (id=1439): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): : entered promiscuous mode [ 89.524347][ T6157] team0: entered allmulticast mode [ 89.550155][ T6157] team_slave_0: entered allmulticast mode [ 89.556266][ T6157] team_slave_1: entered allmulticast mode [ 89.569546][ T6157] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 89.868901][ T6175] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 90.075709][ T6176] netlink: 'syz.3.50': attribute type 12 has an invalid length. [ 90.084963][ T6176] __nla_validate_parse: 10 callbacks suppressed [ 90.084981][ T6176] netlink: 132 bytes leftover after parsing attributes in process `syz.3.50'. [ 90.753093][ T6186] Zero length message leads to an empty skb [ 90.849081][ T6195] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.52'. [ 90.863618][ T6198] delete_channel: no stack [ 90.884302][ T6198] delete_channel: no stack [ 91.080459][ T6211] netlink: 14 bytes leftover after parsing attributes in process `syz.2.59'. [ 92.221849][ T6244] netlink: 164 bytes leftover after parsing attributes in process `syz.3.64'. [ 92.444782][ T6254] netlink: 'syz.0.68': attribute type 10 has an invalid length. [ 92.497847][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 92.575548][ T6258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 92.590212][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.606726][ T6258] openvswitch: netlink: Flow key attr not present in new flow. [ 92.657324][ T6254] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 92.740598][ T6258] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 93.128500][ T6275] netlink: 14 bytes leftover after parsing attributes in process `syz.0.73'. [ 93.292979][ T6279] netlink: 'syz.4.74': attribute type 46 has an invalid length. [ 93.318961][ T6277] netlink: 'syz.4.74': attribute type 46 has an invalid length. [ 94.432396][ T6299] pim6reg1: entered allmulticast mode [ 94.904993][ T6329] netlink: 14 bytes leftover after parsing attributes in process `syz.2.87'. [ 94.921323][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.86'. [ 98.454671][ T6381] netlink: 14 bytes leftover after parsing attributes in process `syz.3.100'. [ 99.244011][ T6397] netlink: 40 bytes leftover after parsing attributes in process `syz.0.103'. [ 99.262971][ T6393] _Z`Ԁ@S!: entered promiscuous mode [ 99.304718][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.360426][ T6400] netlink: 104 bytes leftover after parsing attributes in process `syz.3.106'. [ 99.431749][ T6401] netlink: 22 bytes leftover after parsing attributes in process `syz.3.106'. [ 99.863565][ T6397] bridge_slave_0 (unregistering): left allmulticast mode [ 99.886731][ T6425] netlink: 14 bytes leftover after parsing attributes in process `syz.3.111'. [ 99.897190][ T6397] bridge_slave_0 (unregistering): left promiscuous mode [ 99.923243][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.167960][ T6431] netlink: 948 bytes leftover after parsing attributes in process `syz.1.114'. [ 101.358115][ T6459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'. [ 101.369147][ T6459] openvswitch: netlink: Missing key (keys=40, expected=80) [ 101.378893][ T6459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 101.522246][ T6463] netlink: 'syz.4.122': attribute type 10 has an invalid length. [ 101.690718][ T6463] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 101.804320][ T6485] netlink: 14 bytes leftover after parsing attributes in process `syz.3.128'. [ 102.167518][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 107.312540][ T6534] Driver unsupported XDP return value 0 on prog (id 153) dev N/A, expect packet loss! [ 107.422960][ T6543] __nla_validate_parse: 2 callbacks suppressed [ 107.422979][ T6543] netlink: 14 bytes leftover after parsing attributes in process `syz.3.141'. [ 111.484955][ T6575] netlink: 60 bytes leftover after parsing attributes in process `syz.0.148'. [ 116.398154][ T6603] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 320 [ 117.718680][ T55] sched: DL replenish lagged too much [ 118.384840][ T6619] netlink: 'syz.1.159': attribute type 17 has an invalid length. [ 118.416823][ T6619] netlink: 160 bytes leftover after parsing attributes in process `syz.1.159'. [ 118.456812][ T6619] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 118.511043][ T6623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.158'. [ 118.575390][ T6626] sit0: entered allmulticast mode [ 118.804280][ T6619] sit0: entered promiscuous mode [ 119.321833][ T6626] netlink: 'syz.1.159': attribute type 3 has an invalid length. [ 119.341519][ T6633] netlink: 60 bytes leftover after parsing attributes in process `syz.2.162'. [ 119.417456][ T6633] unsupported nlmsg_type 40 [ 119.426924][ T6626] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.159'. [ 121.284123][ T6648] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 124.045434][ T6687] netlink: 14 bytes leftover after parsing attributes in process `syz.3.177'. [ 124.834397][ T6689] netlink: 14 bytes leftover after parsing attributes in process `syz.1.178'. [ 126.271173][ T6728] ======================================================= [ 126.271173][ T6728] WARNING: The mand mount option has been deprecated and [ 126.271173][ T6728] and is ignored by this kernel. Remove the mand [ 126.271173][ T6728] option from the mount to silence this warning. [ 126.271173][ T6728] ======================================================= [ 126.370621][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 126.482320][ T6736] netlink: 196 bytes leftover after parsing attributes in process `syz.1.189'. [ 127.727740][ T6768] netlink: 68 bytes leftover after parsing attributes in process `syz.1.197'. [ 129.409670][ T6799] netlink: 'syz.4.206': attribute type 33 has an invalid length. [ 129.478842][ T6799] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.206'. [ 129.493626][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.207'. [ 129.976636][ T6811] netlink: 260 bytes leftover after parsing attributes in process `syz.1.210'. [ 129.996125][ T6811] netlink: 260 bytes leftover after parsing attributes in process `syz.1.210'. [ 130.114063][ T6816] netlink: 'syz.4.213': attribute type 10 has an invalid length. [ 130.132865][ T6816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.213'. [ 130.155377][ T6816] dummy0: entered promiscuous mode [ 130.163800][ T6816] bridge0: port 3(dummy0) entered blocking state [ 130.176778][ T6816] bridge0: port 3(dummy0) entered disabled state [ 130.185013][ T6816] dummy0: entered allmulticast mode [ 130.212734][ T6816] bridge0: port 3(dummy0) entered blocking state [ 130.219448][ T6816] bridge0: port 3(dummy0) entered forwarding state [ 131.671565][ T6837] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 132.240670][ T6852] syz.2.223 uses obsolete (PF_INET,SOCK_PACKET) [ 132.559839][ T6865] netlink: 'syz.4.228': attribute type 9 has an invalid length. [ 132.868578][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.875417][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.609508][ T6878] netlink: 14 bytes leftover after parsing attributes in process `syz.3.233'. [ 133.817915][ T6883] netlink: 'syz.4.236': attribute type 10 has an invalid length. [ 133.862576][ T6883] bridge0: port 3(dummy0) entered disabled state [ 133.874523][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.895548][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.923714][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 133.966715][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 133.989448][ T6889] netlink: 'syz.3.237': attribute type 2 has an invalid length. [ 134.229481][ T6883] bridge0: port 3(dummy0) entered blocking state [ 134.238448][ T6883] bridge0: port 3(dummy0) entered forwarding state [ 134.250110][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.261869][ T6883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.273010][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.281531][ T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.574500][ T6883] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.562390][ T6902] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 135.676531][ T6902] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 136.967016][ T6916] sit0: left promiscuous mode [ 137.589016][ T6921] netlink: 14 bytes leftover after parsing attributes in process `syz.4.247'. [ 141.226418][ T6931] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 141.250968][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.250'. [ 141.272344][ T6931] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.249'. [ 141.287618][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.250'. [ 141.323087][ T6930] netlink: 60 bytes leftover after parsing attributes in process `syz.3.250'. [ 141.645300][ T6927] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 141.897649][ T6936] netlink: 'syz.4.251': attribute type 10 has an invalid length. [ 142.164874][ T6936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.256631][ T6936] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 146.176901][ T6970] netlink: 'syz.1.258': attribute type 39 has an invalid length. [ 146.190399][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.199195][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.207669][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.217833][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.225581][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.659167][ T6978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.260'. [ 147.664986][ T6980] netlink: 14 bytes leftover after parsing attributes in process `syz.4.261'. [ 147.941628][ T6984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.263'. [ 148.276788][ T5872] Bluetooth: hci5: command tx timeout [ 148.432937][ T6969] chnl_net:caif_netlink_parms(): no params data found [ 148.640340][ T6969] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.654716][ T6969] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.662618][ T6969] bridge_slave_0: entered allmulticast mode [ 148.687857][ T6969] bridge_slave_0: entered promiscuous mode [ 148.702356][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.710568][ T6969] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.733804][ T6969] bridge_slave_1: entered allmulticast mode [ 148.757290][ T6969] bridge_slave_1: entered promiscuous mode [ 149.173438][ T6969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.255990][ T6969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.560218][ T7034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 149.608942][ T6969] team0: Port device team_slave_0 added [ 149.646022][ T6969] team0: Port device team_slave_1 added [ 149.697076][ T7035] netlink: 104 bytes leftover after parsing attributes in process `syz.1.274'. [ 149.711556][ T7031] netlink: 830 bytes leftover after parsing attributes in process `syz.1.274'. [ 149.728055][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.277'. [ 149.743743][ T7031] bond_slave_0: entered promiscuous mode [ 149.749846][ T7031] bond_slave_1: entered promiscuous mode [ 149.852344][ T7042] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.278'. [ 149.977119][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.984091][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.083991][ T6969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.361065][ T5872] Bluetooth: hci5: command tx timeout [ 151.076312][ T6969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.092355][ T6969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.125303][ T6969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.357819][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.283'. [ 152.321683][ T6969] hsr_slave_0: entered promiscuous mode [ 152.336859][ T6969] hsr_slave_1: entered promiscuous mode [ 152.357621][ T6969] debugfs: 'hsr0' already exists in 'hsr' [ 152.400729][ T6969] Cannot create hsr debugfs directory [ 152.436630][ T5872] Bluetooth: hci5: command tx timeout [ 152.586773][ T7074] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 152.641896][ T7078] openvswitch: netlink: Key type 29 is not supported [ 152.796222][ T7083] netlink: 'syz.1.285': attribute type 23 has an invalid length. [ 153.422860][ T7088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.289'. [ 153.460865][ T7074] bond_slave_0: left promiscuous mode [ 153.493871][ T7074] bond_slave_1: left promiscuous mode [ 153.563294][ T7082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.287'. [ 154.123739][ T7082] netlink: 60 bytes leftover after parsing attributes in process `syz.3.287'. [ 154.516653][ T5872] Bluetooth: hci5: command tx timeout [ 155.191636][ T7104] delete_channel: no stack [ 155.212606][ T6969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.238486][ T6969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.261521][ T6969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.274545][ T6969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.340274][ T7115] netlink: 'syz.2.294': attribute type 21 has an invalid length. [ 155.375170][ T7120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.295'. [ 155.404208][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.295'. [ 155.682705][ T7130] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 155.775467][ T6969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.833300][ T6969] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.859055][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.866220][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.954660][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.961850][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.174564][ T6969] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.467899][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 157.064796][ T6969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.476402][ T7185] netlink: 'syz.2.313': attribute type 27 has an invalid length. [ 158.484308][ T7185] netlink: 'syz.2.313': attribute type 4 has an invalid length. [ 158.514628][ T7185] netlink: 152 bytes leftover after parsing attributes in process `syz.2.313'. [ 159.340300][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.319'. [ 159.754282][ T7215] netlink: 'syz.1.322': attribute type 1 has an invalid length. [ 160.852764][ T7229] sit0: entered allmulticast mode [ 160.891480][ T7231] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 160.913778][ T7232] sit0: entered promiscuous mode [ 161.255461][ T6969] veth0_vlan: entered promiscuous mode [ 161.289512][ T6969] veth1_vlan: entered promiscuous mode [ 161.350241][ T7242] netlink: 872 bytes leftover after parsing attributes in process `syz.3.329'. [ 161.395230][ T7242] netlink: 872 bytes leftover after parsing attributes in process `syz.3.329'. [ 161.419377][ T6969] veth0_macvtap: entered promiscuous mode [ 161.484611][ T6969] veth1_macvtap: entered promiscuous mode [ 161.568978][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.592029][ T6969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.681875][ T7255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 161.714951][ T6212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.782351][ T6212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.796072][ T6212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.833660][ T6212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.850981][ T7251] netlink: 'syz.3.334': attribute type 21 has an invalid length. [ 161.910974][ T7256] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 161.920161][ T7251] netlink: 144 bytes leftover after parsing attributes in process `syz.3.334'. [ 161.936998][ T6220] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.198559][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.223283][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.429784][ T6220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.491494][ T6220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.854808][ T7277] netlink: 'syz.2.341': attribute type 3 has an invalid length. [ 163.041525][ T7289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.207661][ T7295] netlink: 72 bytes leftover after parsing attributes in process `syz.2.344'. [ 163.292800][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 163.314503][ T7300] : port 1(vlan0) entered blocking state [ 163.352259][ T7295] netlink: 72 bytes leftover after parsing attributes in process `syz.2.344'. [ 163.368962][ T7300] : port 1(vlan0) entered disabled state [ 163.422838][ T7300] vlan0: entered allmulticast mode [ 163.447979][ T7300] veth0_vlan: entered allmulticast mode [ 163.484198][ T7300] vlan0: entered promiscuous mode [ 163.511259][ T7294] : port 1(vlan0) entered blocking state [ 163.517841][ T7294] : port 1(vlan0) entered forwarding state [ 163.547117][ T7310] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 163.601407][ T7310] netlink: 152 bytes leftover after parsing attributes in process `syz.3.349'. [ 163.633691][ T7295] netlink: 72 bytes leftover after parsing attributes in process `syz.2.344'. [ 163.702313][ T7310] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 163.824889][ T7317] netlink: 830 bytes leftover after parsing attributes in process `syz.1.350'. [ 164.025385][ T7331] netlink: 6 bytes leftover after parsing attributes in process `syz.4.354'. [ 164.084099][ T7323] netlink: 48 bytes leftover after parsing attributes in process `syz.2.352'. [ 164.665868][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'. [ 164.697708][ T7359] netlink: 96 bytes leftover after parsing attributes in process `syz.3.364'. [ 164.930286][ T7371] netlink: 'syz.5.366': attribute type 7 has an invalid length. [ 164.964860][ T7372] netlink: 'syz.5.366': attribute type 7 has an invalid length. [ 165.206167][ T7386] netlink: 'syz.5.369': attribute type 10 has an invalid length. [ 165.342873][ T7391] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.626277][ T7398] netlink: 'syz.2.372': attribute type 21 has an invalid length. [ 165.640387][ T7398] netlink: 144 bytes leftover after parsing attributes in process `syz.2.372'. [ 165.881472][ T7405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.374'. [ 166.072740][ T7418] netlink: 'syz.5.379': attribute type 9 has an invalid length. [ 166.136779][ T7416] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.375'. [ 166.273723][ T7421] netlink: 'syz.3.380': attribute type 2 has an invalid length. [ 166.424209][ T7414] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 166.746122][ T7436] netlink: 'syz.5.384': attribute type 9 has an invalid length. [ 167.349006][ T7458] netlink: 'syz.5.392': attribute type 10 has an invalid length. [ 167.379993][ T7458] : port 1(vlan0) entered disabled state [ 167.391685][ T7458] : port 1(vlan0) entered blocking state [ 167.397578][ T7458] : port 1(vlan0) entered forwarding state [ 167.436753][ T7458] team0: Device veth0_vlan failed to register rx_handler [ 167.464790][ T7458] : port 1(vlan0) entered disabled state [ 169.964133][ T7467] netlink: 'syz.4.395': attribute type 1 has an invalid length. [ 170.271206][ T7483] siw: device registration error -23 [ 170.282010][ T7485] netlink: 'syz.2.400': attribute type 9 has an invalid length. [ 170.315724][ T7483] lo: entered allmulticast mode [ 170.341901][ T7483] lo: entered promiscuous mode [ 170.348185][ T7483] lo: left allmulticast mode [ 170.477077][ T7489] netlink: 'syz.2.402': attribute type 39 has an invalid length. [ 170.904643][ T7501] __nla_validate_parse: 2 callbacks suppressed [ 170.904676][ T7501] netlink: 60 bytes leftover after parsing attributes in process `syz.2.406'. [ 170.992153][ T7503] sysfs: Unknown parameter 'subj_type' [ 171.316229][ T7515] netlink: 'syz.2.411': attribute type 9 has an invalid length. [ 171.635604][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.413'. [ 172.377497][ T7531] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.417'. [ 173.010356][ T7550] netlink: 10 bytes leftover after parsing attributes in process `syz.1.420'. [ 173.388860][ T7556] netlink: 'syz.1.424': attribute type 9 has an invalid length. [ 173.765859][ T7565] syzkaller0: entered promiscuous mode [ 173.772943][ T7565] syzkaller0: entered allmulticast mode [ 173.780647][ T7568] netlink: 14 bytes leftover after parsing attributes in process `syz.4.428'. [ 174.129657][ T7578] netlink: 'syz.2.431': attribute type 28 has an invalid length. [ 175.942919][ T7577] netlink: 'syz.4.432': attribute type 4 has an invalid length. [ 176.114427][ T7597] netlink: 20 bytes leftover after parsing attributes in process `syz.4.436'. [ 176.197802][ T7598] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.437'. [ 176.282415][ T7598] netlink: 5 bytes leftover after parsing attributes in process `syz.2.437'. [ 176.404474][ T7598] netlink: 180 bytes leftover after parsing attributes in process `syz.2.437'. [ 178.161815][ T7608] netlink: 'syz.2.438': attribute type 9 has an invalid length. [ 178.411816][ T7617] netlink: 14 bytes leftover after parsing attributes in process `syz.2.442'. [ 178.993287][ T7645] netlink: 56 bytes leftover after parsing attributes in process `syz.2.449'. [ 179.310858][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.451'. [ 179.814180][ T7665] netlink: 14 bytes leftover after parsing attributes in process `syz.4.455'. [ 179.835412][ T7663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.456'. [ 180.407136][ T7681] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 180.443537][ T30] audit: type=1107 audit(1756873435.975:2): pid=7680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' #?v&ԹI~+#{U=TsamvDP])x}C | [ 180.443537][ T30] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0 1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl [ 180.443537][ T30] cvm1kOk:tN=,R; wD_b'ɀA‰M"5qfg]<'ſU փ] c!{@6cG|rC(m T}Z{0.Cӭlt9aԘA$G+4BtU'GVj- .㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO} [ 180.443537][ T30] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR [ 180.451705][ T7681] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 181.110370][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 181.137984][ T7696] netlink: 'syz.1.464': attribute type 21 has an invalid length. [ 181.171385][ T7695] FAULT_INJECTION: forcing a failure. [ 181.171385][ T7695] name failslab, interval 1, probability 0, space 0, times 1 [ 181.215547][ T7695] CPU: 1 UID: 0 PID: 7695 Comm: syz.2.463 Not tainted syzkaller #0 PREEMPT(full) [ 181.215593][ T7695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.215623][ T7695] Call Trace: [ 181.215632][ T7695] [ 181.215641][ T7695] dump_stack_lvl+0x189/0x250 [ 181.215673][ T7695] ? __pfx____ratelimit+0x10/0x10 [ 181.215700][ T7695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.215724][ T7695] ? __pfx__printk+0x10/0x10 [ 181.215768][ T7695] ? __pfx___might_resched+0x10/0x10 [ 181.215806][ T7695] should_fail_ex+0x414/0x560 [ 181.215846][ T7695] should_failslab+0xa8/0x100 [ 181.215877][ T7695] __kmalloc_cache_noprof+0x70/0x3d0 [ 181.215901][ T7695] ? nfnetlink_rcv+0xeff/0x2520 [ 181.215938][ T7695] nfnetlink_rcv+0xeff/0x2520 [ 181.216050][ T7695] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 181.216206][ T7695] ? __netlink_deliver_tap+0x807/0x850 [ 181.216231][ T7695] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.216306][ T7695] netlink_unicast+0x82c/0x9e0 [ 181.216356][ T7695] ? __pfx_netlink_unicast+0x10/0x10 [ 181.216387][ T7695] ? netlink_sendmsg+0x642/0xb30 [ 181.216408][ T7695] ? skb_put+0x11b/0x210 [ 181.216447][ T7695] netlink_sendmsg+0x805/0xb30 [ 181.216501][ T7695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.216537][ T7695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.216568][ T7695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.216588][ T7695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.216621][ T7695] __sock_sendmsg+0x21c/0x270 [ 181.216657][ T7695] ____sys_sendmsg+0x505/0x830 [ 181.216696][ T7695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.216743][ T7695] ? import_iovec+0x74/0xa0 [ 181.216778][ T7695] ___sys_sendmsg+0x21f/0x2a0 [ 181.216807][ T7695] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.216885][ T7695] ? __fget_files+0x2a/0x420 [ 181.216946][ T7695] ? __fget_files+0x2a/0x420 [ 181.216969][ T7695] ? __fget_files+0x3a0/0x420 [ 181.217024][ T7695] __x64_sys_sendmsg+0x19b/0x260 [ 181.217053][ T7695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.217101][ T7695] ? __pfx_ksys_write+0x10/0x10 [ 181.217120][ T7695] ? rcu_is_watching+0x15/0xb0 [ 181.217155][ T7695] ? do_syscall_64+0xbe/0x3b0 [ 181.217190][ T7695] do_syscall_64+0xfa/0x3b0 [ 181.217211][ T7695] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.217234][ T7695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.217253][ T7695] ? clear_bhb_loop+0x60/0xb0 [ 181.217282][ T7695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.217299][ T7695] RIP: 0033:0x7f3f2eb8ebe9 [ 181.217324][ T7695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.217337][ T7695] RSP: 002b:00007f3f2fad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.217359][ T7695] RAX: ffffffffffffffda RBX: 00007f3f2edc5fa0 RCX: 00007f3f2eb8ebe9 [ 181.217371][ T7695] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 181.217382][ T7695] RBP: 00007f3f2fad4090 R08: 0000000000000000 R09: 0000000000000000 [ 181.217392][ T7695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.217403][ T7695] R13: 00007f3f2edc6038 R14: 00007f3f2edc5fa0 R15: 00007ffd1436af68 [ 181.217461][ T7695] [ 182.241608][ T7707] netlink: 14 bytes leftover after parsing attributes in process `syz.2.469'. [ 182.697476][ T7725] netlink: 'syz.1.473': attribute type 21 has an invalid length. [ 182.716083][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 182.726992][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 182.734686][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 182.749236][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 182.767414][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.817936][ T7714] syzkaller0: entered promiscuous mode [ 182.823438][ T7714] syzkaller0: entered allmulticast mode [ 182.925054][ T7723] netlink: 'syz.1.473': attribute type 25 has an invalid length. [ 182.937157][ T7725] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'. [ 182.956423][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 182.970293][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 182.997775][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 183.058534][ T7729] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 183.061797][ T7724] hsr0 speed is unknown, defaulting to 1000 [ 183.576571][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 183.671029][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 183.678087][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 183.711754][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 183.744000][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 183.746706][ T7740] FAULT_INJECTION: forcing a failure. [ 183.746706][ T7740] name failslab, interval 1, probability 0, space 0, times 0 [ 183.767173][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 183.802765][ T7729] hsr0 speed is unknown, defaulting to 1000 [ 183.844054][ T7740] CPU: 0 UID: 0 PID: 7740 Comm: syz.2.476 Not tainted syzkaller #0 PREEMPT(full) [ 183.844079][ T7740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.844089][ T7740] Call Trace: [ 183.844098][ T7740] [ 183.844107][ T7740] dump_stack_lvl+0x189/0x250 [ 183.844135][ T7740] ? __pfx____ratelimit+0x10/0x10 [ 183.844161][ T7740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.844185][ T7740] ? __pfx__printk+0x10/0x10 [ 183.844246][ T7740] ? __pfx___might_resched+0x10/0x10 [ 183.844283][ T7740] should_fail_ex+0x414/0x560 [ 183.844321][ T7740] should_failslab+0xa8/0x100 [ 183.844352][ T7740] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 183.844376][ T7740] ? __pfx_nf_tables_abort+0x10/0x10 [ 183.844392][ T7740] ? __alloc_skb+0x112/0x2d0 [ 183.844430][ T7740] __alloc_skb+0x112/0x2d0 [ 183.844468][ T7740] netlink_ack+0x146/0xa50 [ 183.844509][ T7740] ? __kasan_kmalloc+0x93/0xb0 [ 183.844561][ T7740] nfnetlink_rcv+0x2290/0x2520 [ 183.844676][ T7740] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 183.844832][ T7740] ? __netlink_deliver_tap+0x807/0x850 [ 183.844856][ T7740] ? netlink_deliver_tap+0x2e/0x1b0 [ 183.844941][ T7740] netlink_unicast+0x82c/0x9e0 [ 183.844990][ T7740] ? __pfx_netlink_unicast+0x10/0x10 [ 183.845022][ T7740] ? netlink_sendmsg+0x642/0xb30 [ 183.845042][ T7740] ? skb_put+0x11b/0x210 [ 183.845085][ T7740] netlink_sendmsg+0x805/0xb30 [ 183.845137][ T7740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.845173][ T7740] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.845207][ T7740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.845226][ T7740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.845255][ T7740] __sock_sendmsg+0x21c/0x270 [ 183.845290][ T7740] ____sys_sendmsg+0x505/0x830 [ 183.845328][ T7740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.845376][ T7740] ? import_iovec+0x74/0xa0 [ 183.845409][ T7740] ___sys_sendmsg+0x21f/0x2a0 [ 183.845436][ T7740] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.845513][ T7740] ? __fget_files+0x2a/0x420 [ 183.845575][ T7740] ? __fget_files+0x2a/0x420 [ 183.845597][ T7740] ? __fget_files+0x3a0/0x420 [ 183.845653][ T7740] __x64_sys_sendmsg+0x19b/0x260 [ 183.845690][ T7740] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.845738][ T7740] ? __pfx_ksys_write+0x10/0x10 [ 183.845757][ T7740] ? rcu_is_watching+0x15/0xb0 [ 183.845792][ T7740] ? do_syscall_64+0xbe/0x3b0 [ 183.845831][ T7740] do_syscall_64+0xfa/0x3b0 [ 183.845853][ T7740] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.845876][ T7740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.845894][ T7740] ? clear_bhb_loop+0x60/0xb0 [ 183.845923][ T7740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.845941][ T7740] RIP: 0033:0x7f3f2eb8ebe9 [ 183.845960][ T7740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.845973][ T7740] RSP: 002b:00007f3f2fad4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.845992][ T7740] RAX: ffffffffffffffda RBX: 00007f3f2edc5fa0 RCX: 00007f3f2eb8ebe9 [ 183.846005][ T7740] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 183.846016][ T7740] RBP: 00007f3f2fad4090 R08: 0000000000000000 R09: 0000000000000000 [ 183.846027][ T7740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.846037][ T7740] R13: 00007f3f2edc6038 R14: 00007f3f2edc5fa0 R15: 00007ffd1436af68 [ 183.846095][ T7740] [ 184.846925][ T5872] Bluetooth: hci0: command tx timeout [ 186.141903][ T7756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.151944][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.161014][ T7756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.176573][ T7756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.242645][ T7724] chnl_net:caif_netlink_parms(): no params data found [ 186.805508][ T7724] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.856976][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.864229][ T7724] bridge_slave_0: entered allmulticast mode [ 186.921479][ T7724] bridge_slave_0: entered promiscuous mode [ 186.928376][ T5872] Bluetooth: hci0: command tx timeout [ 186.955670][ T7768] pim6reg1: entered allmulticast mode [ 186.980061][ T5867] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 186.995746][ T5867] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 187.004966][ T5867] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 187.015083][ T5867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 187.023965][ T5867] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 187.092743][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.107767][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.115194][ T7724] bridge_slave_1: entered allmulticast mode [ 187.122782][ T7724] bridge_slave_1: entered promiscuous mode [ 187.135322][ T7783] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.486'. [ 187.207101][ T7777] pim6reg1: left allmulticast mode [ 187.340938][ T7724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.355451][ T7724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.454876][ T7724] team0: Port device team_slave_0 added [ 187.462513][ T7785] hsr0 speed is unknown, defaulting to 1000 [ 187.471231][ T7724] team0: Port device team_slave_1 added [ 187.549260][ T7776] syz.2.484 (7776) used greatest stack depth: 15448 bytes left [ 187.730835][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.738536][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.775606][ T7724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.792109][ T7724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.805985][ T7724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.836713][ T7724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.849052][ T7802] netlink: 48 bytes leftover after parsing attributes in process `syz.4.491'. [ 187.953953][ T6216] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.001063][ T7808] ksmbd: Unknown IPC event: 3, ignore. [ 188.063663][ T7806] netlink: 'syz.4.493': attribute type 10 has an invalid length. [ 188.072466][ T7806] netlink: 40 bytes leftover after parsing attributes in process `syz.4.493'. [ 188.173660][ T7806] ipvlan1: entered promiscuous mode [ 188.183250][ T7806] ipvlan1: entered allmulticast mode [ 188.191092][ T7806] veth0_vlan: entered allmulticast mode [ 188.221994][ T7806] bridge0: port 4(ipvlan1) entered blocking state [ 188.234557][ T7806] bridge0: port 4(ipvlan1) entered disabled state [ 188.263994][ T7806] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 188.455587][ T7814] netlink: 277 bytes leftover after parsing attributes in process `syz.1.495'. [ 188.491705][ T6216] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.571158][ T7724] hsr_slave_0: entered promiscuous mode [ 188.599739][ T7724] hsr_slave_1: entered promiscuous mode [ 188.606147][ T7724] debugfs: 'hsr0' already exists in 'hsr' [ 188.613891][ T7724] Cannot create hsr debugfs directory [ 188.717791][ T6216] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.734155][ T7820] netlink: 'syz.2.497': attribute type 21 has an invalid length. [ 188.775737][ T7820] netlink: 156 bytes leftover after parsing attributes in process `syz.2.497'. [ 188.911696][ T6216] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.930270][ T7829] ksmbd: Unknown IPC event: 3, ignore. [ 188.990436][ T7832] netlink: 'syz.2.501': attribute type 64 has an invalid length. [ 188.999411][ T5872] Bluetooth: hci0: command tx timeout [ 189.086706][ T5872] Bluetooth: hci6: command tx timeout [ 189.245104][ T7838] sit0: entered allmulticast mode [ 189.312518][ T7838] sit0: entered promiscuous mode [ 189.512364][ T7785] chnl_net:caif_netlink_parms(): no params data found [ 189.763014][ T7858] netlink: 'syz.4.509': attribute type 5 has an invalid length. [ 189.791215][ T7858] netlink: 168 bytes leftover after parsing attributes in process `syz.4.509'. [ 189.924293][ T7724] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 190.075989][ T7863] delete_channel: no stack [ 190.363233][ T7724] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 190.384229][ T6216] bridge_slave_1: left allmulticast mode [ 190.391080][ T6216] bridge_slave_1: left promiscuous mode [ 190.398529][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.425859][ T6216] bridge_slave_0: left allmulticast mode [ 190.431749][ T6216] bridge_slave_0: left promiscuous mode [ 190.440814][ T6216] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.478037][ T6216] vlan0: left allmulticast mode [ 190.482923][ T6216] veth0_vlan: left allmulticast mode [ 190.513364][ T6216] vlan0: left promiscuous mode [ 190.528907][ T6216] : port 1(vlan0) entered disabled state [ 191.023776][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.034558][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.044662][ T6216] bond0 (unregistering): Released all slaves [ 191.075716][ T7724] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 191.083288][ T5872] Bluetooth: hci0: command tx timeout [ 191.094664][ T7724] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 191.170434][ T5872] Bluetooth: hci6: command tx timeout [ 191.185351][ T7785] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.200877][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.208407][ T7785] bridge_slave_0: entered allmulticast mode [ 191.216138][ T7785] bridge_slave_0: entered promiscuous mode [ 191.280829][ T7785] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.291019][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.299692][ T7785] bridge_slave_1: entered allmulticast mode [ 191.309157][ T7785] bridge_slave_1: entered promiscuous mode [ 191.405444][ T7785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.411393][ T7901] syz.2.519: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 191.458553][ T7901] CPU: 0 UID: 0 PID: 7901 Comm: syz.2.519 Not tainted syzkaller #0 PREEMPT(full) [ 191.458592][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.458603][ T7901] Call Trace: [ 191.458610][ T7901] [ 191.458619][ T7901] dump_stack_lvl+0x189/0x250 [ 191.458649][ T7901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.458671][ T7901] ? __pfx__printk+0x10/0x10 [ 191.458709][ T7901] warn_alloc+0x214/0x310 [ 191.458736][ T7901] ? stack_depot_save_flags+0x41b/0x860 [ 191.458761][ T7901] ? __pfx_warn_alloc+0x10/0x10 [ 191.458788][ T7901] ? kasan_save_track+0x4f/0x80 [ 191.458810][ T7901] ? xskq_create+0x56/0x170 [ 191.458830][ T7901] ? xsk_init_queue+0xb0/0x110 [ 191.458847][ T7901] ? xsk_setsockopt+0x57b/0x8d0 [ 191.458865][ T7901] ? do_sock_setsockopt+0x17c/0x1b0 [ 191.458889][ T7901] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 191.458913][ T7901] ? do_syscall_64+0xfa/0x3b0 [ 191.458935][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.458962][ T7901] __vmalloc_node_range_noprof+0x125/0x12f0 [ 191.459017][ T7901] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 191.459048][ T7901] ? __kasan_kmalloc+0x93/0xb0 [ 191.459074][ T7901] vmalloc_user_noprof+0xad/0xf0 [ 191.459098][ T7901] ? xskq_create+0xbf/0x170 [ 191.459121][ T7901] xskq_create+0xbf/0x170 [ 191.459146][ T7901] xsk_init_queue+0xb0/0x110 [ 191.459171][ T7901] xsk_setsockopt+0x57b/0x8d0 [ 191.459194][ T7901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 191.459215][ T7901] ? __pfx_aa_sk_perm+0x10/0x10 [ 191.459243][ T7901] ? __fget_files+0x2a/0x420 [ 191.459265][ T7901] ? aa_sock_opt_perm+0xff/0x1b0 [ 191.459294][ T7901] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 191.459313][ T7901] ? __pfx_xsk_setsockopt+0x10/0x10 [ 191.459335][ T7901] do_sock_setsockopt+0x17c/0x1b0 [ 191.459366][ T7901] __x64_sys_setsockopt+0x13f/0x1b0 [ 191.459398][ T7901] do_syscall_64+0xfa/0x3b0 [ 191.459422][ T7901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.459439][ T7901] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.459457][ T7901] ? clear_bhb_loop+0x60/0xb0 [ 191.459478][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.459495][ T7901] RIP: 0033:0x7f3f2eb8ebe9 [ 191.459512][ T7901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.459526][ T7901] RSP: 002b:00007f3f2fad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 191.459546][ T7901] RAX: ffffffffffffffda RBX: 00007f3f2edc5fa0 RCX: 00007f3f2eb8ebe9 [ 191.459559][ T7901] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 191.459570][ T7901] RBP: 00007f3f2ec11e19 R08: 0000000000000004 R09: 0000000000000000 [ 191.459591][ T7901] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 191.459603][ T7901] R13: 00007f3f2edc6038 R14: 00007f3f2edc5fa0 R15: 00007ffd1436af68 [ 191.459634][ T7901] [ 191.459683][ T7901] Mem-Info: [ 191.824217][ T7901] active_anon:6784 inactive_anon:0 isolated_anon:0 [ 191.824217][ T7901] active_file:17193 inactive_file:39897 isolated_file:0 [ 191.824217][ T7901] unevictable:768 dirty:163 writeback:0 [ 191.824217][ T7901] slab_reclaimable:6446 slab_unreclaimable:104713 [ 191.824217][ T7901] mapped:34958 shmem:2159 pagetables:1164 [ 191.824217][ T7901] sec_pagetables:0 bounce:0 [ 191.824217][ T7901] kernel_misc_reclaimable:0 [ 191.824217][ T7901] free:1292415 free_pcp:24847 free_cma:0 [ 191.845095][ T7785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.046678][ T7901] Node 0 active_anon:33576kB inactive_anon:0kB active_file:68772kB inactive_file:159380kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:146032kB dirty:728kB writeback:0kB shmem:13276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12848kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.172482][ T7901] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 192.244797][ T7901] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 192.329146][ T7901] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 192.335117][ T7901] Node 0 DMA32 free:1270004kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37528kB inactive_anon:0kB active_file:68772kB inactive_file:157816kB unevictable:1536kB writepending:724kB present:3129332kB managed:2557488kB mlocked:0kB bounce:0kB free_pcp:67676kB local_pcp:35680kB free_cma:0kB [ 192.422408][ T7785] team0: Port device team_slave_0 added [ 192.438763][ T7901] lowmem_reserve[]: 0 0 1 1 1 [ 192.445924][ T7901] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 192.455598][ T7785] team0: Port device team_slave_1 added [ 192.495412][ T7926] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.523'. [ 192.507446][ T7901] lowmem_reserve[]: 0 0 0 0 0 [ 192.512361][ T7901] Node 1 Normal free:3888144kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18008kB local_pcp:8920kB free_cma:0kB [ 192.556638][ T7929] netlink: 80 bytes leftover after parsing attributes in process `syz.1.524'. [ 192.567481][ T7926] netlink: zone id is out of range [ 192.578642][ T7926] netlink: get zone limit has 8 unknown bytes [ 192.590349][ T7901] lowmem_reserve[]: 0 0 0 0 0 [ 192.600464][ T7901] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 192.620570][ T7901] Node 0 DMA32: 1600*4kB (UME) 1085*8kB (UME) 439*16kB (UME) 505*32kB (UME) 220*64kB (UME) 83*128kB (UM) 30*256kB (UME) 10*512kB (UME) 6*1024kB (UME) 2*2048kB (UM) 289*4096kB (M) = 1269752kB [ 192.650166][ T7901] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 192.660112][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 192.676760][ T7901] Node 1 Normal: 186*4kB (UE) 55*8kB (UME) 53*16kB (UME) 69*32kB (UME) 24*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3888144kB [ 192.707985][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.524'. [ 192.728127][ T7925] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.524'. [ 192.740055][ T7901] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.764441][ T7901] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.795783][ T7901] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 192.836004][ T7901] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 192.853046][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.865694][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.892354][ T7901] 64239 total pagecache pages [ 192.903040][ T7901] 0 pages in swap cache [ 192.907326][ T7901] Free swap = 124996kB [ 192.913905][ T7901] Total swap = 124996kB [ 192.923956][ T7901] 2097051 pages RAM [ 192.928144][ T7785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.946579][ T7901] 0 pages HighMem/MovableOnly [ 192.951272][ T7901] 425653 pages reserved [ 192.955429][ T7901] 0 pages cma reserved [ 192.968413][ T7785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.986724][ T7785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.032737][ T7785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.185140][ T6216] hsr_slave_0: left promiscuous mode [ 193.198675][ T6216] hsr_slave_1: left promiscuous mode [ 193.225922][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.237120][ T5872] Bluetooth: hci6: command tx timeout [ 193.261714][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.363889][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.389545][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.473763][ T6216] veth1_macvtap: left promiscuous mode [ 193.486854][ T6216] veth0_macvtap: left promiscuous mode [ 193.492857][ T6216] veth1_vlan: left promiscuous mode [ 194.298268][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.299884][ T6216] team0 (unregistering): Port device team_slave_1 removed [ 194.304606][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.365293][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 194.977283][ T7961] lo: left promiscuous mode [ 194.981837][ T7961] lo: entered allmulticast mode [ 195.029778][ T7963] lo: entered promiscuous mode [ 195.034585][ T7963] lo: left allmulticast mode [ 195.170339][ T7968] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.533'. [ 195.188597][ T7956] hsr0 speed is unknown, defaulting to 1000 [ 195.216860][ T7785] hsr_slave_0: entered promiscuous mode [ 195.238388][ T7785] hsr_slave_1: entered promiscuous mode [ 195.255969][ T7785] debugfs: 'hsr0' already exists in 'hsr' [ 195.274799][ T7785] Cannot create hsr debugfs directory [ 195.316567][ T5864] Bluetooth: hci6: command tx timeout [ 195.428704][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.4.534'. [ 196.367348][ T5864] Bluetooth: hci3: command 0x0406 tx timeout [ 196.373486][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 196.376487][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.380083][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 196.779034][ T7724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.830758][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.538'. [ 196.863710][ T8005] netlink: 48 bytes leftover after parsing attributes in process `syz.4.539'. [ 196.961731][ T6216] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.962227][ T8006] netlink: 'syz.4.539': attribute type 39 has an invalid length. [ 197.081895][ T7724] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.202216][ T6216] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.316486][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.323670][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.549939][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 197.730029][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.2.544'. [ 197.745304][ T6216] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.335065][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.342566][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.583198][ T6216] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.678854][ T8034] netlink: 'syz.4.546': attribute type 1 has an invalid length. [ 198.688373][ T8034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.546'. [ 198.719757][ T7785] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 198.784069][ T7785] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 198.838016][ T7785] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 198.884584][ T7724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.917957][ T7785] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 198.951115][ T8046] netlink: 'syz.4.549': attribute type 21 has an invalid length. [ 198.959799][ T8046] netlink: 'syz.4.549': attribute type 15 has an invalid length. [ 198.982090][ T8046] netlink: 156 bytes leftover after parsing attributes in process `syz.4.549'. [ 198.992372][ T8046] IPv6: NLM_F_CREATE should be specified when creating new route [ 199.006888][ T8046] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.014438][ T8046] IPv6: NLM_F_CREATE should be set when creating new route [ 199.021951][ T8046] IPv6: NLM_F_CREATE should be set when creating new route [ 199.029357][ T8046] IPv6: NLM_F_CREATE should be set when creating new route [ 199.393453][ T6216] bridge_slave_1: left allmulticast mode [ 199.447396][ T6216] bridge_slave_1: left promiscuous mode [ 199.472986][ T6216] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.748408][ T8064] netlink: 'syz.2.550': attribute type 21 has an invalid length. [ 199.787781][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 200.387822][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.400049][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.411691][ T6216] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 200.422469][ T6216] bond0 (unregistering): Released all slaves [ 200.712660][ T8090] netlink: 'syz.2.556': attribute type 2 has an invalid length. [ 200.764722][ T7724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.852741][ T8090] hsr0 speed is unknown, defaulting to 1000 [ 201.004414][ T7785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.226740][ T8108] netlink: 196 bytes leftover after parsing attributes in process `syz.4.559'. [ 201.277813][ T7785] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.574176][ T6223] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.581752][ T6223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.649190][ T6223] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.656701][ T6223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.562342][ T8136] netlink: 'syz.1.563': attribute type 9 has an invalid length. [ 202.596871][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.562'. [ 202.646980][ T6216] hsr_slave_0: left promiscuous mode [ 202.663379][ T6216] hsr_slave_1: left promiscuous mode [ 202.703335][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.713509][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.727463][ T6216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.734867][ T6216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.824848][ T6216] veth1_macvtap: left promiscuous mode [ 202.847463][ T6216] veth0_macvtap: left promiscuous mode [ 202.863785][ T6216] veth1_vlan: left promiscuous mode [ 202.877238][ T6216] veth0_vlan: left promiscuous mode [ 203.745312][ T6216] team0 (unregistering): Port device team_slave_1 removed [ 203.781395][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 204.235918][ T8132] hsr0 speed is unknown, defaulting to 1000 [ 204.337054][ T8153] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.567'. [ 204.490869][ T7724] veth0_vlan: entered promiscuous mode [ 204.683105][ T7724] veth1_vlan: entered promiscuous mode [ 204.968180][ T7724] veth0_macvtap: entered promiscuous mode [ 205.032257][ T7724] veth1_macvtap: entered promiscuous mode [ 205.220314][ T8166] option changes via remount are deprecated (pid=8163 comm=syz.4.569) [ 205.240838][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.396012][ T7724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.744158][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.779992][ T6212] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.817765][ T6212] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.987109][ T6212] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.030066][ T6212] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.460833][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.496609][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.600819][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.666496][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.045489][ T8207] netlink: 'syz.4.575': attribute type 13 has an invalid length. [ 207.089616][ T8204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.574'. [ 208.492655][ T7785] veth0_vlan: entered promiscuous mode [ 208.548135][ T7785] veth1_vlan: entered promiscuous mode [ 208.703545][ T7785] veth0_macvtap: entered promiscuous mode [ 208.765174][ T8226] netlink: 830 bytes leftover after parsing attributes in process `syz.1.577'. [ 208.984528][ T7785] veth1_macvtap: entered promiscuous mode [ 209.007569][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.577'. [ 209.056918][ T8226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.577'. [ 209.219149][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.243934][ T7785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.686774][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 209.715787][ T6220] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.764425][ T6220] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.844129][ T6220] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.893061][ T6220] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.990317][ T8262] netlink: 'syz.1.583': attribute type 12 has an invalid length. [ 212.015972][ T8262] netlink: 132 bytes leftover after parsing attributes in process `syz.1.583'. [ 212.111327][ T6212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.137818][ T6212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.216387][ T6222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.245009][ T6222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.309996][ T8278] netlink: 'syz.4.587': attribute type 21 has an invalid length. [ 212.338694][ T8278] netlink: 'syz.4.587': attribute type 15 has an invalid length. [ 212.398010][ T8278] netlink: 156 bytes leftover after parsing attributes in process `syz.4.587'. [ 212.409077][ T8278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.562420][ T8291] netlink: 14 bytes leftover after parsing attributes in process `syz.7.481'. [ 212.794998][ T8304] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.592'. [ 213.359636][ T8324] netlink: 'syz.4.596': attribute type 3 has an invalid length. [ 213.376748][ T8324] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 213.392873][ T8324] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.596'. [ 213.735053][ T8332] netlink: 'syz.4.598': attribute type 21 has an invalid length. [ 213.833351][ T8332] netlink: 132 bytes leftover after parsing attributes in process `syz.4.598'. [ 213.855917][ T8335] netlink: 60 bytes leftover after parsing attributes in process `syz.7.600'. [ 214.202086][ T8346] netlink: 14 bytes leftover after parsing attributes in process `syz.1.602'. [ 215.126867][ T8361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 215.614080][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.6.613'. [ 215.650257][ T8382] netdevsim netdevsim2 : renamed from netdevsim0 [ 215.674861][ T8388] netlink: 28 bytes leftover after parsing attributes in process `syz.6.613'. [ 216.619639][ T8441] netlink: 'syz.4.620': attribute type 6 has an invalid length. [ 216.630112][ T8441] netlink: 'syz.4.620': attribute type 5 has an invalid length. [ 217.133044][ T8461] netlink: 'syz.6.621': attribute type 4 has an invalid length. [ 217.183715][ T8461] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 217.343588][ T8478] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 218.459966][ T8505] netlink: 'syz.7.630': attribute type 9 has an invalid length. [ 219.213629][ T8523] __nla_validate_parse: 9 callbacks suppressed [ 219.213649][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.7.634'. [ 219.338970][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 219.472952][ T8526] netlink: 196 bytes leftover after parsing attributes in process `syz.6.632'. [ 219.794835][ T8525] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 219.802942][ T8525] syzkaller1: linktype set to 823 [ 219.946220][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.7.636'. [ 219.990482][ T8540] netlink: 40 bytes leftover after parsing attributes in process `syz.7.636'. [ 220.297415][ T8554] netlink: 64 bytes leftover after parsing attributes in process `syz.6.642'. [ 221.121559][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.648'. [ 221.147565][ T8582] netlink: 348 bytes leftover after parsing attributes in process `syz.6.648'. [ 221.163954][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.648'. [ 221.177571][ T8582] netlink: 348 bytes leftover after parsing attributes in process `syz.6.648'. [ 222.305806][ T8611] netlink: 'syz.1.650': attribute type 13 has an invalid length. [ 222.331217][ T8609] sit0: entered allmulticast mode [ 222.398305][ T8609] sit0: entered promiscuous mode [ 222.406510][ T8611] netlink: 'syz.1.650': attribute type 58 has an invalid length. [ 223.688467][ T8636] netlink: 'syz.4.655': attribute type 33 has an invalid length. [ 228.830816][ T8722] __nla_validate_parse: 8 callbacks suppressed [ 228.830833][ T8722] netlink: 104 bytes leftover after parsing attributes in process `syz.4.672'. [ 229.098890][ T8743] netlink: 'syz.1.674': attribute type 16 has an invalid length. [ 229.150133][ T8743] netlink: 'syz.1.674': attribute type 17 has an invalid length. [ 229.241713][ T8743] sit0: left allmulticast mode [ 229.407514][ T8743] bond_slave_0: entered promiscuous mode [ 229.413250][ T8743] bond_slave_1: entered promiscuous mode [ 229.473835][ T8743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.482103][ T8756] netlink: 'syz.7.675': attribute type 10 has an invalid length. [ 229.496072][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.547878][ T8745] netlink: 'syz.7.675': attribute type 11 has an invalid length. [ 229.570031][ T8745] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.675'. [ 229.633910][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.677'. [ 229.777541][ T8756] team0: Port device wlan1 added [ 229.939700][ T8773] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 230.213276][ T8788] netlink: 'syz.6.680': attribute type 10 has an invalid length. [ 230.794153][ T8797] netlink: 'syz.2.685': attribute type 9 has an invalid length. [ 231.020557][ T8800] netlink: 'syz.1.684': attribute type 29 has an invalid length. [ 231.046101][ T8801] netlink: 'syz.1.684': attribute type 29 has an invalid length. [ 231.501264][ T8819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.689'. [ 231.503303][ T8822] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 231.576638][ T8822] netlink: 2 bytes leftover after parsing attributes in process `syz.2.690'. [ 231.607545][ T8822] bond0: entered promiscuous mode [ 231.618284][ T8822] !: entered promiscuous mode [ 231.634062][ T8822] bond_slave_1: entered promiscuous mode [ 231.708812][ T8829] netlink: 'syz.7.691': attribute type 3 has an invalid length. [ 231.723015][ T8829] netlink: 201336 bytes leftover after parsing attributes in process `syz.7.691'. [ 232.943848][ T8860] netlink: 'syz.4.699': attribute type 10 has an invalid length. [ 233.025792][ T8863] netlink: 'syz.4.699': attribute type 11 has an invalid length. [ 233.047050][ T8863] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.699'. [ 233.683057][ T8860] team0: Port device wlan1 added [ 234.239311][ T8893] netlink: 809 bytes leftover after parsing attributes in process `syz.6.706'. [ 234.262442][ T8893] netlink: 130160 bytes leftover after parsing attributes in process `syz.6.706'. [ 234.290238][ T8898] netlink: 'syz.1.705': attribute type 3 has an invalid length. [ 234.298215][ T8898] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.705'. [ 234.930239][ T8915] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.708'. [ 235.010933][ T8923] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 235.163862][ T8924] netlink: 'syz.6.709': attribute type 2 has an invalid length. [ 235.185732][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.712'. [ 235.211476][ T8929] netlink: 356 bytes leftover after parsing attributes in process `syz.4.712'. [ 235.353403][ T8930] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.712'. [ 235.416140][ T8938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.533276][ T8981] netlink: 'syz.6.720': attribute type 9 has an invalid length. [ 238.115274][ T9001] netlink: 'syz.7.725': attribute type 2 has an invalid length. [ 238.136665][ T9001] netlink: 'syz.7.725': attribute type 1 has an invalid length. [ 238.144332][ T9001] netlink: 'syz.7.725': attribute type 2 has an invalid length. [ 238.204451][ T9001] netlink: 'syz.7.725': attribute type 2 has an invalid length. [ 238.216029][ T9001] netlink: 'syz.7.725': attribute type 2 has an invalid length. [ 238.992492][ T9035] netlink: 'syz.4.731': attribute type 9 has an invalid length. [ 239.676891][ T9045] netlink: 'syz.2.735': attribute type 17 has an invalid length. [ 239.684659][ T9045] netlink: 'syz.2.735': attribute type 16 has an invalid length. [ 239.718296][ T9045] netlink: 152 bytes leftover after parsing attributes in process `syz.2.735'. [ 239.767272][ T9052] netlink: 48 bytes leftover after parsing attributes in process `syz.4.737'. [ 240.053966][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.7.742'. [ 240.097543][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.7.742'. [ 240.109981][ T9065] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 240.161070][ T9066] pimreg: tun_chr_ioctl cmd 1074025677 [ 240.176071][ T9066] pimreg: linktype set to 778 [ 240.184968][ T9069] hsr0 speed is unknown, defaulting to 1000 [ 240.200009][ T9066] netlink: 260 bytes leftover after parsing attributes in process `syz.4.741'. [ 240.225232][ T9066] netlink: 'syz.4.741': attribute type 1 has an invalid length. [ 242.557021][ T5866] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 243.254211][ T9152] netlink: 132 bytes leftover after parsing attributes in process `syz.7.761'. [ 244.388160][ T9171] hsr0 speed is unknown, defaulting to 1000 [ 244.453041][ T9184] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.767'. [ 244.487266][ T9187] netlink: 68 bytes leftover after parsing attributes in process `syz.6.764'. [ 246.434013][ T9231] netlink: 'syz.7.775': attribute type 3 has an invalid length. [ 246.811216][ T9251] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 246.827782][ T9251] syzkaller1: linktype set to 780 [ 247.529850][ T9256] netlink: 'syz.7.783': attribute type 10 has an invalid length. [ 247.596895][ T9260] netlink: 'syz.1.785': attribute type 12 has an invalid length. [ 247.623525][ T9261] netlink: 'syz.2.784': attribute type 4 has an invalid length. [ 247.657527][ T9260] netlink: 120 bytes leftover after parsing attributes in process `syz.1.785'. [ 247.807079][ T9265] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.786'. [ 247.821058][ T9265] netlink: 1053 bytes leftover after parsing attributes in process `syz.6.786'. [ 247.886124][ T9270] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.787'. [ 248.221038][ T9265] hsr0 speed is unknown, defaulting to 1000 [ 248.248649][ T9279] netlink: 'syz.7.789': attribute type 10 has an invalid length. [ 248.292869][ T9279] batman_adv: batadv0: Adding interface: netdevsim0 [ 248.322369][ T9279] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.353293][ T9279] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 248.614492][ T9291] netlink: 'syz.2.794': attribute type 10 has an invalid length. [ 248.625613][ T9293] netlink: 14 bytes leftover after parsing attributes in process `syz.7.793'. [ 248.671648][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.794'. [ 248.701700][ T9291] batman_adv: batadv0: Adding interface: vlan1 [ 248.710862][ T9291] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.762681][ T9291] batman_adv: batadv0: Interface activated: vlan1 [ 250.175173][ T9321] netlink: 60 bytes leftover after parsing attributes in process `syz.4.800'. [ 250.225545][ T9324] netlink: 10 bytes leftover after parsing attributes in process `syz.4.800'. [ 250.380909][ T9321] caif0: entered promiscuous mode [ 250.400131][ T9321] caif0: entered allmulticast mode [ 250.423383][ T9331] netlink: 60 bytes leftover after parsing attributes in process `syz.4.800'. [ 250.499758][ T9324] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.800'. [ 250.862582][ T9323] hsr0 speed is unknown, defaulting to 1000 [ 252.182691][ T9370] netlink: 'syz.6.810': attribute type 10 has an invalid length. [ 252.294142][ T9370] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.318991][ T9370] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.782713][ T9370] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.793583][ T9370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.806733][ T9370] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.815392][ T9370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.937929][ T9370] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 253.864363][ T9406] __nla_validate_parse: 4 callbacks suppressed [ 253.864380][ T9406] netlink: 140 bytes leftover after parsing attributes in process `syz.1.818'. [ 253.975567][ T9414] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 254.029856][ T9404] netlink: 'syz.2.816': attribute type 1 has an invalid length. [ 254.039953][ T9414] netlink: 'syz.2.816': attribute type 4 has an invalid length. [ 254.039974][ T9414] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.816'. [ 254.061109][ T9416] netlink: 76 bytes leftover after parsing attributes in process `syz.6.819'. [ 254.076585][ T9404] netlink: 'syz.2.816': attribute type 4 has an invalid length. [ 254.084252][ T9404] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.816'. [ 254.102747][ T9404] netlink: 56 bytes leftover after parsing attributes in process `syz.2.816'. [ 254.605719][ T9425] netlink: 'syz.6.822': attribute type 10 has an invalid length. [ 254.773460][ T9425] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 255.747078][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.753689][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.051710][ T9472] netlink: 56 bytes leftover after parsing attributes in process `syz.4.832'. [ 256.064591][ T9473] netlink: 56 bytes leftover after parsing attributes in process `syz.4.832'. [ 256.101592][ T9472] netlink: 'syz.4.832': attribute type 10 has an invalid length. [ 256.350277][ T9472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.427402][ T9472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.462261][ T9472] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 257.285073][ T9509] netlink: 'syz.2.841': attribute type 10 has an invalid length. [ 257.321748][ T9509] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.841'. [ 257.419157][ T9509] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.841'. [ 259.115701][ T9554] sit0: entered allmulticast mode [ 260.470950][ T9599] netlink: 'syz.2.857': attribute type 9 has an invalid length. [ 261.091541][ T30] audit: type=1107 audit(1756873516.625:3): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 261.360139][ T9628] netlink: 'syz.1.865': attribute type 9 has an invalid length. [ 261.700084][ T9629] netlink: 'syz.2.864': attribute type 10 has an invalid length. [ 261.954148][ T9639] netlink: 'syz.4.866': attribute type 9 has an invalid length. [ 262.740642][ T9647] netlink: 'syz.2.869': attribute type 10 has an invalid length. [ 262.871648][ T9652] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.869'. [ 262.890594][ T9658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.871'. [ 263.503593][ T9647] team_slave_0: left promiscuous mode [ 263.557127][ T9647] team_slave_0: left allmulticast mode [ 263.610962][ T9647] team0 (unregistering): Port device team_slave_0 removed [ 263.649839][ T9647] team_slave_1: left promiscuous mode [ 263.663764][ T9647] team_slave_1: left allmulticast mode [ 263.692950][ T9647] team0 (unregistering): Port device team_slave_1 removed [ 263.899228][ T9686] netlink: 164 bytes leftover after parsing attributes in process `syz.2.879'. [ 264.125172][ T9699] netlink: 'syz.2.882': attribute type 9 has an invalid length. [ 264.867311][ T9705] netlink: 100 bytes leftover after parsing attributes in process `syz.2.883'. [ 265.060084][ T9718] netlink: 14 bytes leftover after parsing attributes in process `syz.7.884'. [ 265.694225][ T9757] netlink: 'syz.7.893': attribute type 9 has an invalid length. [ 265.695488][ T9759] netlink: 'syz.2.894': attribute type 30 has an invalid length. [ 266.991744][ T9786] netlink: 14 bytes leftover after parsing attributes in process `syz.7.900'. [ 267.084991][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.902'. [ 267.828277][ T9817] netlink: 'syz.7.907': attribute type 9 has an invalid length. [ 267.899304][ T9818] netlink: 'syz.6.905': attribute type 39 has an invalid length. [ 267.914275][ T9820] netlink: 68 bytes leftover after parsing attributes in process `syz.4.908'. [ 268.288486][ T9823] netlink: 14 bytes leftover after parsing attributes in process `syz.2.909'. [ 268.531084][ T9829] netlink: 'syz.2.909': attribute type 3 has an invalid length. [ 268.539518][ T9829] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.909'. [ 268.655280][ T9840] netlink: 'syz.4.913': attribute type 1 has an invalid length. [ 268.808828][ T9845] netlink: 164 bytes leftover after parsing attributes in process `syz.6.914'. [ 268.851326][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.915'. [ 268.860789][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.915'. [ 268.895975][ T9848] netlink: 2 bytes leftover after parsing attributes in process `syz.4.915'. [ 268.955319][ T9856] netlink: 56 bytes leftover after parsing attributes in process `syz.1.916'. [ 269.040498][ T9865] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 269.054751][ T9864] netlink: 14 bytes leftover after parsing attributes in process `syz.2.917'. [ 269.134708][ T9868] netlink: 60 bytes leftover after parsing attributes in process `syz.1.920'. [ 269.178292][ T9868] netlink: 'syz.1.920': attribute type 11 has an invalid length. [ 270.573311][ T9897] netlink: 'syz.2.924': attribute type 9 has an invalid length. [ 270.792903][ T9910] netlink: 'syz.1.928': attribute type 7 has an invalid length. [ 270.821903][ T9910] netlink: 'syz.1.928': attribute type 8 has an invalid length. [ 271.032288][ T9915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.297922][ T9929] netlink: 'syz.2.932': attribute type 10 has an invalid length. [ 271.329951][ T9929] batman_adv: batadv0: Interface deactivated: vlan1 [ 271.637067][ T9929] batman_adv: batadv0: Removing interface: vlan1 [ 273.250446][T10007] validate_nla: 1 callbacks suppressed [ 273.250468][T10007] netlink: 'syz.4.949': attribute type 3 has an invalid length. [ 273.290989][T10007] __nla_validate_parse: 10 callbacks suppressed [ 273.291015][T10007] netlink: 81 bytes leftover after parsing attributes in process `syz.4.949'. [ 273.520970][T10007] netlink: 14 bytes leftover after parsing attributes in process `syz.4.949'. [ 273.557931][T10007] hsr_slave_0: left promiscuous mode [ 273.631566][T10007] hsr_slave_1: left promiscuous mode [ 273.902584][T10038] netlink: 'syz.7.955': attribute type 9 has an invalid length. [ 273.953745][T10040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.952'. [ 274.225749][T10049] netlink: 14 bytes leftover after parsing attributes in process `syz.1.958'. [ 274.841862][T10082] FAULT_INJECTION: forcing a failure. [ 274.841862][T10082] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 274.883418][T10082] CPU: 0 UID: 0 PID: 10082 Comm: syz.4.968 Not tainted syzkaller #0 PREEMPT(full) [ 274.883444][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.883465][T10082] Call Trace: [ 274.883472][T10082] [ 274.883481][T10082] dump_stack_lvl+0x189/0x250 [ 274.883508][T10082] ? __pfx____ratelimit+0x10/0x10 [ 274.883531][T10082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.883553][T10082] ? __pfx__printk+0x10/0x10 [ 274.883577][T10082] ? __might_fault+0xb0/0x130 [ 274.883605][T10082] ? __might_fault+0xb0/0x130 [ 274.883643][T10082] should_fail_ex+0x414/0x560 [ 274.883673][T10082] _copy_from_iter+0x1db/0x16f0 [ 274.883697][T10082] ? rcu_is_watching+0x15/0xb0 [ 274.883717][T10082] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 274.883743][T10082] ? __pfx__copy_from_iter+0x10/0x10 [ 274.883764][T10082] ? __build_skb_around+0x257/0x3e0 [ 274.883793][T10082] ? netlink_sendmsg+0x642/0xb30 [ 274.883815][T10082] ? skb_put+0x11b/0x210 [ 274.883844][T10082] netlink_sendmsg+0x6b2/0xb30 [ 274.883880][T10082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.883908][T10082] ? aa_sock_msg_perm+0xf1/0x1d0 [ 274.883935][T10082] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 274.883954][T10082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.883978][T10082] __sock_sendmsg+0x21c/0x270 [ 274.884002][T10082] ____sys_sendmsg+0x505/0x830 [ 274.884026][T10082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.884055][T10082] ? import_iovec+0x74/0xa0 [ 274.884077][T10082] ___sys_sendmsg+0x21f/0x2a0 [ 274.884098][T10082] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.884144][T10082] ? __fget_files+0x2a/0x420 [ 274.884184][T10082] ? __fget_files+0x2a/0x420 [ 274.884206][T10082] ? __fget_files+0x3a0/0x420 [ 274.884244][T10082] __x64_sys_sendmsg+0x19b/0x260 [ 274.884267][T10082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 274.884297][T10082] ? __pfx_ksys_write+0x10/0x10 [ 274.884315][T10082] ? rcu_is_watching+0x15/0xb0 [ 274.884340][T10082] ? do_syscall_64+0xbe/0x3b0 [ 274.884366][T10082] do_syscall_64+0xfa/0x3b0 [ 274.884386][T10082] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.884407][T10082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.884425][T10082] ? clear_bhb_loop+0x60/0xb0 [ 274.884446][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.884464][T10082] RIP: 0033:0x7fa4c0d8ebe9 [ 274.884482][T10082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.884495][T10082] RSP: 002b:00007fa4c1c90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.884515][T10082] RAX: ffffffffffffffda RBX: 00007fa4c0fc5fa0 RCX: 00007fa4c0d8ebe9 [ 274.884528][T10082] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000004 [ 274.884539][T10082] RBP: 00007fa4c1c90090 R08: 0000000000000000 R09: 0000000000000000 [ 274.884552][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.884563][T10082] R13: 00007fa4c0fc6038 R14: 00007fa4c0fc5fa0 R15: 00007fff65b149a8 [ 274.884597][T10082] [ 275.377862][T10095] netlink: 'syz.7.970': attribute type 9 has an invalid length. [ 275.546013][T10101] netlink: 'syz.4.971': attribute type 27 has an invalid length. [ 275.566147][T10101] netlink: 'syz.4.971': attribute type 4 has an invalid length. [ 275.612341][T10101] netlink: 152 bytes leftover after parsing attributes in process `syz.4.971'. [ 275.623719][T10103] netlink: 14 bytes leftover after parsing attributes in process `syz.7.972'. [ 275.685057][T10105] netlink: 196 bytes leftover after parsing attributes in process `syz.1.973'. [ 275.778005][T10107] netlink: 'syz.4.971': attribute type 10 has an invalid length. [ 275.802000][T10107] netlink: 60919 bytes leftover after parsing attributes in process `syz.4.971'. [ 276.286173][T10145] FAULT_INJECTION: forcing a failure. [ 276.286173][T10145] name failslab, interval 1, probability 0, space 0, times 0 [ 276.302099][T10146] netlink: 'syz.1.980': attribute type 12 has an invalid length. [ 276.315719][T10145] CPU: 1 UID: 0 PID: 10145 Comm: syz.6.981 Not tainted syzkaller #0 PREEMPT(full) [ 276.315743][T10145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.315752][T10145] Call Trace: [ 276.315768][T10145] [ 276.315775][T10145] dump_stack_lvl+0x189/0x250 [ 276.315799][T10145] ? __pfx____ratelimit+0x10/0x10 [ 276.315821][T10145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.315841][T10145] ? __pfx__printk+0x10/0x10 [ 276.315865][T10145] ? __lock_acquire+0xab9/0xd20 [ 276.315897][T10145] should_fail_ex+0x414/0x560 [ 276.315925][T10145] should_failslab+0xa8/0x100 [ 276.315949][T10145] kmem_cache_alloc_noprof+0x73/0x3c0 [ 276.315970][T10145] ? skb_clone+0x212/0x3a0 [ 276.315992][T10145] skb_clone+0x212/0x3a0 [ 276.316014][T10145] __netlink_deliver_tap+0x404/0x850 [ 276.316050][T10145] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.316073][T10145] netlink_deliver_tap+0x19c/0x1b0 [ 276.316095][T10145] netlink_unicast+0x7fa/0x9e0 [ 276.316125][T10145] ? __pfx_netlink_unicast+0x10/0x10 [ 276.316148][T10145] ? netlink_sendmsg+0x642/0xb30 [ 276.316167][T10145] ? skb_put+0x11b/0x210 [ 276.316194][T10145] netlink_sendmsg+0x805/0xb30 [ 276.316226][T10145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.316253][T10145] ? aa_sock_msg_perm+0xf1/0x1d0 [ 276.316279][T10145] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 276.316296][T10145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.316319][T10145] __sock_sendmsg+0x21c/0x270 [ 276.316343][T10145] ____sys_sendmsg+0x505/0x830 [ 276.316363][T10145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.316393][T10145] ? import_iovec+0x74/0xa0 [ 276.316413][T10145] ___sys_sendmsg+0x21f/0x2a0 [ 276.316431][T10145] ? __pfx____sys_sendmsg+0x10/0x10 [ 276.316480][T10145] ? __fget_files+0x2a/0x420 [ 276.316503][T10145] ? __fget_files+0x3a0/0x420 [ 276.316536][T10145] __x64_sys_sendmsg+0x19b/0x260 [ 276.316554][T10145] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 276.316580][T10145] ? __pfx_ksys_write+0x10/0x10 [ 276.316597][T10145] ? rcu_is_watching+0x15/0xb0 [ 276.316617][T10145] ? do_syscall_64+0xbe/0x3b0 [ 276.316643][T10145] do_syscall_64+0xfa/0x3b0 [ 276.316662][T10145] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.316682][T10145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.316697][T10145] ? clear_bhb_loop+0x60/0xb0 [ 276.316717][T10145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.316733][T10145] RIP: 0033:0x7f99aa98ebe9 [ 276.316749][T10145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.316773][T10145] RSP: 002b:00007f99ab745038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.316790][T10145] RAX: ffffffffffffffda RBX: 00007f99aabc5fa0 RCX: 00007f99aa98ebe9 [ 276.316802][T10145] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000004 [ 276.316811][T10145] RBP: 00007f99ab745090 R08: 0000000000000000 R09: 0000000000000000 [ 276.316822][T10145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.316832][T10145] R13: 00007f99aabc6038 R14: 00007f99aabc5fa0 R15: 00007fffa3afe038 [ 276.316859][T10145] [ 276.318032][T10146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.980'. [ 276.608836][T10168] netlink: 'syz.4.986': attribute type 29 has an invalid length. [ 276.637721][T10164] netlink: 'syz.6.984': attribute type 27 has an invalid length. [ 276.668407][T10164] netlink: 2418 bytes leftover after parsing attributes in process `syz.6.984'. [ 276.704354][T10168] netlink: 'syz.4.986': attribute type 3 has an invalid length. [ 277.206840][T10175] syzkaller0: entered promiscuous mode [ 277.226945][T10175] syzkaller0: entered allmulticast mode [ 278.834882][T10191] __nla_validate_parse: 2 callbacks suppressed [ 278.834904][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.991'. [ 278.864329][T10194] netlink: 132 bytes leftover after parsing attributes in process `syz.7.993'. [ 278.877017][T10191] netlink: 'syz.1.991': attribute type 2 has an invalid length. [ 278.893031][T10191] netlink: 'syz.1.991': attribute type 2 has an invalid length. [ 278.966784][T10191] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 278.993445][T10191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.991'. [ 279.642452][T10206] netlink: 'syz.7.997': attribute type 11 has an invalid length. [ 279.675991][T10206] netlink: 'syz.7.997': attribute type 11 has an invalid length. [ 279.691034][T10206] netlink: 'syz.7.997': attribute type 7 has an invalid length. [ 280.061272][T10217] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1001'. [ 280.307582][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1000'. [ 280.387292][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1000'. [ 280.482800][T10232] netlink: 'syz.7.1005': attribute type 6 has an invalid length. [ 280.506727][T10232] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1005'. [ 280.517220][T10219] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1000'. [ 280.627064][T10219] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1000'. [ 280.915021][T10247] netlink: 'syz.6.1010': attribute type 1 has an invalid length. [ 280.917122][ T30] audit: type=1107 audit(1756873536.445:4): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' #?v&ԹI~+#{U=TsamvDP])x}C | [ 280.917122][ T30] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0 1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl [ 280.917122][ T30] cvm1kOk:tN=,R; wD_b'ɀA‰M"5qfg]<'ſU փ] c!{@6cG|rC(m T}Z{0.Cӭlt9aԘA$G+4BtU'GVj- .㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO} [ 280.917122][ T30] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR [ 281.099189][T10254] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1011'. [ 281.223253][T10256] FAULT_INJECTION: forcing a failure. [ 281.223253][T10256] name failslab, interval 1, probability 0, space 0, times 0 [ 281.250338][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.1.1013 Not tainted syzkaller #0 PREEMPT(full) [ 281.250362][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.250372][T10256] Call Trace: [ 281.250379][T10256] [ 281.250387][T10256] dump_stack_lvl+0x189/0x250 [ 281.250412][T10256] ? __pfx____ratelimit+0x10/0x10 [ 281.250436][T10256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.250456][T10256] ? __pfx__printk+0x10/0x10 [ 281.250487][T10256] ? __pfx___might_resched+0x10/0x10 [ 281.250514][T10256] should_fail_ex+0x414/0x560 [ 281.250544][T10256] should_failslab+0xa8/0x100 [ 281.250570][T10256] __kmalloc_cache_noprof+0x70/0x3d0 [ 281.250592][T10256] ? netlink_policy_dump_add_policy+0xc5/0x510 [ 281.250621][T10256] netlink_policy_dump_add_policy+0xc5/0x510 [ 281.250652][T10256] ctrl_dumppolicy_start+0x674/0x9f0 [ 281.250680][T10256] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 281.250720][T10256] ? __pfx_l2tp_nl_cmd_tunnel_get+0x10/0x10 [ 281.250748][T10256] ? __pfx_l2tp_nl_cmd_tunnel_dump+0x10/0x10 [ 281.250768][T10256] ? __kasan_kmalloc+0x93/0xb0 [ 281.250803][T10256] genl_start+0x4c0/0x6c0 [ 281.250832][T10256] __netlink_dump_start+0x466/0x7e0 [ 281.250867][T10256] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 281.250892][T10256] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 281.250909][T10256] ? genl_get_cmd+0x496/0x910 [ 281.250935][T10256] ? __pfx_genl_start+0x10/0x10 [ 281.250950][T10256] ? __pfx_genl_dumpit+0x10/0x10 [ 281.250966][T10256] ? __pfx_genl_done+0x10/0x10 [ 281.251010][T10256] genl_rcv_msg+0x5da/0x790 [ 281.251039][T10256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.251056][T10256] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 281.251072][T10256] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 281.251087][T10256] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 281.251107][T10256] ? __asan_memcpy+0x40/0x70 [ 281.251126][T10256] ? __pfx_ref_tracker_free+0x10/0x10 [ 281.251159][T10256] netlink_rcv_skb+0x208/0x470 [ 281.251179][T10256] ? __lock_acquire+0xab9/0xd20 [ 281.251204][T10256] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.251225][T10256] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.251277][T10256] ? down_read+0x1ad/0x2e0 [ 281.251305][T10256] genl_rcv+0x28/0x40 [ 281.251322][T10256] netlink_unicast+0x82c/0x9e0 [ 281.251357][T10256] ? __pfx_netlink_unicast+0x10/0x10 [ 281.251382][T10256] ? netlink_sendmsg+0x642/0xb30 [ 281.251402][T10256] ? skb_put+0x11b/0x210 [ 281.251433][T10256] netlink_sendmsg+0x805/0xb30 [ 281.251470][T10256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.251498][T10256] ? aa_sock_msg_perm+0xf1/0x1d0 [ 281.251526][T10256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.251544][T10256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.251569][T10256] __sock_sendmsg+0x21c/0x270 [ 281.251595][T10256] ____sys_sendmsg+0x505/0x830 [ 281.251622][T10256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.251654][T10256] ? import_iovec+0x74/0xa0 [ 281.251680][T10256] ___sys_sendmsg+0x21f/0x2a0 [ 281.251702][T10256] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.251748][T10256] ? __fget_files+0x2a/0x420 [ 281.251790][T10256] ? __fget_files+0x2a/0x420 [ 281.251811][T10256] ? __fget_files+0x3a0/0x420 [ 281.251850][T10256] __x64_sys_sendmsg+0x19b/0x260 [ 281.251866][T10256] ? perf_trace_run_bpf_submit+0x100/0x170 [ 281.251888][T10256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.251920][T10256] ? __pfx_ksys_write+0x10/0x10 [ 281.251939][T10256] ? rcu_is_watching+0x15/0xb0 [ 281.251965][T10256] ? do_syscall_64+0xbe/0x3b0 [ 281.252001][T10256] do_syscall_64+0xfa/0x3b0 [ 281.252022][T10256] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.252044][T10256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.252061][T10256] ? clear_bhb_loop+0x60/0xb0 [ 281.252084][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.252101][T10256] RIP: 0033:0x7f33f838ebe9 [ 281.252118][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.252132][T10256] RSP: 002b:00007f33f9282038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.252151][T10256] RAX: ffffffffffffffda RBX: 00007f33f85c5fa0 RCX: 00007f33f838ebe9 [ 281.252165][T10256] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000004 [ 281.252176][T10256] RBP: 00007f33f9282090 R08: 0000000000000000 R09: 0000000000000000 [ 281.252188][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.252199][T10256] R13: 00007f33f85c6038 R14: 00007f33f85c5fa0 R15: 00007ffcd05f7fb8 [ 281.252235][T10256] [ 283.191406][T10307] netlink: 'syz.4.1027': attribute type 3 has an invalid length. [ 283.289582][T10313] FAULT_INJECTION: forcing a failure. [ 283.289582][T10313] name failslab, interval 1, probability 0, space 0, times 0 [ 283.396812][T10313] CPU: 1 UID: 0 PID: 10313 Comm: syz.1.1029 Not tainted syzkaller #0 PREEMPT(full) [ 283.396846][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.396856][T10313] Call Trace: [ 283.396863][T10313] [ 283.396871][T10313] dump_stack_lvl+0x189/0x250 [ 283.396898][T10313] ? __pfx____ratelimit+0x10/0x10 [ 283.396921][T10313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.396941][T10313] ? __pfx__printk+0x10/0x10 [ 283.396971][T10313] ? __pfx___might_resched+0x10/0x10 [ 283.396993][T10313] should_fail_ex+0x414/0x560 [ 283.397021][T10313] should_failslab+0xa8/0x100 [ 283.397048][T10313] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 283.397071][T10313] ? __alloc_skb+0x112/0x2d0 [ 283.397100][T10313] __alloc_skb+0x112/0x2d0 [ 283.397128][T10313] netlink_dump+0x1b7/0xe90 [ 283.397155][T10313] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 283.397186][T10313] ? __pfx_netlink_dump+0x10/0x10 [ 283.397209][T10313] ? __pfx_l2tp_nl_cmd_tunnel_dump+0x10/0x10 [ 283.397258][T10313] ? genl_start+0x581/0x6c0 [ 283.397285][T10313] __netlink_dump_start+0x5cb/0x7e0 [ 283.397317][T10313] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 283.397341][T10313] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 283.397359][T10313] ? genl_get_cmd+0x496/0x910 [ 283.397384][T10313] ? __pfx_genl_start+0x10/0x10 [ 283.397399][T10313] ? __pfx_genl_dumpit+0x10/0x10 [ 283.397415][T10313] ? __pfx_genl_done+0x10/0x10 [ 283.397449][T10313] genl_rcv_msg+0x5da/0x790 [ 283.397475][T10313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.397491][T10313] ? __pfx_ctrl_dumppolicy_start+0x10/0x10 [ 283.397508][T10313] ? __pfx_ctrl_dumppolicy+0x10/0x10 [ 283.397524][T10313] ? __pfx_ctrl_dumppolicy_done+0x10/0x10 [ 283.397543][T10313] ? __asan_memcpy+0x40/0x70 [ 283.397562][T10313] ? __pfx_ref_tracker_free+0x10/0x10 [ 283.397593][T10313] netlink_rcv_skb+0x208/0x470 [ 283.397614][T10313] ? __lock_acquire+0xab9/0xd20 [ 283.397643][T10313] ? __pfx_genl_rcv_msg+0x10/0x10 [ 283.397664][T10313] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 283.397708][T10313] ? down_read+0x1ad/0x2e0 [ 283.397735][T10313] genl_rcv+0x28/0x40 [ 283.397751][T10313] netlink_unicast+0x82c/0x9e0 [ 283.397786][T10313] ? __pfx_netlink_unicast+0x10/0x10 [ 283.397810][T10313] ? netlink_sendmsg+0x642/0xb30 [ 283.397839][T10313] ? skb_put+0x11b/0x210 [ 283.397868][T10313] netlink_sendmsg+0x805/0xb30 [ 283.397902][T10313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.397928][T10313] ? aa_sock_msg_perm+0xf1/0x1d0 [ 283.397956][T10313] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 283.397975][T10313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 283.397999][T10313] __sock_sendmsg+0x21c/0x270 [ 283.398024][T10313] ____sys_sendmsg+0x505/0x830 [ 283.398049][T10313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 283.398077][T10313] ? import_iovec+0x74/0xa0 [ 283.398100][T10313] ___sys_sendmsg+0x21f/0x2a0 [ 283.398121][T10313] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.398179][T10313] ? __fget_files+0x2a/0x420 [ 283.398203][T10313] ? __fget_files+0x3a0/0x420 [ 283.398238][T10313] __x64_sys_sendmsg+0x19b/0x260 [ 283.398259][T10313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 283.398291][T10313] ? rcu_is_watching+0x15/0xb0 [ 283.398310][T10313] ? trace_sys_enter+0x25/0x100 [ 283.398340][T10313] do_syscall_64+0xfa/0x3b0 [ 283.398361][T10313] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.398382][T10313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.398399][T10313] ? clear_bhb_loop+0x60/0xb0 [ 283.398421][T10313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.398437][T10313] RIP: 0033:0x7f33f838ebe9 [ 283.398454][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.398468][T10313] RSP: 002b:00007f33f9282038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.398488][T10313] RAX: ffffffffffffffda RBX: 00007f33f85c5fa0 RCX: 00007f33f838ebe9 [ 283.398501][T10313] RDX: 0000000000000000 RSI: 00002000000029c0 RDI: 0000000000000004 [ 283.398512][T10313] RBP: 00007f33f9282090 R08: 0000000000000000 R09: 0000000000000000 [ 283.398523][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.398534][T10313] R13: 00007f33f85c6038 R14: 00007f33f85c5fa0 R15: 00007ffcd05f7fb8 [ 283.398565][T10313] [ 284.304998][T10330] __nla_validate_parse: 9 callbacks suppressed [ 284.305041][T10330] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1034'. [ 284.394659][T10323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1031'. [ 284.480891][T10334] netlink: 'syz.6.1036': attribute type 2 has an invalid length. [ 284.494855][T10334] netlink: 'syz.6.1036': attribute type 8 has an invalid length. [ 284.510335][T10334] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1036'. [ 284.537560][T10336] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1036'. [ 284.945166][T10342] netlink: del zone limit has 4 unknown bytes [ 284.970257][T10342] netlink: 'syz.6.1038': attribute type 2 has an invalid length. [ 285.013629][T10346] openvswitch: netlink: Missing key (keys=2000040, expected=2000) [ 285.245483][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1044'. [ 285.298562][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1044'. [ 285.415391][T10356] netlink: 'syz.6.1044': attribute type 21 has an invalid length. [ 285.455312][T10356] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1044'. [ 285.460344][T10358] netlink: 'syz.1.1045': attribute type 4 has an invalid length. [ 285.475132][T10358] netlink: 14345 bytes leftover after parsing attributes in process `syz.1.1045'. [ 285.825100][T10374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 285.948654][T10386] netlink: 'syz.4.1053': attribute type 9 has an invalid length. [ 286.052846][T10384] netlink: 'syz.7.1052': attribute type 1 has an invalid length. [ 286.331836][T10401] netlink: 'syz.1.1056': attribute type 39 has an invalid length. [ 287.050786][T10414] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1062'. [ 287.332750][T10425] netlink: 'syz.4.1065': attribute type 9 has an invalid length. [ 287.395756][T10426] netlink: 'syz.1.1064': attribute type 10 has an invalid length. [ 287.491534][T10426] batadv_slave_0: entered promiscuous mode [ 287.499274][T10426] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 287.980296][T10448] batadv0: entered promiscuous mode [ 287.993062][T10448] batadv0: entered allmulticast mode [ 288.034267][T10448] bridge0: port 3(batadv0) entered blocking state [ 288.194209][T10448] bridge0: port 3(batadv0) entered disabled state [ 288.643056][T10441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.711271][ T8435] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 288.720952][ T8435] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 288.853076][T10448] bridge0: port 3(batadv0) entered blocking state [ 288.860183][T10448] bridge0: port 3(batadv0) entered forwarding state [ 289.512727][T10465] __nla_validate_parse: 4 callbacks suppressed [ 289.512768][T10465] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1077'. [ 289.606275][T10468] validate_nla: 3 callbacks suppressed [ 289.606294][T10468] netlink: 'syz.7.1079': attribute type 9 has an invalid length. [ 290.262759][T10495] netlink: 'syz.6.1089': attribute type 1 has an invalid length. [ 290.406124][T10498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 290.872745][T10510] netlink: 'syz.7.1094': attribute type 9 has an invalid length. [ 290.940820][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1092'. [ 291.033370][T10514] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1095'. [ 291.052517][T10513] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1095'. [ 291.625306][T10532] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1099'. [ 291.948105][T10542] netlink: 'syz.6.1101': attribute type 10 has an invalid length. [ 291.969970][T10542] team0: Device ipvlan1 failed to register rx_handler [ 292.765653][T10565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.844066][T10565] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1108'. [ 293.393318][T10578] netlink: 'syz.4.1111': attribute type 4 has an invalid length. [ 293.406480][T10578] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1111'. [ 293.965177][T10592] netlink: 352 bytes leftover after parsing attributes in process `syz.6.1116'. [ 294.129224][T10597] netlink: 'syz.6.1118': attribute type 2 has an invalid length. [ 294.184765][T10599] netlink: 'syz.6.1119': attribute type 10 has an invalid length. [ 294.240418][T10605] netlink: 'syz.6.1119': attribute type 10 has an invalid length. [ 295.051154][T10616] netlink: 'syz.1.1123': attribute type 10 has an invalid length. [ 296.823455][T10578] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1111'. [ 296.832810][T10578] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 297.314379][T10628] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1125'. [ 298.847649][T10657] netlink: 'syz.6.1129': attribute type 5 has an invalid length. [ 299.454238][T10648] hsr0 speed is unknown, defaulting to 1000 [ 299.478074][T10661] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1133'. [ 299.568918][T10667] netlink: 'syz.7.1134': attribute type 11 has an invalid length. [ 299.577510][T10667] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1134'. [ 299.888411][T10672] netlink: 'syz.4.1138': attribute type 2 has an invalid length. [ 299.918456][T10672] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 299.951953][T10674] netlink: 'syz.1.1139': attribute type 29 has an invalid length. [ 299.969214][T10674] netlink: 'syz.1.1139': attribute type 29 has an invalid length. [ 300.003463][T10674] netlink: 'syz.1.1139': attribute type 29 has an invalid length. [ 300.026082][T10674] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1139'. [ 300.301278][T10687] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.309172][T10687] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.348058][T10687] bridge0: entered allmulticast mode [ 300.408219][T10689] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1143'. [ 300.434279][T10689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'. [ 300.461037][T10700] : renamed from hsr0 (while UP) [ 301.146377][T10725] batadv_slave_1: entered promiscuous mode [ 301.163303][T10725] batadv_slave_1: entered allmulticast mode [ 301.272439][T10731] netlink: 'syz.7.1152': attribute type 32 has an invalid length. [ 301.620868][T10741] netlink: 'syz.1.1154': attribute type 11 has an invalid length. [ 301.631015][T10741] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1154'. [ 301.791532][T10743] netlink: 'syz.4.1156': attribute type 13 has an invalid length. [ 301.865397][T10745] FAULT_INJECTION: forcing a failure. [ 301.865397][T10745] name failslab, interval 1, probability 0, space 0, times 0 [ 301.890328][T10745] CPU: 0 UID: 0 PID: 10745 Comm: syz.6.1157 Not tainted syzkaller #0 PREEMPT(full) [ 301.890354][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.890364][T10745] Call Trace: [ 301.890372][T10745] [ 301.890380][T10745] dump_stack_lvl+0x189/0x250 [ 301.890407][T10745] ? __pfx____ratelimit+0x10/0x10 [ 301.890431][T10745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.890452][T10745] ? __pfx__printk+0x10/0x10 [ 301.890486][T10745] ? __pfx___might_resched+0x10/0x10 [ 301.890501][T10745] ? fs_reclaim_acquire+0x7d/0x100 [ 301.890534][T10745] should_fail_ex+0x414/0x560 [ 301.890565][T10745] should_failslab+0xa8/0x100 [ 301.890592][T10745] __kmalloc_noprof+0xcb/0x4f0 [ 301.890615][T10745] ? bpf_test_init+0xc2/0x170 [ 301.890645][T10745] bpf_test_init+0xc2/0x170 [ 301.890675][T10745] bpf_prog_test_run_xdp+0x37c/0x1000 [ 301.890723][T10745] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 301.890767][T10745] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 301.890793][T10745] bpf_prog_test_run+0x2c4/0x340 [ 301.890824][T10745] __sys_bpf+0x581/0x870 [ 301.890851][T10745] ? __pfx___sys_bpf+0x10/0x10 [ 301.890918][T10745] __x64_sys_bpf+0x7c/0x90 [ 301.890940][T10745] do_syscall_64+0xfa/0x3b0 [ 301.890965][T10745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.890982][T10745] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.891006][T10745] ? clear_bhb_loop+0x60/0xb0 [ 301.891030][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.891047][T10745] RIP: 0033:0x7f99aa98ebe9 [ 301.891064][T10745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.891079][T10745] RSP: 002b:00007f99ab745038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 301.891099][T10745] RAX: ffffffffffffffda RBX: 00007f99aabc5fa0 RCX: 00007f99aa98ebe9 [ 301.891112][T10745] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 301.891124][T10745] RBP: 00007f99ab745090 R08: 0000000000000000 R09: 0000000000000000 [ 301.891136][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.891146][T10745] R13: 00007f99aabc6038 R14: 00007f99aabc5fa0 R15: 00007fffa3afe038 [ 301.891185][T10745] [ 302.202213][T10749] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1159'. [ 302.641983][T10763] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1164'. [ 302.790674][T10776] netlink: 'syz.6.1165': attribute type 1 has an invalid length. [ 302.934647][T10784] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1169'. [ 303.056499][T10788] netlink: 'syz.6.1170': attribute type 13 has an invalid length. [ 303.557361][T10790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1171'. [ 303.970730][T10802] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1175'. [ 304.271169][T10810] FAULT_INJECTION: forcing a failure. [ 304.271169][T10810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.297039][T10810] CPU: 1 UID: 0 PID: 10810 Comm: syz.2.1172 Not tainted syzkaller #0 PREEMPT(full) [ 304.297072][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.297082][T10810] Call Trace: [ 304.297089][T10810] [ 304.297097][T10810] dump_stack_lvl+0x189/0x250 [ 304.297123][T10810] ? __pfx____ratelimit+0x10/0x10 [ 304.297147][T10810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.297167][T10810] ? __pfx__printk+0x10/0x10 [ 304.297195][T10810] ? __might_fault+0xb0/0x130 [ 304.297223][T10810] should_fail_ex+0x414/0x560 [ 304.297251][T10810] _copy_from_user+0x2d/0xb0 [ 304.297273][T10810] bpf_test_init+0xf8/0x170 [ 304.297302][T10810] bpf_prog_test_run_xdp+0x37c/0x1000 [ 304.297344][T10810] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 304.297374][T10810] ? __fget_files+0x2a/0x420 [ 304.297403][T10810] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 304.297426][T10810] bpf_prog_test_run+0x2c4/0x340 [ 304.297456][T10810] __sys_bpf+0x581/0x870 [ 304.297481][T10810] ? __pfx___sys_bpf+0x10/0x10 [ 304.297542][T10810] __x64_sys_bpf+0x7c/0x90 [ 304.297563][T10810] do_syscall_64+0xfa/0x3b0 [ 304.297588][T10810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.297604][T10810] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 304.297621][T10810] ? clear_bhb_loop+0x60/0xb0 [ 304.297644][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.297661][T10810] RIP: 0033:0x7f3f2eb8ebe9 [ 304.297678][T10810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.297691][T10810] RSP: 002b:00007f3f2fad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.297709][T10810] RAX: ffffffffffffffda RBX: 00007f3f2edc5fa0 RCX: 00007f3f2eb8ebe9 [ 304.297720][T10810] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 304.297732][T10810] RBP: 00007f3f2fad4090 R08: 0000000000000000 R09: 0000000000000000 [ 304.297744][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.297755][T10810] R13: 00007f3f2edc6038 R14: 00007f3f2edc5fa0 R15: 00007ffd1436af68 [ 304.297790][T10810] [ 304.561803][T10813] syzkaller0: entered promiscuous mode [ 304.567430][T10813] syzkaller0: entered allmulticast mode [ 305.244388][T10827] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1178'. [ 305.686620][T10848] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1187'. [ 306.691123][T10863] netlink: 'syz.4.1189': attribute type 9 has an invalid length. [ 307.604473][T10875] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1193'. [ 307.902520][T10890] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1195'. [ 308.199988][T10896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 308.566315][T10902] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1200'. [ 308.904727][T10910] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1203'. [ 308.937052][T10910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 309.008565][ T5866] Bluetooth: hci0: command 0x0406 tx timeout [ 309.090410][T10917] netlink: 147608 bytes leftover after parsing attributes in process `syz.6.1205'. [ 309.165090][T10917] netlink: 'syz.6.1205': attribute type 2 has an invalid length. [ 309.211488][T10917] netlink: 62135 bytes leftover after parsing attributes in process `syz.6.1205'. [ 309.349413][T10908] syzkaller0: entered promiscuous mode [ 309.355345][T10908] syzkaller0: entered allmulticast mode [ 309.596111][T10927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1207'. [ 309.623546][T10924] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1207'. [ 309.640114][T10927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1207'. [ 309.898381][T10937] netlink: 'syz.1.1211': attribute type 10 has an invalid length. [ 309.904432][T10938] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 310.013739][T10938] netlink: 'syz.4.1210': attribute type 21 has an invalid length. [ 311.314825][T10937] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 311.334175][T10938] netlink: 'syz.4.1210': attribute type 3 has an invalid length. [ 312.041661][T10961] netlink: 'syz.2.1214': attribute type 5 has an invalid length. [ 312.108173][T10970]  speed is unknown, defaulting to 1000 [ 312.619568][T10979] netlink: 'syz.1.1221': attribute type 10 has an invalid length. [ 312.655617][T10979] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.675772][T10979] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.767206][T10983] __nla_validate_parse: 4 callbacks suppressed [ 312.767223][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1221'. [ 312.996575][T10979] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.011331][T10979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.025270][T10979] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.038560][T10979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.689789][T10979] bridge0: entered promiscuous mode [ 313.717676][T10979] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 313.877396][T10993] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1224'. [ 314.116995][ T5866] Bluetooth: hci6: command 0x0406 tx timeout [ 314.253143][T11010] FAULT_INJECTION: forcing a failure. [ 314.253143][T11010] name failslab, interval 1, probability 0, space 0, times 0 [ 314.266216][T11010] CPU: 1 UID: 0 PID: 11010 Comm: syz.1.1230 Not tainted syzkaller #0 PREEMPT(full) [ 314.266241][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.266251][T11010] Call Trace: [ 314.266258][T11010] [ 314.266266][T11010] dump_stack_lvl+0x189/0x250 [ 314.266292][T11010] ? __pfx____ratelimit+0x10/0x10 [ 314.266316][T11010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.266336][T11010] ? __pfx__printk+0x10/0x10 [ 314.266366][T11010] ? __pfx___might_resched+0x10/0x10 [ 314.266382][T11010] ? fs_reclaim_acquire+0x7d/0x100 [ 314.266410][T11010] should_fail_ex+0x414/0x560 [ 314.266435][T11010] ? page_pool_create_percpu+0x32a/0xbe0 [ 314.266454][T11010] should_failslab+0xa8/0x100 [ 314.266478][T11010] __kvmalloc_node_noprof+0x161/0x5f0 [ 314.266500][T11010] ? page_pool_create_percpu+0x32a/0xbe0 [ 314.266524][T11010] page_pool_create_percpu+0x32a/0xbe0 [ 314.266545][T11010] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 314.266573][T11010] bpf_test_run_xdp_live+0x1ca/0x1b10 [ 314.266600][T11010] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 314.266629][T11010] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.266663][T11010] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 314.266684][T11010] ? 0xffffffffa02057c0 [ 314.266700][T11010] ? 0xffffffffa02057c0 [ 314.266764][T11010] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 314.266796][T11010] ? bpf_prog_change_xdp+0x12/0x30 [ 314.266819][T11010] bpf_prog_test_run_xdp+0x713/0x1000 [ 314.266866][T11010] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 314.266894][T11010] ? __fget_files+0x2a/0x420 [ 314.266923][T11010] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 314.266948][T11010] bpf_prog_test_run+0x2c4/0x340 [ 314.266975][T11010] __sys_bpf+0x581/0x870 [ 314.266999][T11010] ? __pfx___sys_bpf+0x10/0x10 [ 314.267036][T11010] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 314.267072][T11010] __x64_sys_bpf+0x7c/0x90 [ 314.267093][T11010] do_syscall_64+0xfa/0x3b0 [ 314.267116][T11010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.267133][T11010] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.267150][T11010] ? clear_bhb_loop+0x60/0xb0 [ 314.267170][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.267187][T11010] RIP: 0033:0x7f33f838ebe9 [ 314.267203][T11010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.267217][T11010] RSP: 002b:00007f33f9282038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 314.267236][T11010] RAX: ffffffffffffffda RBX: 00007f33f85c5fa0 RCX: 00007f33f838ebe9 [ 314.267248][T11010] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 314.267260][T11010] RBP: 00007f33f9282090 R08: 0000000000000000 R09: 0000000000000000 [ 314.267271][T11010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.267282][T11010] R13: 00007f33f85c6038 R14: 00007f33f85c5fa0 R15: 00007ffcd05f7fb8 [ 314.267312][T11010] [ 314.577206][T11010] page_pool_create_percpu() gave up with errno -12 [ 314.725840][T11015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 314.753203][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1231'. [ 314.848366][T11014] veth1_macvtap: left promiscuous mode [ 314.961839][T11014] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1231'. [ 315.062770][T11015] veth1_macvtap: entered promiscuous mode [ 315.070047][T11015] macsec0: entered promiscuous mode [ 315.079795][T11015] macsec0: entered allmulticast mode [ 315.085253][T11015] veth1_macvtap: entered allmulticast mode [ 315.669491][T11041] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1240'. [ 317.176601][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.182961][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.007628][T11073] netlink: 'syz.4.1247': attribute type 9 has an invalid length. [ 318.016426][T11073] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1247'. [ 318.033688][T11080] netlink: 'syz.1.1246': attribute type 2 has an invalid length. [ 318.046726][T11080] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 318.055363][T11080] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1246'. [ 318.069158][T11080] nbd: couldn't find a device at index 149 [ 318.437310][T11093] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1252'. [ 318.514875][T11087] netlink: 'syz.4.1250': attribute type 4 has an invalid length. [ 318.541559][T11087] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1250'. [ 318.573567][T11087] .`: renamed from bond0 [ 318.618770][T11105] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1255'. [ 319.010838][T11116] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1256'. [ 319.264742][T11134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1264'. [ 319.695893][T11144] netlink: 'syz.1.1267': attribute type 11 has an invalid length. [ 319.743744][T11144] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1267'. [ 320.024217][T11154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.376333][T11172] netlink: 'syz.6.1273': attribute type 39 has an invalid length. [ 320.402067][T11174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.583091][T11172] hsr_slave_0 (unregistering): left promiscuous mode [ 320.942279][T11195] netlink: 'syz.6.1281': attribute type 9 has an invalid length. [ 320.951380][T11195] netlink: 61967 bytes leftover after parsing attributes in process `syz.6.1281'. [ 321.169293][T11181] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1272'. [ 322.950452][T11220] netlink: 'syz.2.1287': attribute type 10 has an invalid length. [ 323.097569][T11232] __nla_validate_parse: 3 callbacks suppressed [ 323.097589][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1292'. [ 323.273128][T11238] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1293'. [ 325.172956][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1304'. [ 326.145322][T11278] netlink: 'syz.4.1306': attribute type 10 has an invalid length. [ 326.225576][T11278] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1306'. [ 326.258769][T11278] team0: entered promiscuous mode [ 326.283928][T11278] C: entered promiscuous mode [ 326.299660][T11278] team_slave_1: entered promiscuous mode [ 326.338606][T11278] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 326.345934][T11278] team0: entered allmulticast mode [ 326.352325][T11278] C: entered allmulticast mode [ 326.357715][T11278] team_slave_1: entered allmulticast mode [ 326.363484][T11278] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 326.372454][T11278] bridge0: port 4(team0) entered blocking state [ 326.381496][T11278] bridge0: port 4(team0) entered disabled state [ 326.402969][T11278] bridge0: port 4(team0) entered blocking state [ 326.409449][T11278] bridge0: port 4(team0) entered forwarding state [ 327.047402][T11302] netlink: 'syz.4.1313': attribute type 22 has an invalid length. [ 327.857515][T11317] syzkaller0: entered promiscuous mode [ 327.884895][T11317] syzkaller0: entered allmulticast mode [ 328.014996][T11317] netlink: 'syz.4.1317': attribute type 16 has an invalid length. [ 328.023051][T11317] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1317'. [ 328.156128][T11327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1321'. [ 328.372164][T11337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'. [ 329.549023][T11338] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 329.605598][T11364] netlink: 'syz.4.1331': attribute type 2 has an invalid length. [ 329.658922][T11338] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 329.751376][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1333'. [ 330.057432][T11381] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 330.222484][T11381] netlink: 'syz.1.1335': attribute type 10 has an invalid length. [ 330.306998][T11381] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 330.324803][T11381] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 330.358592][T11390] sctp: [Deprecated]: syz.6.1336 (pid 11390) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.358592][T11390] Use struct sctp_sack_info instead [ 330.554671][T11402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1339'. [ 331.720989][T11427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.765705][T11428] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.798745][T11420] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1347'. [ 332.733936][T11451] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1353'. [ 332.761743][T11451] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 332.781597][T11451] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 332.917093][ T8437] wlan1: Trigger new scan to find an IBSS to join [ 332.941421][T11462] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.1355'. [ 333.061921][T11445] syzkaller0: entered promiscuous mode [ 333.205970][T11445] syzkaller0: entered allmulticast mode [ 336.916592][ T8437] wlan1: Trigger new scan to find an IBSS to join [ 337.120601][T11483] wg2: entered promiscuous mode [ 337.125509][T11483] wg2: entered allmulticast mode [ 337.281992][T11510]  speed is unknown, defaulting to 1000 [ 337.944114][T11518] pim6reg1: entered promiscuous mode [ 338.086197][T11518] pim6reg1: entered allmulticast mode [ 338.599057][ T8435] wlan1: Creating new IBSS network, BSSID 9e:c8:58:cd:b8:1a [ 345.049467][T11553]  speed is unknown, defaulting to 1000 [ 346.602182][T11562] pim6reg1: entered promiscuous mode [ 346.621197][T11562] pim6reg1: entered allmulticast mode [ 348.362851][T11587] pim6reg1: entered promiscuous mode [ 348.410936][T11587] pim6reg1: entered allmulticast mode [ 350.345761][T11611] syzkaller0: entered allmulticast mode [ 351.965400][T11637] bond_slave_1: mtu less than device minimum [ 353.010936][ T7420] svc: failed to register nfsdv3 RPC service (errno 512). [ 353.025179][ T7420] svc: failed to register nfsaclv3 RPC service (errno 512). [ 353.482833][T11654]  speed is unknown, defaulting to 1000 [ 355.084663][T11697] ------------[ cut here ]------------ [ 355.090313][T11697] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)(1) [ 355.258536][T11697] WARNING: CPU: 1 PID: 11697 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 355.269063][T11697] Modules linked in: [ 355.272972][T11697] CPU: 1 UID: 0 PID: 11697 Comm: syz.1.1438 Not tainted syzkaller #0 PREEMPT(full) [ 355.282547][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.292660][T11697] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 355.298955][T11697] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 af 33 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 355.319922][T11697] RSP: 0018:ffffc90013696f08 EFLAGS: 00010282 [ 355.326019][T11697] RAX: 5e8f6e1cd71d2300 RBX: 0000000000000000 RCX: 0000000000080000 [ 355.334860][T11697] RDX: ffffc9000dfc0000 RSI: 000000000000b785 RDI: 000000000000b786 [ 355.342919][T11697] RBP: 0000000004000000 R08: 0000000000000003 R09: 0000000000000004 [ 355.350967][T11697] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88804ec832d0 [ 355.359201][T11697] R13: ffff88804ec832f0 R14: ffff88804ec83308 R15: 0000000000000000 [ 355.367278][T11697] FS: 00007f33f92616c0(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 355.376228][T11697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.382900][T11697] CR2: 0000000100000000 CR3: 0000000059f92000 CR4: 00000000003526f0 [ 355.390927][T11697] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.398968][T11697] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 355.407004][T11697] Call Trace: [ 355.410289][T11697] [ 355.413244][T11697] reg_set_min_max+0x264/0x300 [ 355.419081][T11697] check_cond_jmp_op+0x159b/0x2910 [ 355.424233][T11697] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 355.430358][T11697] ? do_check+0xa66c/0xe520 [ 355.434877][T11697] ? do_check+0x27f8/0xe520 [ 355.439476][T11697] do_check+0x6751/0xe520 [ 355.443884][T11697] ? __pfx_do_check+0x10/0x10 [ 355.448623][T11697] ? init_func_state+0x1ddf/0x2d20 [ 355.453756][T11697] do_check_common+0x1949/0x24f0 [ 355.458790][T11697] bpf_check+0x1746a/0x1d2d0 [ 355.463386][T11697] ? is_bpf_text_address+0x26/0x2b0 [ 355.468656][T11697] ? kernel_text_address+0xa5/0xe0 [ 355.473780][T11697] ? __kernel_text_address+0xd/0x40 [ 355.479062][T11697] ? __lock_acquire+0xab9/0xd20 [ 355.483940][T11697] ? __mutex_trylock_common+0x153/0x260 [ 355.489526][T11697] ? __pfx___mutex_trylock_common+0x10/0x10 [ 355.495442][T11697] ? css_rstat_updated+0x23a/0x4f0 [ 355.500631][T11697] ? __lock_acquire+0xab9/0xd20 [ 355.505504][T11697] ? __pfx_bpf_check+0x10/0x10 [ 355.510331][T11697] ? ktime_get_with_offset+0x8c/0x2a0 [ 355.515727][T11697] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 355.523062][T11697] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.528989][T11697] ? ktime_get_with_offset+0x8c/0x2a0 [ 355.534377][T11697] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 355.540687][T11697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 355.547350][T11697] ? __asan_memset+0x22/0x50 [ 355.551951][T11697] ? bpf_obj_name_cpy+0x194/0x1e0 [ 355.557176][T11697] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 355.562387][T11697] ? security_bpf_prog_load+0x7f/0x310 [ 355.567909][T11697] bpf_prog_load+0x1318/0x1930 [ 355.572706][T11697] ? __pfx_bpf_prog_load+0x10/0x10 [ 355.577905][T11697] ? bpf_lsm_bpf+0x9/0x20 [ 355.582242][T11697] ? security_bpf+0x7e/0x300 [ 355.586894][T11697] __sys_bpf+0x528/0x870 [ 355.591149][T11697] ? __pfx___sys_bpf+0x10/0x10 [ 355.595941][T11697] ? rcu_is_watching+0x15/0xb0 [ 355.600783][T11697] __x64_sys_bpf+0x7c/0x90 [ 355.605212][T11697] do_syscall_64+0xfa/0x3b0 [ 355.609791][T11697] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.614999][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.621125][T11697] ? clear_bhb_loop+0x60/0xb0 [ 355.626863][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.632762][T11697] RIP: 0033:0x7f33f838ebe9 [ 355.638195][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.657883][T11697] RSP: 002b:00007f33f9261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.666311][T11697] RAX: ffffffffffffffda RBX: 00007f33f85c6090 RCX: 00007f33f838ebe9 [ 355.674352][T11697] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 355.682369][T11697] RBP: 00007f33f8411e19 R08: 0000000000000000 R09: 0000000000000000 [ 355.690377][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.698419][T11697] R13: 00007f33f85c6128 R14: 00007f33f85c6090 R15: 00007ffcd05f7fb8 [ 355.706455][T11697] [ 355.709479][T11697] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.716756][T11697] CPU: 1 UID: 0 PID: 11697 Comm: syz.1.1438 Not tainted syzkaller #0 PREEMPT(full) [ 355.726138][T11697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.736203][T11697] Call Trace: [ 355.739488][T11697] [ 355.742419][T11697] dump_stack_lvl+0x99/0x250 [ 355.747022][T11697] ? __asan_memcpy+0x40/0x70 [ 355.751628][T11697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.756837][T11697] ? __pfx__printk+0x10/0x10 [ 355.761452][T11697] vpanic+0x281/0x750 [ 355.765435][T11697] ? __pfx__printk+0x10/0x10 [ 355.770038][T11697] ? __pfx_vpanic+0x10/0x10 [ 355.774547][T11697] ? is_bpf_text_address+0x26/0x2b0 [ 355.779784][T11697] panic+0xb9/0xc0 [ 355.783508][T11697] ? __pfx_panic+0x10/0x10 [ 355.787944][T11697] __warn+0x31b/0x4b0 [ 355.791928][T11697] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 355.797571][T11697] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 355.803209][T11697] report_bug+0x2be/0x4f0 [ 355.807553][T11697] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 355.813196][T11697] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 355.818839][T11697] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 355.824481][T11697] handle_bug+0x84/0x160 [ 355.828727][T11697] exc_invalid_op+0x1a/0x50 [ 355.833243][T11697] asm_exc_invalid_op+0x1a/0x20 [ 355.838092][T11697] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 355.844353][T11697] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 af 33 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 355.863959][T11697] RSP: 0018:ffffc90013696f08 EFLAGS: 00010282 [ 355.870035][T11697] RAX: 5e8f6e1cd71d2300 RBX: 0000000000000000 RCX: 0000000000080000 [ 355.878010][T11697] RDX: ffffc9000dfc0000 RSI: 000000000000b785 RDI: 000000000000b786 [ 355.885988][T11697] RBP: 0000000004000000 R08: 0000000000000003 R09: 0000000000000004 [ 355.893964][T11697] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff88804ec832d0 [ 355.901943][T11697] R13: ffff88804ec832f0 R14: ffff88804ec83308 R15: 0000000000000000 [ 355.909962][T11697] reg_set_min_max+0x264/0x300 [ 355.914746][T11697] check_cond_jmp_op+0x159b/0x2910 [ 355.919885][T11697] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 355.925361][T11697] ? do_check+0xa66c/0xe520 [ 355.929869][T11697] ? do_check+0x27f8/0xe520 [ 355.934381][T11697] do_check+0x6751/0xe520 [ 355.938784][T11697] ? __pfx_do_check+0x10/0x10 [ 355.943467][T11697] ? init_func_state+0x1ddf/0x2d20 [ 355.948594][T11697] do_check_common+0x1949/0x24f0 [ 355.953553][T11697] bpf_check+0x1746a/0x1d2d0 [ 355.958142][T11697] ? is_bpf_text_address+0x26/0x2b0 [ 355.963357][T11697] ? kernel_text_address+0xa5/0xe0 [ 355.968477][T11697] ? __kernel_text_address+0xd/0x40 [ 355.973704][T11697] ? __lock_acquire+0xab9/0xd20 [ 355.978583][T11697] ? __mutex_trylock_common+0x153/0x260 [ 355.984146][T11697] ? __pfx___mutex_trylock_common+0x10/0x10 [ 355.990072][T11697] ? css_rstat_updated+0x23a/0x4f0 [ 355.995201][T11697] ? __lock_acquire+0xab9/0xd20 [ 356.000067][T11697] ? __pfx_bpf_check+0x10/0x10 [ 356.004839][T11697] ? ktime_get_with_offset+0x8c/0x2a0 [ 356.010222][T11697] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 356.016473][T11697] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.021678][T11697] ? ktime_get_with_offset+0x8c/0x2a0 [ 356.027055][T11697] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 356.033302][T11697] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 356.039905][T11697] ? __asan_memset+0x22/0x50 [ 356.044497][T11697] ? bpf_obj_name_cpy+0x194/0x1e0 [ 356.049522][T11697] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 356.054727][T11697] ? security_bpf_prog_load+0x7f/0x310 [ 356.060195][T11697] bpf_prog_load+0x1318/0x1930 [ 356.064980][T11697] ? __pfx_bpf_prog_load+0x10/0x10 [ 356.070127][T11697] ? bpf_lsm_bpf+0x9/0x20 [ 356.074462][T11697] ? security_bpf+0x7e/0x300 [ 356.079059][T11697] __sys_bpf+0x528/0x870 [ 356.083318][T11697] ? __pfx___sys_bpf+0x10/0x10 [ 356.088108][T11697] ? rcu_is_watching+0x15/0xb0 [ 356.092881][T11697] __x64_sys_bpf+0x7c/0x90 [ 356.097302][T11697] do_syscall_64+0xfa/0x3b0 [ 356.101813][T11697] ? lockdep_hardirqs_on+0x9c/0x150 [ 356.107014][T11697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.113083][T11697] ? clear_bhb_loop+0x60/0xb0 [ 356.117771][T11697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.123666][T11697] RIP: 0033:0x7f33f838ebe9 [ 356.128092][T11697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.147709][T11697] RSP: 002b:00007f33f9261038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.156149][T11697] RAX: ffffffffffffffda RBX: 00007f33f85c6090 RCX: 00007f33f838ebe9 [ 356.164128][T11697] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 356.172107][T11697] RBP: 00007f33f8411e19 R08: 0000000000000000 R09: 0000000000000000 [ 356.180084][T11697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.188059][T11697] R13: 00007f33f85c6128 R14: 00007f33f85c6090 R15: 00007ffcd05f7fb8 [ 356.196061][T11697] [ 356.199378][T11697] Kernel Offset: disabled [ 356.203688][T11697] Rebooting in 86400 seconds..