last executing test programs: 9m52.695894495s ago: executing program 2 (id=99): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)='U', 0x1080}], 0x1, 0x0, 0x0, 0x6000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x100) syz_open_procfs$namespace(r6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017", 0x61}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="d80000001a0081044e85f782db4cb904021d0800fe007c05e8fe55dbece5174c06048d1c63db138107202d3b7b6717df74cde5bf23", 0x35}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x28, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r8 = socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$kcm(0x10, 0x2, 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r10}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000200)=r7) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfe33) 9m52.267073906s ago: executing program 2 (id=102): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0xc) (async) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000380)={0x4, 0x80, 0x0, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x84, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x7, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x1, 0xfffff075, 0x6, 0x401, 0x2, 0x6cb, 0x0, 0x214a, 0x0, 0xffffffffffffffff}) 9m52.016048642s ago: executing program 2 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a118001500060014", 0x1f}], 0x1}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000eeff940000000074e12ee6e8b4fa706055f4608145000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair(0x2, 0x3, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000500)={r2}) socket$kcm(0x10, 0x4, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={0x0}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) 9m51.744614688s ago: executing program 2 (id=111): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xe2042400, &(0x7f0000000040)="9d0ce774c132e020faf6d07f41c8fa1d14bb3526e550c311641752e3b5e670858d7cc56a0a747f30f1528cbe40083c8bb90bd6e4c260ed2cff5e663a30", 0x3d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="931ee7f32e888a0735109f6daffa03b5dc08fba106") perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0x9, 0x9, 0x9, 0x0, 0x38000000000, 0x4c00, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x8, 0x3, 0x6, 0x6, 0x7, 0x9, 0xd, 0x0, 0x6, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0xfe, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x7, 0x43a1bd73, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)=""/18, 0x12}], 0x1, &(0x7f0000000580)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r4 = socket$kcm(0x18, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x24000840) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 9m50.950956788s ago: executing program 2 (id=117): openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="ce372a58e0ff7262c394707c89be0fdd1ffd2089df784f114de0a0c0801ac8ece4328690a5f74e5b94fc7b447068444927c4f6d7836f547043994b615ef1bd407392b4f0baf428981be093a0f0c78006cf7bdd74dc2071d3", 0x58}, {&(0x7f00000000c0)="de1740103b7672d501f061d6172b448db331ef97f399c8ab6f6fbb0247643b75837ccb066e89acad6f0dfbd916681b560ad1465bba0631e68f371e17513e355fb4048580", 0x44}, {&(0x7f0000000140)="d9467d012c7d5335eeb32df107342e986e1e3d40f5c79c6cb8dd923611306209ee981b82c832cb46f45746199522db28f1d354a106ca8dc15f8a66aef1d61645446c98294ecdf7f34a78c9cdc0d4cbede41f33b9019c408a6395fa21ccec8716624a4aaa07232293f866dfe42385a51d64c462e9c4863209811dd0f63d7ff11f059960f71735ad6f7f2db4c7e2d736867b559ce5d7e327ccb4bd31a121a4", 0x9e}, {&(0x7f0000000200)="8ab307242d557a91e05263e357dcdea786d2a4362f0d115a263e4ffca42ba2928e5b2b43c5bcfcc7b94406466d03eb417815a2d04fb42b9e3460778410a6a47f1a", 0x41}], 0x4, &(0x7f00000002c0)=[{0x38, 0x103, 0x1, "ec0d20f1b541e3d9798bb45df5b5c2c61277d6db514def3a68a1f5d92659c5944fb6733a0551"}, {0x48, 0x107, 0x6, "f7e7c4f4cb13af92f94d0141f9ac1c93926be58796243660d30bca88a8146019ed9e5c2ea72606aa316044349803f4c66a4f"}, {0xd8, 0x108, 0x5, "95e67ce31ec3b74b2e1cbf31466ed173398c90fae04538879097807e08ed2eb1b00f824cf0b90ea52710f1b1d82a06651b582816b956ea84aa79f1eafca3eae036b142d96bdc8c780aa64a7bde3c1ef0bc434ba55f15d793a6fb73034302945c4ebcb18e063788854407f9c37e8ee3e54d2d1ca14b2b7207aa3c90a65cbc48d40df22a9f897ce67063fe644b306f0e9da4c1acd59c7b028988903b98c31120cf44f1b2a4dbddc8151a4e5dc46c197b7bddfc853da38654f64d2465fc7f46b835e9"}, {0x98, 0x114, 0xca27, "a5edc3f9b5de67577ff61278eb077dc9cc476836c8400178e060ac8c51b6dddc11e4621b92007cd57b46f9643c09e564c9b5e8ce939fb1cd1f56d5e684770f8edbc9ca1415513d00f841f6b82be92300078469ef99e97861ba50c263c6735f334846d2ebaa3ec40db0acf19db3106290b557f26e6e5b26ef14d27771e534756cb7a1"}, {0xf0, 0x117, 0x80000000, "743740bda8ca6107aa5f819bca1e06fbaae27980d361cef2cb997149cb3a03459b5ed922cd1e3ba6e48c691ee0eaff25897110b6e429b11bde18cb4746253100eda0b0be497c9616272e0aaeb5e5b62aa36383b29bcd904b61af6d4c495c6e1e9357cb78812827d031e17f3a12e061c4398bbf7c5665bb78e26649a560d2a80b3eeaf929fe6a9d35f99a7677f58927ace5047b0b598f22d661f32e21448605dd6b3ad2c6a6282d0ad65827c83634ccddfebe8b237a7c1e4a13ebd2707f52bcd42d655d3bb7fc0bfd1532cc0bf088b178eb64fab3a0fd8104ce00f7de8623"}, {0x108, 0x10c, 0x401, "b4d6b29bce13559629b94bb8d9bd795047a72000cd461e37029d1dee9bf375d63e6139d82d43afe770cc4da3aaa74032f0191b4926f42a5b9288022052870170c0813b7c122d4b0179314be4d891906836e310cae6a2106aa8c1f9bd958da757237291c2046d1ede5df309eedcaceebbd50521b829b8be00b13f632ad4c8d4e6f474460ddafd0178a5f89423735243388cbccab83d1d0c0d98b2a7f6ee385f53c9470aac02171adb8ebbd5d3061938832206b38d4d38cdb5496cbdfe6aff9e760d7d7f08f21e59e718cf4be4cbb35ecda54b2d32b3139534a8edf3b2e56ff1e8fcf0edec5c4656d25221356ddb73549428de83"}, {0x50, 0x116, 0x8, "827daf60a46bd8da14ae4fcc3d783aec551e1639ae3beea4b4781f4b1188df588a8b98a61c8ea577ddd4fa00ccb2333fd8f46d17341a64c25043b76bda"}, {0x38, 0x111, 0x4, "72a26574ad5e1695b11cb11fee8d74be01586ba0b940fe80a43bae55f5ff5b0fc70bb33d287b20"}, {0x98, 0x101, 0x80000000, "0c6f569f2328b3d39b388085a1321d9f61462fbfaf4952765bdb9b7317d0c958dfac566ca6cadec78e1cc37cdb5811cc512a9a106c3bacefb8cb99d7376cea2e484231d8ec69b7f09b5067e43a4e49cbaf0bc257d9ed268576246099f772b4fc95de07b82c8ef7ec9f54b1ff53ae2bc8d53a8e5cc295f89b3050fc508bd2a3d40eca0c1e68ab89"}], 0x508}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x45, 0xfa, &(0x7f0000000840)="4f81157366a544c2ad46df70e208cba3730342c58da6296b765d09266f4b79a4423236b8c9be30550ac07908bdccddadb53e6b0cd73dec5b2300da09d7b4b4fa6e02cf4a51", &(0x7f00000008c0)=""/250, 0x5, 0x0, 0x2, 0xa4, &(0x7f00000009c0)="e30a", &(0x7f0000000a00)="247a77b94ec74c5cae233b1e92126529a2d81cf0f7dc4f0aa286a9505f152be9aa691237b9fc8972e84a1cdd2f2dc183a5f4ba1e0f21c86b3bc1779e77d50ce657ef615ac1159067378c6cee3136ddbc3a70e6b923749c2cd270a9cbce16bfa3c61418d8e91d485390152276f04d90cb0f0e171eb2a3800965b3ea28fd1b1df4bd6bc5f735219ad27169ac03fa370758f541e78a1b9f819809c4ad1376bf0bd12492ecdb", 0x2, 0x0, 0x3}, 0x50) sendmsg(r0, &(0x7f0000000d00)={&(0x7f0000000b40)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000bc0)="961c61d81bf1367873151a54724ef612cc91d07695536b25a53184ea339ffde54dfb1f6562a1557515c06a0b83a445e1b1c862493a4048843da1151043f7c3bcf1a27a0256f842837c040252f5e4da012500101993df185ce1b0115e0f10696f64d7ed07caf0e7d0378c1b323cb00655a5cf4350d2923531040a4fd02cd3e75ac93636a0d040ada097eee2fffdc4e65c37e87cb63dea1be5b69183a7f43ef69372e94e", 0xa3}], 0x1, &(0x7f0000000cc0)}, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d40), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d80)=r1, 0x4) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000dc0)='syz1\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0x400, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000e40)=r1) syz_clone(0xc3a8200, &(0x7f0000000e80)="0c2eef81980bbd9c9a82bbb6891a44e5a33beb54e2cf108c0b67c22173e5de3dc87a3f4ff65107a86ec22edd29689462b5b33616dc28ceb596f717e35faea7edc9004f5bf0b3dacb8895157d451c86e8ade87b605b1b54257bca43424f4ba9d68d37bbd1d717ce354c128c2b72d7c825bd92af1b0c4687ba09a03d46201ce48127fe149958fa20d45cac411e5a74652718513daa4b59730998557a8f1c668cf302a7885ff6fee07c3cc248635553c6e621f45521d1b3a6b6982118eb70f57826b74bbe9a2c4d9ef1ca56a11b107fe62326e186", 0xd3, &(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)="093d6271fe7aef5397c132ac52e3815f7c81827c9db45e5756e7aa5266dc99d34bda96ce375d7174e76cdb5e6ae13fb629fda0204f82beb4980464111b6b7c27489e7df2bde21086cc2d578ad67ad8d43a1ede822c440a712aa3d27020b5fdbd8dc4edab07aa6df26e94c8b93f2dd6eb44a4247f34bf06d8476c91a2ecfd5770e7e96e306f7c94f9fec73cedae522e20b74b41d895ba704f071121ee71d4fc1b306c78efccc84ddde5279d32c0512739836be9788768a121233d0f57901bb71276d6af97169df7e12c1aa3328e") r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001100)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r3, &(0x7f0000001140), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001500)={r1, 0xe0, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000001300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001340), &(0x7f0000001380), 0x8, 0x61, 0x8, 0x8, &(0x7f00000013c0)}}, 0x10) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_ext={0x1c, 0x4, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f00000011c0)='GPL\x00', 0x0, 0x9, &(0x7f0000001200)=""/9, 0x40f00, 0x60, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001540)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001580)={0x0, 0xa, 0x5}, 0x10, 0x1ad4a, r1, 0x8, &(0x7f00000015c0)=[0x1, 0xffffffffffffffff], &(0x7f0000001600)=[{0x5, 0x3, 0xe, 0xc}, {0x3, 0x3, 0xe, 0x9}, {0x2, 0x3, 0x9, 0x3}, {0x2, 0x4, 0x5, 0x1f}, {0x5, 0x5, 0xb, 0x7}, {0x5, 0x1, 0x8, 0xf}, {0x1, 0x5, 0x2, 0x8}, {0x3, 0x3, 0x4, 0x7}], 0x10, 0x8}, 0x94) openat$cgroup(r3, &(0x7f0000001740)='syz1\x00', 0x200002, 0x0) getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x24, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x95a2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000018c0)='GPL\x00', 0x9, 0x56, &(0x7f0000001900)=""/86, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001980)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000019c0)={0x2, 0x8, 0x2, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001a00)=[r0, 0xffffffffffffffff, r5, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000001a40)=[{0x4, 0x1, 0xa, 0xb}], 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c40)={@map=0xffffffffffffffff, 0x16, 0x0, 0x2, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0], &(0x7f0000001c00)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@generic={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x10}, 0x18) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d40)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c80)={@map=r9, r6, 0x25, 0x200c, 0x0, @value=r10, @void, @void, @void, r8}, 0x20) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002080)={&(0x7f0000001f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc1, 0xc1, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x4, 0x5}, {0x1, 0x5e, 0x7}, {0x1, 0x0, 0x80000000}], "e8"}, @fwd={0x7}, @const={0x0, 0x0, 0x0, 0xa, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x9, 0x5, 0x7fffffff}}, @enum64={0xa, 0x4, 0x0, 0x13, 0x1, 0x0, [{0xd, 0xae, 0x400000}, {0x4, 0x2, 0x4}, {0xf, 0xfb1, 0xd2}, {0x6, 0xffff, 0x55b7}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f, 0x0, 0x5f, 0x41, 0x0, 0x2e]}}, &(0x7f0000002000)=""/71, 0xe4, 0x47, 0x0, 0x4, 0x10000, @value=r6}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000021c0)={{r9, 0xffffffffffffffff}, &(0x7f0000002140), &(0x7f0000002180)='%-010d \x00'}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002200)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x1, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002300)=@bpf_ext={0x1c, 0x11, &(0x7f0000001d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x10001}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001e40)='GPL\x00', 0x100, 0x65, &(0x7f0000001e80)=""/101, 0x40f00, 0x3, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f00000020c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002100)={0x4, 0x0, 0x7, 0x1}, 0x10, 0x26e68, r1, 0x4, &(0x7f0000002280)=[r7, r7, r12, r7, r13, r9, r9], &(0x7f00000022c0)=[{0x5, 0x4, 0xb, 0x3}, {0x2, 0x2, 0xd, 0x5}, {0x1, 0x3, 0xe, 0x7}, {0x4, 0x3, 0x4, 0x3}], 0x10, 0x44e5}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f00000023c0), 0x40000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002400)={0x1b, 0x0, 0x0, 0xd625, 0x0, r13, 0x2, '\x00', r4, r11, 0x2, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@base={0xb, 0x3, 0xe, 0x7, 0x24802, r13, 0x2d, '\x00', r4, r11, 0xe008, 0x9, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002500)={r9}, 0x4) 9m50.633703496s ago: executing program 2 (id=121): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xb, 0x23b000, 0x20e8}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="312d380aad"], 0x31) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) (async) close(0xffffffffffffffff) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000"], &(0x7f0000000140)='GPL\x00', 0xd0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000f40)=""/4069, 0x37, 0xfe5, 0x8, 0xffffffff}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@fwd={0xb}, @fwd={0xc}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e]}}, &(0x7f00000001c0)=""/49, 0x42, 0x31, 0x1, 0x7}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 9m35.349739298s ago: executing program 32 (id=121): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xb, 0x23b000, 0x20e8}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="312d380aad"], 0x31) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x880040001, 0x1430, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0xd61, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0xc) (async) close(0xffffffffffffffff) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000"], &(0x7f0000000140)='GPL\x00', 0xd0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f0000000f40)=""/4069, 0x37, 0xfe5, 0x8, 0xffffffff}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@fwd={0xb}, @fwd={0xc}, @typedef={0xf, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e]}}, &(0x7f00000001c0)=""/49, 0x42, 0x31, 0x1, 0x7}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 5m14.48723892s ago: executing program 3 (id=1199): r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="c9", 0x1}], 0x1}, 0x20000800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000a00)=ANY=[@ANYBLOB], &(0x7f0000000bc0)=""/185, 0x9c, 0xb9, 0x4, 0x803}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.state\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, [@alu={0x0, 0x1, 0x5, 0xb, 0xa, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @generic={0x81, 0xe, 0x6, 0x4, 0xd}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x9a, &(0x7f0000000180)=""/154, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x1, 0x2}, 0x10, 0x1ab1c, 0xffffffffffffffff, 0x5, &(0x7f00000009c0)=[r1, r1, r1, r1, r1, r1, r1, r1, r3, r1, r4, r1, r4, r3, r4, r4], &(0x7f0000000380)=[{0x4, 0x1, 0x1}, {0x4, 0x1, 0x5, 0xa}, {0x2, 0x2}, {0x4, 0x5, 0xa, 0x9}, {0x3, 0x3, 0x10, 0x8}], 0x10, 0xc}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000004c0)=r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x1, 0xb, 0x2, 0x1000, 0x37}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x1, 0x8, 0x5, 0x40, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x6, 0x2, 0x8, 0xffffffffffffffc0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x3, 0x9, 0x3, 0x100, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x75, &(0x7f00000006c0)=""/117, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000780)=[{0x4, 0x4, 0x2, 0x1}, {0x0, 0x4, 0x1, 0xa}, {0x5, 0x2, 0x8, 0x5}, {0x4, 0x5, 0xd, 0x5}, {0x1, 0x2, 0x9, 0x1}, {0x0, 0x5, 0x1, 0xc}, {0x0, 0x1, 0xe, 0x9}], 0x10, 0x7ff}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000340)={'pimreg\x00', 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m14.316799424s ago: executing program 3 (id=1202): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000000)="b9354b27b553beee40000b0000a4df2a9080f3c9aa55540d00000000", 0x0, 0x603, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80f3}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) socket$kcm(0x10, 0x3, 0x10) 5m14.07749525s ago: executing program 3 (id=1205): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_devices(r0, &(0x7f00000002c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="63202a3adb0000776900"], 0xa) 5m13.896619874s ago: executing program 3 (id=1207): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x2, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x91b5, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0xc}}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000200)=""/35, 0x34, 0x23, 0x0, 0x4, 0x10000, @value=r1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000000010000000100"/28], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000180), 0x0}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[], 0xffdd) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86edabf0a046b876c1d004800", 0x18}, {&(0x7f0000000240)="f884a90dbcf5c81989c0860cd53a9989252aedd56091bffee2cdb6b78daf6c94acfa45d44e6e2b33d2874743ad68a43e50d76b06a487ae9557ee1d86540f84536aeab4d1d6e7872116ea35d0854b85acd4037ba4766b4f7e1f4f9f8d7be7762eaa238844d64138baae9dcb240e3900ac5a9b00260724e36ce0acce73d6388ad9", 0x80}, {&(0x7f0000000140)}, {&(0x7f00000004c0)}, {&(0x7f0000001500)="a5a51b37f1239f6485b24c56c1124cc6e23c06ae6cd770086afd9d2b404b04a086dada689565831d7be0ca2cb034ae9c875ee13152d976227d537082fca57aa43a23865f5fb66de48d45a7abd22629f177b7d650dd6717a875c8fb08bfebfc860c23c6a1f25f1103b9281a89", 0x6c}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000300)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x702, 0x6, 0x0, &(0x7f0000000540)="e460334470b8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x900}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x10005, [{0x2, 0x5, 0xa}]}, @var={0x4, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x4a, 0x0, 0x6}, 0x28) 5m13.378815777s ago: executing program 3 (id=1211): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f0000000980)="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", 0x1000}], 0x2}, 0x4000040) 5m11.306408018s ago: executing program 3 (id=1215): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x4, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x2e}, 0x3b) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffdfff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x48040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x40}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0xfffffff0, r3}, 0x38) 4m56.142282837s ago: executing program 33 (id=1215): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x4, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x2e}, 0x3b) r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff}, [@printk={@lu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffdfff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x48040) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x40}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r5}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0xfffffff0, r3}, 0x38) 29.166988158s ago: executing program 4 (id=2562): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x103d40, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a118001500060014", 0x1f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4107, 0x100b}], 0x1}, 0x2020) r6 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x26}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xfffffffd}, 0x10}, 0x94) socketpair(0x2, 0x3, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000500)={r7}) socket$kcm(0x10, 0x4, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) 28.390114347s ago: executing program 4 (id=2567): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000280), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x20, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100008, 0x0, 0xfffffffc, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) syz_clone(0x20201000, &(0x7f0000000bc0), 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xffffffff}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x0, 0x7, 0x0, 0x63) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x42, &(0x7f0000000040), 0x3b) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x8000000000000020, 0x3bd5}, 0x2003, 0x7fff, 0x1843, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000"], 0xfdef) 25.969130556s ago: executing program 4 (id=2570): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f0000000180)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x98}}, &(0x7f00000002c0)='GPL\x00'}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000008c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f80"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x66) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x21, &(0x7f0000000300)=ANY=[@ANYBLOB="620af0ff7f000001620af4ff7f000001620af8ff30394e20bfa200000000000007020000f0ffffffb70300000c000000b7040000ffffffffb70500000000000085000000630000001500150000000000bf06000000000000620ad8ff45002800620adcff00000000620ae0ff40060000620ae4ff7f000001620ae8ff7f000001620ac0ff30394e20620ac4ff01000000620ac8ff00000000620accff50020010620ad0ff00000000bf61000000000000bfa200000000000007020000d8ffffffb703000014000000bfa400000000000007040000c0ffffffb705000014000000850000006e000000bf610000000000008500000056000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x96}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 25.37583258s ago: executing program 4 (id=2575): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4040000) 25.281472223s ago: executing program 4 (id=2578): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000002c00000085000000d000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r3, &(0x7f0000000540), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) close(r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) 23.394191169s ago: executing program 4 (id=2584): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa71c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xb) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, 0x0}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89b0, &(0x7f0000000080)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x19}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) 11.986873547s ago: executing program 5 (id=2606): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x34, 0x28, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd6c7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xbc33}}, @call={0x85, 0x0, 0x0, 0x8b}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x73}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}]}, &(0x7f0000000380)='syzkaller\x00', 0xe00000, 0xd, &(0x7f00000003c0)=""/13, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0xa741, 0xba}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000480)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r1], &(0x7f00000004c0)=[{0x4, 0x2, 0x10, 0x3}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='!', 0x1}], 0x1}, 0x0) close(r1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4008744b, &(0x7f0000000180)) 11.787001832s ago: executing program 0 (id=2607): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xe4, 0x0, &(0x7f00000000c0)="4d350a56a7bc74f8e9be2c1fc6b8590afd6f1dd0cf4762f72aae129a3603c71d9b813433f9f431b688bee7c2873eb6cfec9997ad55119427828d6e744a09d409d9cf8c47c68fa0a7cba7f23a392b73633d62a606b49ecf4884ef4edcda5a7ad6b0d27e0a8504ebfabc73b3fea0c0354869f46f7ca04f882d2d4d9fb6e27d22ac390383cb8cd746864f83e39380357181fa2857a7cef1b7b95c6407af9566802212f6bd9b8c22ce36ccaf140b4d4eef21095c89726a089f8b7af623d08adfa444056fa899dfed6d990cf9318c1fd5b2ec22835c5e8325a415627a0d61727e644f3a6b68a2", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x55}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000002c00000085000000d000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x11, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x35, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000880)={r3, &(0x7f0000000540), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) close(r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) 11.564565288s ago: executing program 5 (id=2609): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140)="78c19e36baeb9d839414d9528a48fd501318c0c2246bd936b68f3c2400341a905157f2478cfa35", &(0x7f00000001c0)=""/33}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b700000000008510000002000000850000002b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112f", @ANYRESOCT], 0xee8a) 11.05848941s ago: executing program 1 (id=2610): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 32) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0xe1, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x94) (async) recvmsg(0xffffffffffffffff, 0x0, 0x10111) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x80, 0x5, 0x5, 0xfd, 0x0, 0xab, 0x0, 0x6, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9b, 0x4, @perf_config_ext={0x3ff, 0x8a}, 0x8100, 0x265, 0xcc9, 0x5, 0x7, 0x5512, 0x3, 0x0, 0x4, 0x0, 0x2}, r2, 0xe, r0, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) close(0x3) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 8.613545309s ago: executing program 0 (id=2611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4d4, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_clone(0x1001100, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702b1ffe80000000000000", @ANYRESDEC], 0xffdd) 6.084120051s ago: executing program 5 (id=2612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202403, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'vcan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000000c0)) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x3) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'veth0_vlan\x00', 0x100}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000240)={'pimreg0\x00', @broadcast}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30f) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000002c0)='vcan0\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0x31, 0x1eb438cff10c5af8, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r3, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x9, 0xff, 0x8000, 0x8269, r3, 0xfffffff8, '\x00', r4, r3, 0x3, 0x0, 0x1, 0xb, @value=r3}, 0x50) r6 = syz_clone(0x10098400, &(0x7f0000000580)="27a4178db3ab3130f0320f98319ff3d744f591b55b1616fba7323fa8926555d841a5bae8bf3b3d869a0f8f9c0b4694c7e86108e33e377ef6c7402342b43852cb1bdf89c1b4797e8e4f47456a1ccc3b5b6c49658a569ae0e2d030aa5875744b53a030859d26c37faf337ff7852d615b8e0c9605f4cdfa072a72eeef998827970f324bb3965d23c5b300cb22066f7c18a5cb992e2cec612cc9de31165690f17850c6c16b9724af1af81b1f9791afe17454c77e1f8d0b7953dbdc4a7a0a5f2b90627abbccf945f880", 0xc7, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="0db71f9e13f06fa22342b75609") r7 = syz_open_procfs$namespace(r6, &(0x7f0000000740)='ns/user\x00') ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000780)=0x1) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x2) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000800)={r3}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000840)=r8}, 0x20) sendmsg$inet(r3, &(0x7f0000000b00)={&(0x7f00000008c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="f895ef4669d20fc03f94bfbef2d78d2fa93e7558a25d6ac759373327148fe040f1a56f246561471aa0ee3bf8e911c4bfa7268fcb80c611eb3222051a879bbfc1fbaea04271bbd8242f76ffb385c4ceb28872de406843f59ec3f1d9413ff095818faa87d18aabd2949b61fac12af0f47aff75f55e3616863cbddc2190c7c5eff4a77d49c129a0de9ccd31c512788fd7cd0705", 0x92}, {&(0x7f00000009c0)="b9b95cd89361a8bddb0587cf1423df53fb5089050a7b1528c476a4cb914a1a2842c610df2b4d00aee6fbb852dffd0cf2db3b4d7b9c1b", 0x36}], 0x2, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @private=0xa010101}}}], 0xb8}, 0x20000040) r10 = gettid() syz_open_procfs$namespace(r10, &(0x7f0000000b40)='ns/cgroup\x00') ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000b80)=r3) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x8008, r7}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x8, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000c00)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x42, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0x2, 0xfffffff9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r9, r5, r11]}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000e40)=']\'\xaf/)(-/(-\x00') 3.587890892s ago: executing program 5 (id=2613): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x401c0d0}, 0x4000) r1 = socket$kcm(0x29, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)}, 0x4800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) sendmsg$kcm(r1, &(0x7f0000002e80)={&(0x7f0000000240)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)="30819d1bef1381cf3c8d748436651b24294c614b9fda47e294213602204b5742c880daf445025c45db2b75371fbf6fad44a6fc1a4d79d98a880c3344c6d6a586df99b2b468533d631dde191f013a94780e7fe4e0108706aeedbebd0f78d2cc7c92cf419828480c5f7a0d5d81c6b9e5da42d5dc003cfad72492488d6b9107c68a7c8469bcffd262c4417ee68a92d31d37968bbd9b4c602918ce9a11f18038bc42cbcd5ec16c525d", 0xa7}], 0x1, &(0x7f0000000c00)=[{0x88, 0x10c, 0x5, "c61df7651ac5b1101c26a90407f826695a55a30ed7dbb66cc9ce0dbb9d7bcf3d58e9298c3e08ad8d19aef628a74c46df4b3192217352f142d4d1329d8e6b28789221e830c14bbea8996479d70b5ca76ed8f5ecfc8f5ddd0ccf85c9d38b54e949edab9485a4af2df611260ff6efa33108a5b119"}, {0x1010, 0x114, 0x3c0, "9a9f50562c555067f5041f5da0fd71476b0735c65cbec045d365aee05d5d1ccf69202008e711cf0c3b6b0246eb74f6ea5ced5b2c9cdb6e44709fa41cf64832abb101543cccbda9805dfa94be1f9d29cbc23cfa49fb0e2eccaa7b1ed6cec2786bd3e42787922d1f605f1d4880e1343b8d8dcad0584441e3e34effa2e45da740dd401f8d9ebbde1fb14a8f857aab10b82bfe347e10247458d6a37340de70469811f7216dc6b9bcd45a903d130ce4abbaf0af9a531ecad6adf9d9639605d13e208287b1c356bbfdfca630f8b4aad149bc21a24a438d7bb39c059741ac0bc7137cb4166670d393b43ecf72983a5f1b85f2ac81b1cb1f3df7de4c240fdaff357160b347e8e69aceb37b31e082331885806df28d199eb2142a412ebd5ed754857135305668399285de3838ec03e64cfc4d719d9fa5ad958d1d77eb3164b864918b4f3dccf10e922ebc27c68738207f103b4a8ff08c2dca73eb7c182ea1a190d86c1602554a482e8dc1e5d3538a14d18a3715b5cef1c241a79468b3d86e9c2c60f2bb413c7b888d67bc13af60e1cee37c86ef4c3cbb2ceb1f8297058c8d65627ae80a8f4f907c0c7cb57c1e6120f8a99b6f18fad6389f54514c8ff19227c8d0a7310ce4097d34650f4a0e6a3ca530f5c73e917d8031a2fad25bd062d0d2016952bfbd833e9ab05d522cc4b92b4046b404ee7dd60ab97448ae4a20079e7f53d8dbeac34a95aa3e0a28ea84f7fa1a38814b7b51ace4d9095aecc0f55003121fc184aef8ff13754960fdd2d2db923736e2b12ddf0e254264c8ef63ea07bdb6d672a1e6965f49332b5244ba138812405ba708c394f5efe5ed61a01522c6297b15934ccf3ee52f41e25a1fc453721d4dff418e4ab3810a8b11a5ec4e06b839016a722ea7067fd5effaa95277a0a41fdab487a156dc182e98a72569d501834e05fdc52baf31a04e91f7f8a8c903f400204b84ffa3b3cdcb49da771aaa82279a7ff6c76c13dbecdefec0328270acee0edaa7aa04e3bf99aed9d679a6f32e5d6ade898e9c081bd19d0ecf5ed8f10d1bf2564cac7a0aebbbb7bdabd4d2ab02682d6b1fb6fb9dff74f777802e0483a5b044b18c388395db72e4e9c808e0d6e45e5b91200ac06bfed85da730c557e9672649b7bdf00b40d09b4a5702c4149ad86a1d3f43fef62de2f6749615f87c2d325d9ff816f2f7939217101553684922073898ec3f90196876dbddd67fbc141c4603485c949b13b9c2cbfecef3f78461f211d1f4a185b2c47a09ea431d97832486f3bc1f4e67bfa045a624838487c6ca62d109d73e4513f194a8093d2ad5e1909c88bc6f840d01763f222d7c5b6be425e23196a1b124f016a6081813776739007ed5b1ae5081fe81c8aadda13f68c6ea24855cab07079cc024fb1537673d35b9a28e3e38c206158b55588dcaf9efe170f799a857b8c794859a3a4c34c9278a4fca64892515ba261397d6ad97cbd17a937437d70d82336a8f79e4f0194ed853ef4021048c87e84851e97f0900a20220284c37f84a200fb0c8c30e35fab455f1d85303aa63f448ec7303ecafe8dec4439c34d1ddf3d0f1dcbbdd27c24f1f7b53ce1a0252d06e8a0c6a155ab5e7306c7d0a6c4916681e18490cb9d540472ef0ca573c854907d752b392d29f4c4f0c0cfa6e2c43a99392ef4d56ff8fd950d6c842d9527411657f4608a7e6838ef79fcaeb0457c504d202d1dd3f5b6e6310d77b2f3897ff7f96e2406ea497b09429b964b53fb8b7d71b217f2905009e99d84a92df678f435f1032a85e78d85394bd5cd013373df1943cfeedb5462ca3e985c3a2b8e465f7b9f4dcb86b4752658426ace4d20c7664e380ec81ce02ff76d46eca4d41278283117fb78616292928bdc692f4cc824daa008e1b23f06423868dd95f7bf42e433f8d45f69b1a9b847acce0cf8700f441806fca1aefe5ece8fb642f17e347e84d7983692b5486b72dc2108b570051372d769473da2ef60b427301e5ac8856e430b501d358295819a7032c430c428ba2c159c58c06cd8096884636624788392dcbcc3cbf858a82df6e10a42cb820eb4a11eb6151f698af7e83c35a0eb4b3e731079f21986d158a9f0a5a3c56075bdc224969f4211c9404e8ae82f4b1c03c883c3275d72583e11f6fab25221d60105c4238991b9e564599f221e191bf933e61afc0fa601849ff64f569592045f0a8c79b16fb986b19cdce12506b79fb8ee5e450e127133301eb0397acdd1714d6903865acdf2e188754473b253f5f2504c8ad6e118be3c29430af45bcb05087c940ebebc8ec97460c8b20b4d6d0af950759d6ca58caa5858541027dc2959330019176bc1f2587059c95e4ff9b1edc5f64abf0915932021b5b237fdf8a4c73a3e8cdb1a31b28ff22e309f21c28ddfee198fd1bdea56cbdb9d5f2418482382f14268a256efea8bf0cb162456007305fc3a70bef064c64bccfdb0303c5d838aa8a7b31be537b1e0840b1b72244754ba26b47d2b319a79270cb74cf27d688fad100bdbaaab480dc096915d0371efe8475f9e6a2eaafb64afe9be55fed7f76b0d9308a7e43b975c4cc62e9263ebf63cc69f7c120e05f9a96927aab887166c3e494325f43249d08b84334b32bf0043546b562a6b6f8c8a90cef61c1e5cd1f8fb9fcbcf618ffeb60a5c8e1b04a76dbe9a6361429822550e282e173fe78d3731a5af65b79d9654d2f3b4a9206534302f497045d7e42b9f94031a43f8cb3bf0e2859e46e53302e3d3c59c11d3f4c87a3661826d21fdcfbf4e2a96ef6bdfda57697f4bdce6898f25c5e1537d8a9bade297fe76846f86e7372e78111eb61371a732318bcb7c4f9431d7de1d897fdd10e4638da1e5613d115ee097df1606909d1ca48a18eaeadd27474736c1f7799f465af1dbe5c1989f6e77680bc9c8ff398b0a52fa2b12e19d2edfc9a189bf43395de7043d1be8de471b04b59975d3a7874c649199f2271539e422ac88fb7ae0faf701fe8b796556ee8805712e0dec615d29a9b2a5864167203f83061c5aa46a75ad8ef01207890fb58c7c0e5c0be11e1143fdf3509ec27bcf01d3c4c7bedfa40cd8a24de945684405d2a4775426f4c7d0aeaefdf0cabdbedb6a865d86e4a2b93d3efe44d877fe937019f3fc9201b554dee914454b69fef120ac7c4e179ef7a81ddb27b46468ac5273f624a27049abc19ac38a1bf121769d86e2a92976f87ae814637b691ff772062b48b9d4f7ffc33ba7db19993ab7e0623c4743117099fd46a5c26faa7468326acc9b01ae13126f469da78e8e74cd383a4ae65e61e40c94df139f9b7d68e66593a08d9396056e777f7375ab6a9ed5c39bea2c52c6961d70ff29ab83b94bb0b6a4306b7eabc395b2b7d3685f91abab85310199d00341c4af3974df19820a0514bb95cb3af7b5f6090a594da4f9fda51020e3e113d84b223a7381fd3a3ac9e01ad479c50b8d2def59882b1334e0873c6b6c865fa32ffb87722776d0f2036956e5291e67f5271c8cf0b1160f37f9e4a44750137edffe59102cba0c4c97aeb8acac871385baa46c3edeef35551cdd63da2039e8d8d92857196a1105cae2c38c37095ac91686ac33cae136240545f10756ecb5191f1c8f6109d3c7f422017b1b97e9de21fb957da85ff5cd110d2bdee6515ecbe9e260f2f1809cfaf4803f8cf4f93cbf117214d68302b2b840bac1dcf93452a527e26561b38ede549067d9291c7446f0bd491cea95ac24018c36500dc226ab93cb77b2b56dcb0f41fe3e6a3b877d3414af88f1ebdd0ab3e8c47f3203bd1cf6a1da6584dc71654942583051d205e683573bf8a6ad4e2ec9c1bfe68ed43cf0f544b8ac61847898d0547f3d11c059ec8359e48bd0d13de7f8cf512093a799aabe0558916e0171c0e7766e950f49f17db3fcdc9f7d2c0a3a2e3e0e0a4fe84d7b187b98e74a82534be2dbb7d792f612cc2e261c9d502d4f5bd14acfb4c8e38e39e5e4c54f740d90e6841e75124a2e78f5fa5cdf0d0bae81266eb2a118774ce51a890a8aae49bd1ca008139848c1903782a3c2c21e84d13cad4227be7e9c30be6b96b3a1caab9bcefdfac71bcc23d1c47b4a8dedd1b75d6186ca863faa0103e0fce68338006a8d7482f2c9c3fbd0c4760481782edd25d5c7cd01ace98cbcdef8bfb77f0afdeae5e861d9c7785ffc9afa22b0973f6e0b9a4af8e4ccb803aaf0b7c9827d739ebf3cbabf1de37d439fca94e39535b03748352a2b40a3bcdedecd7bef2d84f3c49f1295dd116dae6ab29dacae5643d0839914078adb40c4139efcff019e97dde067c84e44adb03b383519d8585f923094646871bcd41dfefcb82a228e28a485bfcd5bb4b173582bb1b8224a6352f44cba76909a91979a2dad0c3ec2b0460dcbaefb54bebde07aff48c72ff98191ac903542b5ebeb8f3d68b516257a57cc9cab9b36ebfaa6be57f2a1421867b7c65fda2876ef56a0341ecc51cd2b38b120539d0a512867354ecea841151c9bcadb088edd7e12ed7a4013d6ffcac715c4c07b5a8fc0275654c8062d2919b1d8257ed8f11fc47de8ab1a2a823a2ce5df4cc7e889a4dfbf29295d7534912cc764feca3fb6907944e8deb0aa29cd5161f1307750bd72ecb5f0397d4ee2270a564aaff3cd0de5a06c1d49b5d5ecd06e6fbaa35030b965600a8950cd238115e5a4d38268da90849da5e718066da6ba1c620addad083ea228ecf14201435b10cd1216b5d81d305680fb33ad80c478bf5941dd0878bb95aabbf8618208063f2cf70dac76ad229d38db058eecfbee854f3104ab020d3a93dac7a5f1ceb74714fbab38e1988dd929fbc88637cbf17e0cbb94c0525d9c8baf4e3607c5dacea93116703611231e0f60a8a8e24ed5e7ffd71f9dfa3724d555a6c88a9ab2e59de85c98900259b9978289ef610cc4a88c8674c959d82d6ed910939cab836be36225f6a60bf15119dab5ca30f23135e3af8d1f35951dc45b720240211dfdc7dba884960a81c77672b8962dd348a48301d666cbaef60306022efecaf8db98ddf7112e35d97b58826b3a9faeb50fbb037e1d85373c169d7e55ffec694fb15855050b73b14684a15590036d3f86d7431831e5ce2229ee3901343adbd1df7926d8450b3f3f2b4d05f0235c594f2ecec3733cc2cc19de29f61f4b1e8b12f4f1194a3c9d2726ba59196cfa943dcef8333962c5ecb633dd15cdb70a4d1398f7477d47bb241d3fc4eddf33b551d93615dec0995d74fc564d4542f66720d9be6c0d57a03f40e7489e3f878bd8c1659af97e76764223069d72be0a5a2656432dc0db5ba382f07f37b6e1c19fe3beb3491a7c0233aff23e87b3d134a2817d77b01b69696684b247ce344230d89f5400dfce33fb7817ef7f8460d1a79c36fe0325fe0aaf094b08039fe550de2884db100e8f66c433e811936852bf4aa55a53b4347e6428d450e3421664038b9c3895b67ce294aa2705bf253102b875e1ccf0b0e02c4cc78c8570d7f53c7038e8f50148b1823b86608e2ae80fad9b07a9405405bebf395814406053e1ff730d788815af0fa09ae83140aa33e1332c53e71a02d2dfe7e5247b741937c700ff3c839f178d7a29e27b1ad88facdc8916bae7ac70e783f20e3042a163b4194d4ae1c99389ce1289619c349c1dc62679a2ea998903553052af60452d9947f248bb9f92e7ff703ee6471327a4f0fd3acc87341f3c6f6df18f2231ecf2592354f7e9e267b090de20690db83f5e7489676c2e8965adf50ac95a58e6e105f04c0814633b5133b977f296facf4795d17ccce9bd8e4d01957ebcba12d2a7a61e0849644410648"}, {0xf0, 0x110, 0x9, "277bb71c7d71e3ae5d79ad05c85df9a453fc2da2ef89a632e9428d0cfc962ec4c76eb3f863b07f3cc419d1b098d71bc50b18af62d72e3e002babe6a4cd631c5979ff89ce16368648efec0f8ffed3cc45b7a65e481f3fa774259a73afd6661424b51b539f060be6af95ce340bac01607bed8299f06ee33f5c01652b5816d157d7d8243336a2ce82eacb313a2abc8d1c344808f831fd52db6d25d738c023621e3cd25180662a9dffb986786539ece4bb220b228abbaf971159573d04fbb9f51eeaf609a4ad049889a4f3a2dc0bde78035bd27a6e3aa523713800447c0cf39140c9"}, {0x1010, 0x5cdae2ec3a7af61a, 0x9, "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"}, {0x18, 0x114, 0x5a24, "6c677d7fa7bb1667"}, {0x40, 0x3a, 0x9, "ca3ac412f0b02c21ea241a79d430451dbb9bef9bca132b6fb1fdec1fc1aa5f38a049b59a2d67b707cb34793b9408a1"}, {0x60, 0x111, 0x4, "1b23a06b15bcf9f3d587c233c656616354989f703d6c7c447a9aab306403c395617f9d2d7fec1104d275cd0ac7cb1cea1b0401610ae5de5a733c0b319306d75774c97f6713b36233d21d9850"}], 0x2250}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="12000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e001400400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000680), 0x1006, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r4, &(0x7f00000014c0), &(0x7f0000000100)=""/31}, 0x20) 3.522112624s ago: executing program 0 (id=2614): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000c000000a1000000b200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040000) 3.471824825s ago: executing program 1 (id=2615): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, 0x0}, 0x40844) socket$kcm(0xa, 0x2, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, 0x0}, 0x40844) (async) 3.26510698s ago: executing program 0 (id=2616): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda9, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000de40b2e127c183038316000000000000000081692d96d22422"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000140)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r5}, 0x4) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r6, 0x5460, 0x20000000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc09b6f2609", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xa4}, {0x6}]}) 3.26487482s ago: executing program 1 (id=2617): r0 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)="c9", 0x1}], 0x1}, 0x20000800) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000040000000400000004000005030000000f00000001000000b60300000600000002000000080000000200000001000000ff0700001000000003e8ffff010000000f00fdffffff001202000000010000000000000800000000000000000400000d000000000800000000000000060000000000000001000000050000001000000003000000005f6100"], &(0x7f0000000bc0)=""/185, 0x9c, 0xb9, 0x4, 0x803}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='freezer.state\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, [@alu={0x0, 0x1, 0x5, 0xb, 0xa, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @generic={0x81, 0xe, 0x6, 0x4, 0xd}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x9a, &(0x7f0000000180)=""/154, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x1, 0x2}, 0x10, 0x1ab1c, 0xffffffffffffffff, 0x3, &(0x7f00000009c0)=[r1, r1, r1, r1, r1, r1, r1, r1, r3, r1, r4, r1, r4, r3, r4, r4], &(0x7f0000000380)=[{0x4, 0x1, 0x1}, {0x4, 0x1, 0x5, 0xa}, {0x2, 0x2}], 0x10, 0xc}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x1, 0xb, 0x2, 0x1000, 0x37}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x1, 0x8, 0x5, 0x40, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x6, 0x2, 0x8, 0xffffffffffffffc0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x3, 0x9, 0x3, 0x100, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x3, 0x75, &(0x7f00000006c0)=""/117, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000780)=[{0x4, 0x4, 0x2, 0x1}, {0x0, 0x4, 0x1, 0xa}, {0x5, 0x2, 0x8, 0x5}, {0x4, 0x5, 0xd, 0x5}, {0x1, 0x2, 0x9, 0x1}, {0x0, 0x5, 0x1, 0xc}, {0x0, 0x1, 0xe, 0x9}], 0x10, 0x7ff}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b40)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x94) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000340)={'pimreg\x00', 0x200}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.101025144s ago: executing program 1 (id=2618): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcb7}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x2, 0x0, 0x6}, {0x10000002, 0x3, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) recvmsg$kcm(r1, &(0x7f0000000e80)={&(0x7f0000000840)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x10060) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200000009000000080000000100000000000000", @ANYRES32, @ANYBLOB="000000000000001400"/21, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x22) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_ro(r4, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r10, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r11, r9, 0x4}, 0x5) 3.071329204s ago: executing program 5 (id=2619): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000140)="78c19e36baeb9d839414d9528a48fd501318c0c2246bd936b68f3c2400341a905157f2478cfa35", &(0x7f00000001c0)=""/33}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b700000000008510000002000000850000002b00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x7602, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112f", @ANYRESOCT], 0xee8a) 2.86399014s ago: executing program 0 (id=2620): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) (async) close(r1) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu>=0||!') (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e1406020000", 0x1e}], 0x1}, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x7b, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7, 0xdfc6, 0xa3, 0x40007, r2, 0x1ff, '\x00', r3, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x3}, 0x50) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x8901, &(0x7f0000000040)) (async, rerun: 32) sendmsg$inet(r10, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.86293552s ago: executing program 1 (id=2621): r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000001"], 0x50) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES16=r1, @ANYBLOB="522b9beacde48b634cbc51ccd059e761f58baf3bf78a9baca1824423aac3d07913e164435e927f11cccf5726e36cc64aebec3c495ca4f609f73896e0ba9c178d1e3cac61e1edd124d317fc2ad9a59d0c1c923dcc5d7bfe1fe3ccb3b6dbe86d2c9ad7448619d4fb0ecc1679a1a6b624f4c7b04002065d3506b385b5ee5f3baf5cc2908ff3eb93bfec1e73e0df83b36575c497628523221cecb244349c7dab5a41fe3ea34cb83fc01581736d58062ac1e371661fdf", @ANYRESOCT=r0, @ANYRESOCT=r2, @ANYRES8], 0x50) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000010340)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) (async, rerun: 32) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r5}, 0x4) (async) close(0x3) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002200)={{r6}, &(0x7f0000000940), &(0x7f00000021c0)=r6}, 0x20) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r8 = gettid() (async, rerun: 64) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x200000000009, 0xfffffffd, 0x1, 0x2, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r8, r9, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000084000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r11}, 0x4) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180200006003000000000000090000008500000041000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000e106040000f0ffffffb7020000080000a9b5622d9c40a50ce220653f1bf078c52de493aed6f4d1ebfe090018239135360000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x0, 0xfefc, 0x0, &(0x7f00000003c0)="04dde1152379be503e95606624f06a37", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 32) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (rerun: 32) ioctl$TUNSETOFFLOAD(r13, 0x400454d0, 0x10) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) 115.503547ms ago: executing program 5 (id=2622): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) r2 = socket$kcm(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r4, 0x4) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x850) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x2, &(0x7f0000000200), 0x4) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)}, 0x0) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0x0, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) (async) r8 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x80044944, 0x0) 74.222598ms ago: executing program 0 (id=2623): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000c00000000050000b200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040000) 0s ago: executing program 1 (id=2624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8c00, 0x0) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu>=0||!') ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x9, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x18, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f848310000005e1406020000", 0x1e}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x400200, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'dvmrp0\x00', @random='\x00\a\x00'}) kernel console output (not intermixed with test programs): 82'. [ 329.987077][T10034] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.029547][T10040] syz.3.983: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 330.048539][T10040] CPU: 0 PID: 10040 Comm: syz.3.983 Not tainted syzkaller #0 [ 330.055994][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 330.066272][T10040] Call Trace: [ 330.069863][T10040] [ 330.072922][T10040] dump_stack_lvl+0x18c/0x250 [ 330.077668][T10040] ? show_regs_print_info+0x20/0x20 [ 330.082936][T10040] ? load_image+0x420/0x420 [ 330.087509][T10040] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 330.094330][T10040] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 330.100895][T10040] warn_alloc+0x246/0x340 [ 330.105377][T10040] ? stack_trace_save+0xaa/0x100 [ 330.110392][T10040] ? zone_watermark_ok_safe+0x230/0x230 [ 330.116037][T10040] ? kasan_set_track+0x5f/0x70 [ 330.120858][T10040] ? kasan_set_track+0x4e/0x70 [ 330.125681][T10040] ? __kasan_kmalloc+0x8f/0xa0 [ 330.130593][T10040] ? xsk_init_queue+0xad/0x100 [ 330.135412][T10040] ? xsk_setsockopt+0x4c9/0x750 [ 330.140320][T10040] ? do_sock_setsockopt+0x175/0x1a0 [ 330.145582][T10040] ? __x64_sys_setsockopt+0x182/0x200 [ 330.151111][T10040] __vmalloc_node_range+0x129/0x1320 [ 330.156499][T10040] ? free_vm_area+0x50/0x50 [ 330.161074][T10040] vmalloc_user+0x74/0x80 [ 330.165468][T10040] ? xskq_create+0xbf/0x170 [ 330.170209][T10040] xskq_create+0xbf/0x170 [ 330.174663][T10040] xsk_init_queue+0xad/0x100 [ 330.179285][T10040] xsk_setsockopt+0x4c9/0x750 [ 330.183988][T10040] ? xsk_poll+0x670/0x670 [ 330.188340][T10040] ? __fget_files+0x28/0x460 [ 330.192964][T10040] ? aa_sock_opt_perm+0x74/0x100 [ 330.197977][T10040] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 330.203891][T10040] ? security_socket_setsockopt+0x7e/0xa0 [ 330.209640][T10040] ? xsk_poll+0x670/0x670 [ 330.214080][T10040] do_sock_setsockopt+0x175/0x1a0 [ 330.219130][T10040] ? __fdget+0x180/0x210 [ 330.223398][T10040] __x64_sys_setsockopt+0x182/0x200 [ 330.228625][T10040] do_syscall_64+0x55/0xb0 [ 330.233180][T10040] ? clear_bhb_loop+0x40/0x90 [ 330.237938][T10040] ? clear_bhb_loop+0x40/0x90 [ 330.242660][T10040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.248673][T10040] RIP: 0033:0x7fa560b9e159 [ 330.253110][T10040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.272744][T10040] RSP: 002b:00007fa561aec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 330.281181][T10040] RAX: ffffffffffffffda RBX: 00007fa560e26090 RCX: 00007fa560b9e159 [ 330.289214][T10040] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 330.297289][T10040] RBP: 00007fa560c3506b R08: 0000000000000004 R09: 0000000000000000 [ 330.305410][T10040] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 330.313398][T10040] R13: 00007fa560e26128 R14: 00007fa560e26090 R15: 00007ffc75a8ab08 [ 330.321495][T10040] [ 330.370740][T10040] Mem-Info: [ 330.438986][T10040] active_anon:5929 inactive_anon:0 isolated_anon:0 [ 330.438986][T10040] active_file:18509 inactive_file:40047 isolated_file:0 [ 330.438986][T10040] unevictable:768 dirty:75 writeback:0 [ 330.438986][T10040] slab_reclaimable:10758 slab_unreclaimable:93135 [ 330.438986][T10040] mapped:25109 shmem:1373 pagetables:588 [ 330.438986][T10040] sec_pagetables:0 bounce:0 [ 330.438986][T10040] kernel_misc_reclaimable:0 [ 330.438986][T10040] free:1336621 free_pcp:13101 free_cma:0 [ 330.533301][T10040] Node 0 active_anon:23716kB inactive_anon:0kB active_file:74036kB inactive_file:159988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100436kB dirty:300kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12060kB pagetables:2352kB sec_pagetables:0kB all_unreclaimable? no [ 330.567441][T10040] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 330.598746][T10040] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.632911][T10040] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 330.647437][T10040] Node 0 DMA32 free:1442700kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:23680kB inactive_anon:0kB active_file:74036kB inactive_file:159160kB unevictable:1536kB writepending:300kB present:3129332kB managed:2586780kB mlocked:0kB bounce:0kB free_pcp:33292kB local_pcp:18700kB free_cma:0kB [ 330.679293][T10040] lowmem_reserve[]: 0 0 0 0 0 [ 330.688306][T10040] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 330.726984][T10040] lowmem_reserve[]: 0 0 0 0 0 [ 330.754940][T10040] Node 1 Normal free:3888416kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18824kB local_pcp:8768kB free_cma:0kB [ 330.802052][T10040] lowmem_reserve[]: 0 0 0 0 0 [ 330.847676][T10040] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 330.887397][T10040] Node 0 DMA32: 1419*4kB (UME) 1148*8kB (UME) 802*16kB (UME) 645*32kB (UME) 186*64kB (UME) 177*128kB (UME) 72*256kB (UME) 31*512kB (UME) 10*1024kB (UM) 4*2048kB (UM) 319*4096kB (UM) = 1442252kB [ 330.914750][T10040] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 330.933444][T10040] Node 1 Normal: 276*4kB (UME) 64*8kB (UME) 59*16kB (UME) 75*32kB (UME) 19*64kB (UME) 4*128kB (UM) 3*256kB (UME) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3888416kB [ 330.968362][T10040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 330.986678][T10040] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 330.998385][T10040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.013864][T10040] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.026695][T10040] 59929 total pagecache pages [ 331.039776][T10040] 0 pages in swap cache [ 331.044002][T10040] Free swap = 124996kB [ 331.052689][T10040] Total swap = 124996kB [ 331.062297][T10040] 2097051 pages RAM [ 331.066180][T10040] 0 pages HighMem/MovableOnly [ 331.077995][T10040] 416970 pages reserved [ 331.084758][T10040] 0 pages cma reserved [ 333.485905][T10076] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.993'. [ 335.779477][T10111] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 335.866920][T10111] macvlan0: entered promiscuous mode [ 335.877527][T10111] macvlan0: entered allmulticast mode [ 335.912107][T10111] veth1_vlan: entered allmulticast mode [ 335.939769][T10111] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 341.732572][T10148] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 341.765890][T10148] syzkaller1: linktype set to 769 [ 341.882515][T10154] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1016'. [ 341.905961][T10148] netlink: 'syz.1.1014': attribute type 3 has an invalid length. [ 341.938812][T10148] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1014'. [ 341.948558][T10154] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 342.009524][T10151] netlink: 157672 bytes leftover after parsing attributes in process `syz.3.1015'. [ 342.510391][T10163] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 342.526830][T10163] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 342.593282][T10168] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.1020'. [ 342.790813][T10170] netlink: 'syz.4.1021': attribute type 10 has an invalid length. [ 342.800448][T10173] netlink: 4079 bytes leftover after parsing attributes in process `syz.3.1020'. [ 342.802967][T10170] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1021'. [ 342.867060][T10170] caif0: entered promiscuous mode [ 342.886584][T10170] caif0: entered allmulticast mode [ 342.917800][T10170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.332785][T10182] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1023'. [ 343.589658][T10192] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1025'. [ 343.614002][T10192] nbd: must specify a device to reconfigure [ 343.640039][T10192] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1025'. [ 344.035111][T10205] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 344.169036][T10212] netlink: 'syz.3.1030': attribute type 3 has an invalid length. [ 344.183066][T10212] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1030'. [ 345.465541][T10205] team0: Port device wlan1 added [ 346.064872][T10223] Ÿë: port 1(hsr_slave_0) entered blocking state [ 346.078636][T10223] Ÿë: port 1(hsr_slave_0) entered disabled state [ 346.088375][T10223] hsr_slave_0: entered allmulticast mode [ 346.102939][T10223] hsr_slave_0: left allmulticast mode [ 346.435164][T10239] netlink: 'syz.0.1036': attribute type 9 has an invalid length. [ 347.380218][T10257] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 347.567769][T10263] netlink: 'syz.3.1039': attribute type 3 has an invalid length. [ 347.587469][T10263] __nla_validate_parse: 1 callbacks suppressed [ 347.587488][T10263] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1039'. [ 347.631722][T10257] veth1_macvtap (unregistering): left allmulticast mode [ 347.899242][T10249] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 347.916164][T10249] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1039'. [ 347.934888][T10249] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 347.943260][T10249] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.971565][T10249] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 349.232997][T10267] syzkaller0: entered promiscuous mode [ 349.255003][T10267] syzkaller0: entered allmulticast mode [ 350.304018][ T8249] wlan1: Trigger new scan to find an IBSS to join [ 352.070457][T10298] netlink: 'syz.4.1053': attribute type 21 has an invalid length. [ 352.090975][T10298] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.170074][T10298] IPv6: Can't replace route, no match found [ 353.347053][ T3519] wlan1: Trigger new scan to find an IBSS to join [ 354.425317][T10325] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 354.766463][T10346] netlink: 'syz.1.1065': attribute type 21 has an invalid length. [ 354.783602][T10346] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1065'. [ 354.823143][T10346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1065'. [ 354.927069][T10346] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1065'. [ 355.210808][T10354] netlink: 'syz.0.1063': attribute type 11 has an invalid length. [ 355.348153][T10354] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 355.538345][T10350] netlink: 'syz.3.1066': attribute type 17 has an invalid length. [ 355.546615][T10350] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1066'. [ 355.551012][T10354] netlink: 'syz.0.1063': attribute type 1 has an invalid length. [ 355.879700][T10354] netlink: 'syz.0.1063': attribute type 2 has an invalid length. [ 355.963688][T10354] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.1063'. [ 356.401204][T10356] syzkaller0: entered promiscuous mode [ 356.428913][T10356] syzkaller0: entered allmulticast mode [ 357.311205][ T8251] wlan1: Trigger new scan to find an IBSS to join [ 358.389573][ T3519] wlan1: Creating new IBSS network, BSSID 56:95:8a:cb:4e:8d [ 360.231018][T10376] netlink: 'syz.1.1071': attribute type 10 has an invalid length. [ 360.253230][T10376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1071'. [ 360.268354][T10377] netlink: 'syz.1.1071': attribute type 3 has an invalid length. [ 360.291133][T10377] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.1071'. [ 360.304353][T10376] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 360.313897][T10376] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.357605][T10376] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 360.448079][T10389] netdevsim netdevsim4: Direct firmware load for ’ failed with error -2 [ 360.481930][T10389] netdevsim netdevsim4: Falling back to sysfs fallback for: ’ [ 360.748533][T10402] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1077'. [ 361.489020][T10429] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1083'. [ 362.394902][T10447] netlink: 'syz.3.1088': attribute type 10 has an invalid length. [ 362.407000][T10447] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1088'. [ 364.771749][T10512] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1105'. [ 364.894833][T10515] netlink: 'syz.1.1105': attribute type 21 has an invalid length. [ 364.909850][T10515] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 364.918656][T10515] netlink: 15398 bytes leftover after parsing attributes in process `syz.1.1105'. [ 365.047203][T10512] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 365.215639][T10517] netlink: 154464 bytes leftover after parsing attributes in process `syz.0.1107'. [ 366.625791][T10548] netlink: 'syz.1.1113': attribute type 10 has an invalid length. [ 366.670111][T10548] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1113'. [ 366.694856][T10548] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 368.450613][T10558] syz.4.1115[10558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.450994][T10558] syz.4.1115[10558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.712313][T10562] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1116'. [ 368.815523][T10562] hsr_slave_0: left promiscuous mode [ 369.449929][T10572] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 369.469241][T10572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1119'. [ 369.661234][T10572] batman_adv: batadv0: Adding interface: veth0_vlan [ 369.687769][T10572] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.737531][T10572] batman_adv: batadv0: Interface activated: veth0_vlan [ 369.758597][T10570] netlink: 'syz.4.1119': attribute type 10 has an invalid length. [ 369.781329][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1119'. [ 371.562456][T10603] netlink: 60243 bytes leftover after parsing attributes in process `syz.3.1128'. [ 371.625281][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 372.069037][T10615] netlink: 'syz.1.1131': attribute type 10 has an invalid length. [ 372.098902][T10615] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1131'. [ 372.132008][T10615] hsr0: entered promiscuous mode [ 372.150742][T10615] bridge0: port 3(hsr0) entered blocking state [ 372.179498][T10615] bridge0: port 3(hsr0) entered disabled state [ 372.201033][T10615] hsr0: entered allmulticast mode [ 372.220753][T10615] hsr_slave_0: entered allmulticast mode [ 372.248764][T10615] hsr_slave_1: entered allmulticast mode [ 372.262875][T10615] bridge0: port 3(hsr0) entered blocking state [ 372.269444][T10615] bridge0: port 3(hsr0) entered forwarding state [ 372.455597][T10622] netdevsim netdevsim0: Direct firmware load for ’ failed with error -2 [ 372.475761][T10622] netdevsim netdevsim0: Falling back to sysfs fallback for: ’ [ 374.066963][T10634] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.1137'. [ 374.252178][T10636] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1135'. [ 375.983067][ T5788] Bluetooth: hci0: command 0x0406 tx timeout [ 377.653495][T10656] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1144'. [ 378.953112][T10658] syzkaller0: entered promiscuous mode [ 378.961861][T10658] syzkaller0: entered allmulticast mode [ 378.976273][T10678] netlink: 'syz.4.1149': attribute type 10 has an invalid length. [ 379.025079][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.031686][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.579324][T10710] netlink: 192188 bytes leftover after parsing attributes in process `syz.4.1155'. [ 379.596939][T10710] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 382.149641][T10713] netlink: 14546 bytes leftover after parsing attributes in process `syz.4.1156'. [ 382.319822][T10724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1159'. [ 382.471537][T10721] netlink: 'syz.1.1158': attribute type 13 has an invalid length. [ 382.504425][T10721] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1158'. [ 382.536994][T10719] netlink: 'syz.3.1157': attribute type 39 has an invalid length. [ 383.401845][T10752] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1167'. [ 383.549059][T10768] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 383.565377][T10768] netlink: 126576 bytes leftover after parsing attributes in process `syz.0.1169'. [ 383.804411][T10777] netlink: 'syz.4.1171': attribute type 10 has an invalid length. [ 384.242500][T10777] team0: Device nlmon0 is of different type [ 384.307373][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 385.057493][T10812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1181'. [ 385.101369][T10806] sit0: entered allmulticast mode [ 385.206118][T10812] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1181'. [ 385.262884][T10817] sit0: entered promiscuous mode [ 385.387119][T10810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1181'. [ 385.398566][T10811] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1181'. [ 385.439385][T10827] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1184'. [ 385.450861][T10827] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1184'. [ 385.502180][T10827] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1184'. [ 387.480285][T10903] syzkaller0: entered promiscuous mode [ 387.485932][T10903] syzkaller0: entered allmulticast mode [ 387.510006][T10913] syzkaller0: left promiscuous mode [ 387.515413][T10913] syzkaller0: left allmulticast mode [ 389.608487][T10924] __nla_validate_parse: 14 callbacks suppressed [ 389.608539][T10924] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1212'. [ 389.625025][T10921] netlink: 'syz.3.1211': attribute type 27 has an invalid length. [ 389.643208][T10921] netlink: 'syz.3.1211': attribute type 4 has an invalid length. [ 389.666808][T10921] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1211'. [ 389.846172][T10928] netlink: 'syz.4.1214': attribute type 6 has an invalid length. [ 389.865888][T10928] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1214'. [ 389.899060][T10935] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1215'. [ 390.420767][T10928] netlink: 'syz.4.1214': attribute type 6 has an invalid length. [ 390.430175][T10928] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1214'. [ 390.451791][T10928] netlink: 'syz.4.1214': attribute type 6 has an invalid length. [ 390.462474][T10928] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1214'. [ 390.522139][T10936] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1215'. [ 390.572597][T10936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.628507][T10938] @0Ù: renamed from bond_slave_1 (while UP) [ 390.670871][T10935] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 390.709153][T10928] netlink: 'syz.4.1214': attribute type 6 has an invalid length. [ 390.720842][T10928] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1214'. [ 391.356596][T10956] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1219'. [ 391.441815][T10956] netlink: del zone limit has 8 unknown bytes [ 391.640205][T10964] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1221'. [ 391.771263][T10967] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 391.960894][T10970] syzkaller0: entered promiscuous mode [ 391.988831][T10970] syzkaller0: entered allmulticast mode [ 396.198047][T11004] netlink: 'syz.4.1229': attribute type 27 has an invalid length. [ 396.206476][T11004] __nla_validate_parse: 3 callbacks suppressed [ 396.206489][T11004] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1229'. [ 396.277340][T11004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 396.610425][T11008] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1232'. [ 396.853160][T11019] delete_channel: no stack [ 396.873251][T11019] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.899241][T11019] netlink: 'syz.0.1236': attribute type 21 has an invalid length. [ 396.966815][T11019] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.993132][T11019] IPv6: Can't replace route, no match found [ 397.000117][T11022] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1236'. [ 397.057039][T11022] netlink: 'syz.0.1236': attribute type 3 has an invalid length. [ 398.147548][T11037] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1243'. [ 398.685127][T11054] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1246'. [ 398.715290][T11054] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1246'. [ 401.672678][T11073] sit0: entered promiscuous mode [ 402.516333][T11086] delete_channel: no stack [ 402.636261][T11086] netlink: 'syz.4.1255': attribute type 21 has an invalid length. [ 402.683335][T11086] IPv6: Can't replace route, no match found [ 402.732932][T11086] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.1255'. [ 402.814356][T11086] netlink: 'syz.4.1255': attribute type 3 has an invalid length. [ 402.910429][T11093] netlink: 'syz.0.1256': attribute type 10 has an invalid length. [ 402.943145][T11093] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1256'. [ 402.984783][T11093] bridge0: port 3(dummy0) entered disabled state [ 402.991765][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.669298][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.680665][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.689209][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.697578][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.705497][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 405.713250][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.031511][T11144] chnl_net:caif_netlink_parms(): no params data found [ 406.447096][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.454606][T11144] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.481824][T11144] bridge_slave_0: entered allmulticast mode [ 406.498481][T11144] bridge_slave_0: entered promiscuous mode [ 406.519049][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.536544][T11144] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.557978][T11144] bridge_slave_1: entered allmulticast mode [ 406.565975][T11144] bridge_slave_1: entered promiscuous mode [ 406.713295][T11144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.771329][T11162] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1275'. [ 406.790837][T11144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.954591][T11144] team0: Port device team_slave_0 added [ 407.009089][T11144] team0: Port device team_slave_1 added [ 407.178934][T11144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.198882][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.307920][T11144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.346872][T11144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.364085][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.426831][T11144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.457727][T11176] delete_channel: no stack [ 407.462411][T11176] delete_channel: no stack [ 407.509684][T11176] netlink: 'syz.1.1278': attribute type 9 has an invalid length. [ 407.557256][T11176] netlink: 149864 bytes leftover after parsing attributes in process `syz.1.1278'. [ 407.613278][T11144] hsr_slave_0: entered promiscuous mode [ 407.697224][T11144] hsr_slave_1: entered promiscuous mode [ 407.725390][T11144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.734277][T11144] Cannot create hsr debugfs directory [ 407.833885][ T5788] Bluetooth: hci1: command tx timeout [ 408.320010][T11192] netlink: 'syz.0.1283': attribute type 21 has an invalid length. [ 408.965435][T11144] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 409.031944][T11144] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 409.101369][T11144] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 409.185140][T11144] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 409.907728][ T5788] Bluetooth: hci1: command tx timeout [ 410.234024][T11144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.313171][T11144] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.381687][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.389050][ T8256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.449038][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.456352][ T8256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.587402][T11219] sock: sock_timestamping_bind_phc: sock not bind to device [ 410.593647][T11213] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1287'. [ 410.776955][T11213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.044741][T11144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.734621][T11144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.761213][T11247] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 411.795636][T11247] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1294'. [ 411.977117][ T5788] Bluetooth: hci1: command tx timeout [ 412.537611][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1295'. [ 412.765756][T11258] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1296'. [ 412.792338][T11144] veth0_vlan: entered promiscuous mode [ 412.848834][T11144] veth1_vlan: entered promiscuous mode [ 412.965699][T11258] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1296'. [ 413.044539][T11144] veth0_macvtap: entered promiscuous mode [ 413.094565][T11144] veth1_macvtap: entered promiscuous mode [ 413.178207][T11263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1296'. [ 413.230746][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.356839][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.407691][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.477609][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.549796][T11144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.602918][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.696198][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.742936][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.807187][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.856794][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.901735][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.967009][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 414.010187][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.057738][ T5788] Bluetooth: hci1: command tx timeout [ 414.061319][T11144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.150058][T11264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1296'. [ 414.793588][T11144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.826814][T11144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.835788][T11144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.887222][T11144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.963274][T11273] ƒ: renamed from tunl0 (while UP) [ 415.178397][ T8239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.187612][ T8239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.287727][T11281] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1302'. [ 415.318332][ T8256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.336229][T11277] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1303'. [ 415.373924][ T8256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.542382][T11278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.878011][T11291] delete_channel: no stack [ 415.913609][T11291] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.949062][T11291] netlink: 'syz.5.1267': attribute type 21 has an invalid length. [ 415.969863][T11291] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.011071][T11301] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.1267'. [ 416.047092][T11291] IPv6: Can't replace route, no match found [ 416.070604][T11301] netlink: 'syz.5.1267': attribute type 3 has an invalid length. [ 416.679462][T11298] syzkaller0: entered promiscuous mode [ 416.716992][T11298] syzkaller0: entered allmulticast mode [ 416.734306][T11302] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1308'. [ 416.762391][T11302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.807181][T11317] netlink: 'syz.5.1309': attribute type 16 has an invalid length. [ 416.841053][T11317] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1309'. [ 416.860297][T11317] veth1_macvtap: entered allmulticast mode [ 417.396865][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 1029 jiffies old. [ 421.358130][T11329] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1312'. [ 421.368929][T11339] bridge0: port 3(dummy0) entered disabled state [ 421.418256][T11339] bridge_slave_1: left allmulticast mode [ 421.424253][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.448785][T11339] bridge_slave_0: left allmulticast mode [ 421.454517][T11339] bridge_slave_0: left promiscuous mode [ 421.461042][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.550326][T11343] netlink: 4735 bytes leftover after parsing attributes in process `syz.5.1316'. [ 421.682708][T11347] delete_channel: no stack [ 421.685448][ T8239] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.719656][T11347] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.438037][T11363] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1322'. [ 422.511276][ T8239] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.649688][ T8239] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.667390][T11371] netlink: 'syz.0.1324': attribute type 3 has an invalid length. [ 422.688148][T11371] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1324'. [ 423.204109][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.260762][T11392] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1329'. [ 423.586261][T11406] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 424.302312][T11406] team0 (unregistering): Port device team_slave_0 removed [ 424.344607][T11406] team0 (unregistering): Port device team_slave_1 removed [ 424.406545][T11406] team0 (unregistering): Port device wlan1 removed [ 424.454820][T11402] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 424.562573][T11419] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1336'. [ 424.611838][T11419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.627956][T11419] bond0 (unregistering): (slave 5@0Ù): Releasing backup interface [ 424.643212][T11419] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 424.659483][T11419] veth1_vlan: left allmulticast mode [ 424.674444][T11419] bond0 (unregistering): Released all slaves [ 424.699622][T11437] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1337'. [ 424.882240][T11443] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1339'. [ 425.506642][T11458] netlink: 'syz.4.1343': attribute type 21 has an invalid length. [ 425.534819][T11458] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1343'. [ 426.156412][T11468] netlink: 'syz.4.1345': attribute type 16 has an invalid length. [ 426.220699][T11468] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1345'. [ 428.221624][T11506] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.057436][ T8239] hsr_slave_0: left promiscuous mode [ 429.237544][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.274503][ T8239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.309156][ T8239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.327056][ T8239] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 429.346968][ T8239] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 429.391543][ T8239] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 429.402810][ T8239] batman_adv: batadv0: Removing interface: virt_wifi0 [ 429.540878][ T8239] bridge_slave_0: left promiscuous mode [ 429.547153][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.892465][ T8239] veth1_macvtap: left promiscuous mode [ 429.920911][ T8239] veth0_macvtap: left promiscuous mode [ 429.958523][ T8239] veth1_vlan: left promiscuous mode [ 429.963988][ T8239] veth0_vlan: left promiscuous mode [ 431.861005][ T8239] team0 (unregistering): Port device team_slave_1 removed [ 431.946593][ T8239] team0 (unregistering): Port device team_slave_0 removed [ 432.028744][ T8239] bond0 (unregistering): (slave 5@0Ù): Releasing backup interface [ 432.200488][ T8239] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 432.853130][ T8239] team0 (unregistering): Port device bond0 removed [ 432.907412][ T8239] bond0 (unregistering): Released all slaves [ 433.051575][T11520] netlink: 'syz.5.1354': attribute type 19 has an invalid length. [ 433.066225][T11520] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1354'. [ 433.249956][T11529] netlink: 'syz.4.1355': attribute type 19 has an invalid length. [ 433.269019][T11529] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.1355'. [ 433.306180][T11507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1350'. [ 434.264925][T11550] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 434.730120][T11564] delete_channel: no stack [ 435.872523][T11580] netlink: 'syz.4.1367': attribute type 13 has an invalid length. [ 435.887600][T11580] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1367'. [ 436.354377][T11592] netlink: 'syz.0.1369': attribute type 2 has an invalid length. [ 436.399927][T11592] netlink: 'syz.0.1369': attribute type 3 has an invalid length. [ 436.446924][T11592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1369'. [ 436.893991][T11607] sit0: left promiscuous mode [ 437.383565][T11616] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1374'. [ 438.323677][T11618] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1374'. [ 438.359675][T11616] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 438.397715][T11616] CPU: 0 PID: 11616 Comm: syz.0.1374 Not tainted syzkaller #0 [ 438.405277][T11616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 438.415381][T11616] Call Trace: [ 438.418785][T11616] [ 438.421785][T11616] dump_stack_lvl+0x18c/0x250 [ 438.426707][T11616] ? show_regs_print_info+0x20/0x20 [ 438.432110][T11616] ? load_image+0x420/0x420 [ 438.436807][T11616] sysfs_warn_dup+0x8e/0xa0 [ 438.441484][T11616] sysfs_do_create_link_sd+0xc0/0x110 [ 438.447180][T11616] device_add_class_symlinks+0x1cf/0x240 [ 438.452919][T11616] device_add+0x4f9/0xc40 [ 438.457301][T11616] wiphy_register+0x1d99/0x2ac0 [ 438.462553][T11616] ? cfg80211_event_work+0x40/0x40 [ 438.467703][T11616] ? minstrel_ht_alloc+0x88a/0x990 [ 438.473039][T11616] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 438.479304][T11616] ieee80211_register_hw+0x2f3d/0x3cb0 [ 438.485122][T11616] ? ieee80211_register_hw+0xf51/0x3cb0 [ 438.490818][T11616] ? ieee80211_tasklet_handler+0x20/0x20 [ 438.496678][T11616] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 438.502841][T11616] ? __debug_object_init+0xec/0x450 [ 438.508149][T11616] ? __asan_memset+0x22/0x40 [ 438.512919][T11616] ? __hrtimer_init+0x189/0x270 [ 438.517958][T11616] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 438.523811][T11616] ? mac80211_hwsim_free+0x220/0x220 [ 438.529162][T11616] ? rcu_is_watching+0x15/0xb0 [ 438.533986][T11616] ? kstrndup+0xbd/0x140 [ 438.538450][T11616] hwsim_new_radio_nl+0xdad/0x1a70 [ 438.543801][T11616] ? __nla_validate+0x50/0x50 [ 438.548730][T11616] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 438.555231][T11616] ? __nla_parse+0x40/0x50 [ 438.559721][T11616] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 438.566379][T11616] genl_family_rcv_msg_doit+0x21a/0x310 [ 438.571974][T11616] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 438.578077][T11616] ? bpf_lsm_capable+0x9/0x10 [ 438.582815][T11616] ? security_capable+0x89/0xb0 [ 438.587743][T11616] genl_rcv_msg+0x611/0x7a0 [ 438.592383][T11616] ? genl_bind+0x360/0x360 [ 438.596947][T11616] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 438.603489][T11616] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 438.610230][T11616] netlink_rcv_skb+0x235/0x4c0 [ 438.615042][T11616] ? genl_bind+0x360/0x360 [ 438.619862][T11616] ? netlink_ack+0x1160/0x1160 [ 438.624696][T11616] ? __lock_acquire+0x7eb0/0x7eb0 [ 438.629779][T11616] ? down_read+0x1ac/0x2e0 [ 438.634242][T11616] genl_rcv+0x28/0x40 [ 438.638368][T11616] netlink_unicast+0x7b1/0x930 [ 438.643177][T11616] netlink_sendmsg+0x8d0/0xbf0 [ 438.648011][T11616] ? netlink_getsockopt+0x590/0x590 [ 438.653282][T11616] ? apparmor_socket_sendmsg+0x8e/0x330 [ 438.658923][T11616] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 438.664343][T11616] ? security_socket_sendmsg+0x80/0xa0 [ 438.669835][T11616] ? netlink_getsockopt+0x590/0x590 [ 438.675085][T11616] ____sys_sendmsg+0x61b/0x980 [ 438.680013][T11616] ? __asan_memset+0x22/0x40 [ 438.684825][T11616] ? __sys_sendmsg_sock+0x30/0x30 [ 438.689904][T11616] ? __import_iovec+0x5f2/0x850 [ 438.694823][T11616] ? import_iovec+0x73/0xa0 [ 438.699371][T11616] ___sys_sendmsg+0x2a6/0x360 [ 438.704182][T11616] ? __sys_sendmsg+0x2b0/0x2b0 [ 438.709039][T11616] __se_sys_sendmsg+0x1d0/0x2c0 [ 438.713926][T11616] ? __x64_sys_sendmsg+0x80/0x80 [ 438.718932][T11616] ? lockdep_hardirqs_on+0x98/0x150 [ 438.724343][T11616] do_syscall_64+0x55/0xb0 [ 438.728880][T11616] ? clear_bhb_loop+0x40/0x90 [ 438.733744][T11616] ? clear_bhb_loop+0x40/0x90 [ 438.738632][T11616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.744601][T11616] RIP: 0033:0x7fb24e39e159 [ 438.749086][T11616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.768795][T11616] RSP: 002b:00007fb24f240028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.777241][T11616] RAX: ffffffffffffffda RBX: 00007fb24e625fa0 RCX: 00007fb24e39e159 [ 438.785247][T11616] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 438.793244][T11616] RBP: 00007fb24e43506b R08: 0000000000000000 R09: 0000000000000000 [ 438.801334][T11616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.809591][T11616] R13: 00007fb24e626038 R14: 00007fb24e625fa0 R15: 00007ffeda2eb188 [ 438.817627][T11616] [ 438.905298][T11634] delete_channel: no stack [ 438.933570][T11634] delete_channel: no stack [ 440.463190][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.471975][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.722233][T11696] netlink: 'syz.5.1394': attribute type 29 has an invalid length. [ 440.795220][T11696] netlink: 'syz.5.1394': attribute type 29 has an invalid length. [ 440.912317][T11688] netlink: 'syz.5.1394': attribute type 29 has an invalid length. [ 445.058231][T11765] delete_channel: no stack [ 448.695558][T11833] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 448.723975][T11833] netlink: 'syz.1.1416': attribute type 10 has an invalid length. [ 448.745263][T11837] delete_channel: no stack [ 450.269005][T11871] delete_channel: no stack [ 450.532060][T11880] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 450.557143][T11880] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1432'. [ 450.591250][T11880] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1432'. [ 450.713273][T11886] netlink: 'syz.4.1434': attribute type 29 has an invalid length. [ 450.739156][T11886] netlink: 'syz.4.1434': attribute type 29 has an invalid length. [ 450.765199][T11882] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1433'. [ 450.788989][T11882] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 453.066956][T11920] syzkaller0: entered promiscuous mode [ 453.089108][T11920] syzkaller0: entered allmulticast mode [ 453.217730][T11930] delete_channel: no stack [ 455.801659][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.138661][T11957] netlink: 'syz.5.1448': attribute type 11 has an invalid length. [ 456.168668][T11957] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1448'. [ 456.703228][T11983] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.780678][T11982] delete_channel: no stack [ 460.561445][T12028] netlink: 'syz.1.1464': attribute type 21 has an invalid length. [ 460.930553][T12054] netlink: 'syz.1.1472': attribute type 29 has an invalid length. [ 460.949978][T12054] netlink: 'syz.1.1472': attribute type 29 has an invalid length. [ 461.006125][T12057] netlink: 'syz.1.1472': attribute type 29 has an invalid length. [ 461.051174][T12054] netlink: 'syz.1.1472': attribute type 29 has an invalid length. [ 461.060369][T12045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1469'. [ 461.070495][T12054] netlink: 'syz.1.1472': attribute type 29 has an invalid length. [ 462.504207][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.588950][T12155] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1491'. [ 464.619422][T12155] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 464.879401][T12170] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1495'. [ 464.897362][T12165] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.1494'. [ 464.942011][T12170] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 467.078328][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.089899][T12190] À: port 1(vlan0) entered blocking state [ 467.109846][T12190] À: port 1(vlan0) entered disabled state [ 467.116006][T12190] vlan0: entered allmulticast mode [ 467.126878][T12190] veth0_vlan: entered allmulticast mode [ 467.158873][T12190] vlan0: entered promiscuous mode [ 467.455543][ T5788] Bluetooth: hci0: unexpected event 0x3c length: 151 > 7 [ 467.455799][T12212] netlink: 'syz.1.1503': attribute type 3 has an invalid length. [ 467.501770][T12212] netlink: 'syz.1.1503': attribute type 16 has an invalid length. [ 467.566723][T12212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1503'. [ 468.164382][T12222] netlink: 'syz.0.1506': attribute type 2 has an invalid length. [ 468.203738][T12222] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1506'. [ 469.240584][T12267] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1516'. [ 469.360909][T12272] netlink: 'syz.4.1517': attribute type 39 has an invalid length. [ 469.462238][T12272] hsr_slave_1 (unregistering): left promiscuous mode [ 469.577016][T12275] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.895462][T12286] netlink: 'syz.4.1521': attribute type 16 has an invalid length. [ 469.940878][T12286] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1521'. [ 470.127362][T12286] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 474.610889][T12381] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1536'. [ 474.623405][T12381] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 475.155642][T12385] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.452730][T12397] netlink: 'syz.4.1542': attribute type 29 has an invalid length. [ 475.461009][T12397] netlink: 'syz.4.1542': attribute type 29 has an invalid length. [ 475.514689][T12396] netlink: 'syz.4.1542': attribute type 29 has an invalid length. [ 476.172571][T12405] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1544'. [ 477.487505][T12420] netlink: 'syz.1.1547': attribute type 11 has an invalid length. [ 477.495783][T12420] netlink: 212832 bytes leftover after parsing attributes in process `syz.1.1547'. [ 477.570934][T12422] netlink: 'syz.4.1548': attribute type 4 has an invalid length. [ 477.581512][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1548'. [ 477.591451][T12424] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.085123][T12441] netlink: 'syz.5.1557': attribute type 3 has an invalid length. [ 478.146068][T12437] netlink: 'syz.4.1555': attribute type 39 has an invalid length. [ 478.798487][T12442] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1555'. [ 478.992379][T12457] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 479.415484][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.537992][T12474] bridge_slave_1 (unregistering): left allmulticast mode [ 479.589639][T12474] bridge_slave_1 (unregistering): left promiscuous mode [ 479.616959][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.938925][T12498] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 481.034644][T12498] team0: Port device geneve1 added [ 481.720859][T12504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1574'. [ 481.951461][ T5788] Bluetooth: hci4: Malformed LE Event: 0x0b [ 481.983101][T12516] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.1578'. [ 483.010525][T12543] pim6reg1: entered promiscuous mode [ 483.015921][T12543] pim6reg1: entered allmulticast mode [ 483.843748][T12566] netlink: 'syz.1.1592': attribute type 3 has an invalid length. [ 483.860815][T12566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1592'. [ 483.905837][T12570] netlink: 'syz.4.1593': attribute type 10 has an invalid length. [ 485.193659][T12611] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 485.218990][T12611] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1602'. [ 485.235338][T12611] netlink: 'syz.0.1602': attribute type 1 has an invalid length. [ 485.256772][T12614] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1602'. [ 486.049497][T12609] netlink: 'syz.4.1603': attribute type 10 has an invalid length. [ 488.773282][T12685] netlink: 'syz.0.1623': attribute type 21 has an invalid length. [ 490.997186][T12765] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1639'. [ 491.148248][T12772] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.238056][T12774] netlink: 'syz.0.1641': attribute type 46 has an invalid length. [ 491.254703][T12774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1641'. [ 491.368189][T12778] netlink: 'syz.5.1644': attribute type 21 has an invalid length. [ 491.388104][T12778] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1644'. [ 491.590642][T12778] veth0_virt_wifi: entered allmulticast mode [ 494.761340][T12869] netlink: 207684 bytes leftover after parsing attributes in process `syz.4.1668'. [ 494.781568][T12869] netlink: 'syz.4.1668': attribute type 1 has an invalid length. [ 494.791500][T12869] netlink: 'syz.4.1668': attribute type 2 has an invalid length. [ 495.332788][T12882] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1674'. [ 495.425549][T12882] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 495.511594][T12890] syzkaller0: entered promiscuous mode [ 495.549333][T12890] syzkaller0: entered allmulticast mode [ 495.865022][T12902] -: renamed from syzkaller0 [ 497.728579][T12942] netlink: 'syz.1.1691': attribute type 2 has an invalid length. [ 497.747028][T12942] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1691'. [ 498.273734][T12964] netlink: 'syz.0.1693': attribute type 46 has an invalid length. [ 498.317353][T12964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 498.324651][T12964] IPv6: NLM_F_CREATE should be set when creating new route [ 498.332062][T12964] IPv6: NLM_F_CREATE should be set when creating new route [ 498.339386][T12964] IPv6: NLM_F_CREATE should be set when creating new route [ 498.428504][T12966] netlink: 'syz.0.1693': attribute type 9 has an invalid length. [ 498.468686][T12966] netlink: 175164 bytes leftover after parsing attributes in process `syz.0.1693'. [ 501.277699][T12950] netlink: 'syz.0.1693': attribute type 9 has an invalid length. [ 501.285519][T12950] netlink: 145676 bytes leftover after parsing attributes in process `syz.0.1693'. [ 501.788789][T12998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1707'. [ 501.904466][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.912628][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.610256][T13013] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1711'. [ 502.649027][T13012] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1711'. [ 506.244248][T13046] netlink: 'syz.4.1718': attribute type 21 has an invalid length. [ 507.381238][T13059] netlink: 'syz.1.1725': attribute type 3 has an invalid length. [ 507.401455][T13059] netlink: 173820 bytes leftover after parsing attributes in process `syz.1.1725'. [ 507.635979][T13068] delete_channel: no stack [ 507.940169][T13096] netlink: 142016 bytes leftover after parsing attributes in process `syz.0.1734'. [ 508.295080][T13112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.305207][T13112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.315884][T13112] batman_adv: batadv0: Interface deactivated: €Â0 [ 508.324877][T13112] batman_adv: batadv0: Removing interface: €Â0 [ 508.332393][T13112] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 508.341478][T13112] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 509.181913][T13148] netlink: 'syz.1.1748': attribute type 33 has an invalid length. [ 509.191496][T13148] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1748'. [ 509.529399][T13162] netlink: 'syz.5.1753': attribute type 10 has an invalid length. [ 509.598987][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.642186][T13162] bridge_slave_1: left allmulticast mode [ 509.653006][T13162] bridge_slave_1: left promiscuous mode [ 509.668715][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.746318][T13162] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 509.772859][T13165] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1753'. [ 509.870238][T13170] syzkaller0: entered promiscuous mode [ 509.907898][T13170] syzkaller0: entered allmulticast mode [ 513.175550][T13194] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1763'. [ 513.483730][T13205] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1766'. [ 513.715620][T13212] netlink: 'syz.1.1768': attribute type 8 has an invalid length. [ 513.725359][T13214] netlink: 'syz.5.1769': attribute type 1 has an invalid length. [ 513.734481][T13214] netlink: 157116 bytes leftover after parsing attributes in process `syz.5.1769'. [ 513.747536][T13212] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1768'. [ 514.362973][T13225] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.1773'. [ 514.942935][T13225] netlink: 21068 bytes leftover after parsing attributes in process `syz.5.1773'. [ 514.958498][T13225] tipc: Started in network mode [ 514.966786][T13225] tipc: Node identity b, cluster identity 73 [ 514.984334][T13225] tipc: Node number set to 11 [ 515.380289][T13286] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1776'. [ 516.828728][T13312] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1785'. [ 516.857116][T13312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.131643][T13315] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1788'. [ 517.157790][T13315] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 517.166130][T13315] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 517.167266][T13319] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 517.186953][T13319] syzkaller1: linktype set to 6 [ 517.227173][T13316] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1788'. [ 517.248189][T13316] : renamed from caif0 [ 517.306053][T13316] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 517.387717][T13315] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 522.667398][T13366] __nla_validate_parse: 1 callbacks suppressed [ 522.667419][T13366] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1800'. [ 523.026350][T13379] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1803'. [ 523.263212][T13379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.339192][T13379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.460192][T13379] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 523.494524][T13379] bond0 (unregistering): Released all slaves [ 524.070741][T13395] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 524.101337][T13395] netlink: 'syz.5.1808': attribute type 10 has an invalid length. [ 524.194724][T13395] macvlan0: entered promiscuous mode [ 524.214397][T13395] macvlan0: entered allmulticast mode [ 524.575882][T13406] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1811'. [ 525.109849][T13409] netlink: 'syz.4.1811': attribute type 3 has an invalid length. [ 525.242559][T13409] netlink: 'syz.4.1811': attribute type 2 has an invalid length. [ 525.315732][T13409] netlink: 190092 bytes leftover after parsing attributes in process `syz.4.1811'. [ 526.177430][T13436] sit0: entered allmulticast mode [ 526.490869][T13436] sit0: entered promiscuous mode [ 526.958756][T13451] syzkaller0: entered promiscuous mode [ 526.989461][T13451] syzkaller0: entered allmulticast mode [ 529.266323][T13484] netlink: 'syz.4.1831': attribute type 3 has an invalid length. [ 529.289182][T13484] netlink: 'syz.4.1831': attribute type 8 has an invalid length. [ 529.326034][T13484] netlink: 'syz.4.1831': attribute type 6 has an invalid length. [ 529.365332][T13484] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.1831'. [ 529.551134][T13490] netlink: 'syz.1.1830': attribute type 1 has an invalid length. [ 529.573167][T13490] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1830'. [ 529.586974][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 531.526508][T13523] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1842'. [ 531.548393][T13523] hsr_slave_0: left promiscuous mode [ 531.575276][T13523] hsr_slave_1: left promiscuous mode [ 532.153751][T13535] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 532.166901][T13535] syzkaller0: entered promiscuous mode [ 532.179238][T13535] syzkaller0: entered allmulticast mode [ 532.368165][T13533] delete_channel: no stack [ 533.113629][T13566] netlink: 'syz.1.1852': attribute type 39 has an invalid length. [ 533.745009][T13593] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.1855'. [ 533.951061][T13601] netlink: 'syz.1.1861': attribute type 3 has an invalid length. [ 533.979803][T13601] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1861'. [ 534.027468][T13605] netlink: 'syz.1.1861': attribute type 3 has an invalid length. [ 534.046066][T13605] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1861'. [ 534.089934][T13609] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1863'. [ 534.193333][T13611] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1865'. [ 534.885791][T13637] syzkaller0: entered promiscuous mode [ 534.900767][T13637] syzkaller0: entered allmulticast mode [ 535.161802][T13646] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1877'. [ 538.137791][T13657] netlink: 209832 bytes leftover after parsing attributes in process `syz.5.1879'. [ 539.216439][T13676] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1885'. [ 539.295542][T13660] syzkaller0: entered promiscuous mode [ 539.301928][T13660] syzkaller0: entered allmulticast mode [ 539.311115][T13675] netlink: 'syz.0.1884': attribute type 10 has an invalid length. [ 539.377595][T13675] team0 (unregistering): Port device team_slave_0 removed [ 539.398800][T13675] team0 (unregistering): Port device team_slave_1 removed [ 539.408920][T13675] team0 (unregistering): Port device wlan1 removed [ 539.425325][T13675] team0 (unregistering): Port device geneve1 removed [ 539.449872][T13677] netlink: 'syz.5.1886': attribute type 2 has an invalid length. [ 539.779386][T13691] sctp: [Deprecated]: syz.0.1889 (pid 13691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.779386][T13691] Use struct sctp_sack_info instead [ 541.865602][T13699] netlink: 14975 bytes leftover after parsing attributes in process `syz.5.1891'. [ 542.216950][T13716] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1897'. [ 542.258277][T13716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.373828][T13716] netlink: 'syz.5.1897': attribute type 21 has an invalid length. [ 542.392985][T13716] netlink: 'syz.5.1897': attribute type 1 has an invalid length. [ 542.401346][T13716] netlink: 15998 bytes leftover after parsing attributes in process `syz.5.1897'. [ 542.414075][T13719] netlink: 'syz.4.1898': attribute type 39 has an invalid length. [ 542.554144][T13706] netlink: 'syz.0.1894': attribute type 2 has an invalid length. [ 542.585040][T13706] netlink: 'syz.0.1894': attribute type 8 has an invalid length. [ 542.613469][T13706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1894'. [ 543.306087][T13745] netlink: 'syz.0.1905': attribute type 23 has an invalid length. [ 543.514139][T13749] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1907'. [ 543.526186][T13747] delete_channel: no stack [ 543.526743][T13747] delete_channel: no stack [ 543.545456][T13747] netlink: 'syz.1.1906': attribute type 9 has an invalid length. [ 543.555496][T13747] netlink: 149864 bytes leftover after parsing attributes in process `syz.1.1906'. [ 543.581181][T13756] delete_channel: no stack [ 543.585973][T13756] delete_channel: no stack [ 544.016957][T13772] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.132739][T13779] FAULT_INJECTION: forcing a failure. [ 544.132739][T13779] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 544.168724][T13779] CPU: 0 PID: 13779 Comm: syz.4.1916 Not tainted syzkaller #0 [ 544.176466][T13779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 544.186573][T13779] Call Trace: [ 544.189902][T13779] [ 544.192977][T13779] dump_stack_lvl+0x18c/0x250 [ 544.197735][T13779] ? show_regs_print_info+0x20/0x20 [ 544.202991][T13779] ? load_image+0x420/0x420 [ 544.207649][T13779] ? __might_fault+0xaa/0x120 [ 544.212387][T13779] ? __lock_acquire+0x7eb0/0x7eb0 [ 544.217477][T13779] should_fail_ex+0x394/0x4c0 [ 544.222402][T13779] _copy_from_user+0x2f/0xe0 [ 544.227077][T13779] ___sys_sendmsg+0x1c7/0x360 [ 544.231829][T13779] ? get_pid_task+0x20/0x1e0 [ 544.236526][T13779] ? __sys_sendmsg+0x2b0/0x2b0 [ 544.241483][T13779] ? __lock_acquire+0x7eb0/0x7eb0 [ 544.246986][T13779] __se_sys_sendmsg+0x1d0/0x2c0 [ 544.252195][T13779] ? __x64_sys_sendmsg+0x80/0x80 [ 544.257352][T13779] ? lockdep_hardirqs_on+0x98/0x150 [ 544.262813][T13779] do_syscall_64+0x55/0xb0 [ 544.267326][T13779] ? clear_bhb_loop+0x40/0x90 [ 544.272050][T13779] ? clear_bhb_loop+0x40/0x90 [ 544.276869][T13779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.282818][T13779] RIP: 0033:0x7f2b6379e159 [ 544.287411][T13779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.307545][T13779] RSP: 002b:00007f2b646c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 544.316112][T13779] RAX: ffffffffffffffda RBX: 00007f2b63a25fa0 RCX: 00007f2b6379e159 [ 544.324135][T13779] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 544.332157][T13779] RBP: 00007f2b646c0090 R08: 0000000000000000 R09: 0000000000000000 [ 544.340519][T13779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.348628][T13779] R13: 00007f2b63a26038 R14: 00007f2b63a25fa0 R15: 00007ffd5ef0a338 [ 544.356863][T13779] [ 544.495332][T13783] netlink: 1772 bytes leftover after parsing attributes in process `syz.5.1917'. [ 544.537546][T13783] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.151362][T13809] netlink: 'syz.5.1923': attribute type 23 has an invalid length. [ 545.213116][T13809] netlink: 156008 bytes leftover after parsing attributes in process `syz.5.1923'. [ 545.781519][T13822] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1929'. [ 545.792792][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.810275][T13821] FAULT_INJECTION: forcing a failure. [ 545.810275][T13821] name failslab, interval 1, probability 0, space 0, times 1 [ 545.853298][T13821] CPU: 1 PID: 13821 Comm: syz.0.1928 Not tainted syzkaller #0 [ 545.860952][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 545.871067][T13821] Call Trace: [ 545.874396][T13821] [ 545.877383][T13821] dump_stack_lvl+0x18c/0x250 [ 545.882402][T13821] ? show_regs_print_info+0x20/0x20 [ 545.887939][T13821] ? load_image+0x420/0x420 [ 545.892539][T13821] ? __might_sleep+0xe0/0xe0 [ 545.897255][T13821] ? __lock_acquire+0x7eb0/0x7eb0 [ 545.902360][T13821] should_fail_ex+0x394/0x4c0 [ 545.907120][T13821] should_failslab+0x9/0x20 [ 545.911800][T13821] slab_pre_alloc_hook+0x59/0x300 [ 545.916898][T13821] ? __lock_acquire+0x7eb0/0x7eb0 [ 545.921993][T13821] kmem_cache_alloc_node+0x5e/0x310 [ 545.927252][T13821] ? __alloc_skb+0x103/0x2c0 [ 545.931933][T13821] __alloc_skb+0x103/0x2c0 [ 545.936403][T13821] netlink_sendmsg+0x66a/0xbf0 [ 545.941374][T13821] ? netlink_getsockopt+0x590/0x590 [ 545.946712][T13821] ? apparmor_socket_sendmsg+0x8e/0x330 [ 545.952407][T13821] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 545.957735][T13821] ? security_socket_sendmsg+0x80/0xa0 [ 545.963244][T13821] ? netlink_getsockopt+0x590/0x590 [ 545.968514][T13821] ____sys_sendmsg+0x61b/0x980 [ 545.973522][T13821] ? __asan_memset+0x22/0x40 [ 545.978167][T13821] ? __sys_sendmsg_sock+0x30/0x30 [ 545.983246][T13821] ? __import_iovec+0x5f2/0x850 [ 545.988277][T13821] ? import_iovec+0x73/0xa0 [ 545.992843][T13821] ___sys_sendmsg+0x2a6/0x360 [ 545.997671][T13821] ? get_pid_task+0x20/0x1e0 [ 546.002502][T13821] ? __sys_sendmsg+0x2b0/0x2b0 [ 546.007371][T13821] ? __lock_acquire+0x7eb0/0x7eb0 [ 546.012760][T13821] __se_sys_sendmsg+0x1d0/0x2c0 [ 546.017762][T13821] ? __x64_sys_sendmsg+0x80/0x80 [ 546.022883][T13821] ? lockdep_hardirqs_on+0x98/0x150 [ 546.028240][T13821] do_syscall_64+0x55/0xb0 [ 546.032702][T13821] ? clear_bhb_loop+0x40/0x90 [ 546.037416][T13821] ? clear_bhb_loop+0x40/0x90 [ 546.042190][T13821] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.048250][T13821] RIP: 0033:0x7fb24e39e159 [ 546.052807][T13821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.072638][T13821] RSP: 002b:00007fb24f240028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.081205][T13821] RAX: ffffffffffffffda RBX: 00007fb24e625fa0 RCX: 00007fb24e39e159 [ 546.089390][T13821] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 546.097428][T13821] RBP: 00007fb24f240090 R08: 0000000000000000 R09: 0000000000000000 [ 546.105470][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.113598][T13821] R13: 00007fb24e626038 R14: 00007fb24e625fa0 R15: 00007ffeda2eb188 [ 546.121650][T13821] [ 546.602011][T13836] netlink: 'syz.1.1934': attribute type 17 has an invalid length. [ 546.810982][T13840] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1937'. [ 546.903515][T13850] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.482363][T13867] sit0: left promiscuous mode [ 548.201765][T13879] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1950'. [ 548.294418][T13879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.340596][T13879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.374849][T13879] bond0 (unregistering): Released all slaves [ 548.438563][T13887] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.912914][T13899] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.934450][T13901] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1959'. [ 549.208753][T13905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1961'. [ 549.228343][T13905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1961'. [ 549.403835][T13916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1961'. [ 549.445369][T13918] FAULT_INJECTION: forcing a failure. [ 549.445369][T13918] name failslab, interval 1, probability 0, space 0, times 0 [ 549.502087][T13918] CPU: 0 PID: 13918 Comm: syz.4.1964 Not tainted syzkaller #0 [ 549.509667][T13918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 549.519878][T13918] Call Trace: [ 549.523182][T13918] [ 549.526148][T13918] dump_stack_lvl+0x18c/0x250 [ 549.531352][T13918] ? show_regs_print_info+0x20/0x20 [ 549.536816][T13918] ? load_image+0x420/0x420 [ 549.541439][T13918] ? __might_sleep+0xe0/0xe0 [ 549.546101][T13918] ? __lock_acquire+0x7eb0/0x7eb0 [ 549.551265][T13918] should_fail_ex+0x394/0x4c0 [ 549.555997][T13918] should_failslab+0x9/0x20 [ 549.560726][T13918] slab_pre_alloc_hook+0x59/0x300 [ 549.565961][T13918] ? mark_lock+0x94/0x320 [ 549.570508][T13918] kmem_cache_alloc_node+0x5e/0x310 [ 549.575747][T13918] ? __lock_acquire+0x135d/0x7eb0 [ 549.580796][T13918] ? __alloc_skb+0x103/0x2c0 [ 549.585435][T13918] __alloc_skb+0x103/0x2c0 [ 549.589889][T13918] netlink_ack+0x377/0x1160 [ 549.594635][T13918] ? verify_lock_unused+0x140/0x140 [ 549.600167][T13918] ? perf_trace_lock_acquire+0x342/0x400 [ 549.605841][T13918] ? netlink_dump+0xec0/0xec0 [ 549.610997][T13918] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 549.617627][T13918] netlink_rcv_skb+0x2b3/0x4c0 [ 549.622429][T13918] ? rtnetlink_bind+0x80/0x80 [ 549.627204][T13918] ? netlink_ack+0x1160/0x1160 [ 549.632032][T13918] ? __lock_acquire+0x7eb0/0x7eb0 [ 549.637087][T13918] ? net_generic+0x1e/0x240 [ 549.641714][T13918] ? netlink_deliver_tap+0x2e/0x1b0 [ 549.646963][T13918] netlink_unicast+0x7b1/0x930 [ 549.651801][T13918] netlink_sendmsg+0x8d0/0xbf0 [ 549.656708][T13918] ? netlink_getsockopt+0x590/0x590 [ 549.662040][T13918] ? apparmor_socket_sendmsg+0x8e/0x330 [ 549.667623][T13918] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 549.672975][T13918] ? security_socket_sendmsg+0x80/0xa0 [ 549.678515][T13918] ? netlink_getsockopt+0x590/0x590 [ 549.683763][T13918] ____sys_sendmsg+0x61b/0x980 [ 549.688579][T13918] ? __asan_memset+0x22/0x40 [ 549.693204][T13918] ? __sys_sendmsg_sock+0x30/0x30 [ 549.698257][T13918] ? __import_iovec+0x5f2/0x850 [ 549.703162][T13918] ? import_iovec+0x73/0xa0 [ 549.707709][T13918] ___sys_sendmsg+0x2a6/0x360 [ 549.712435][T13918] ? get_pid_task+0x20/0x1e0 [ 549.717151][T13918] ? __sys_sendmsg+0x2b0/0x2b0 [ 549.721980][T13918] ? __lock_acquire+0x7eb0/0x7eb0 [ 549.727076][T13918] __se_sys_sendmsg+0x1d0/0x2c0 [ 549.732080][T13918] ? __x64_sys_sendmsg+0x80/0x80 [ 549.737076][T13918] ? lockdep_hardirqs_on+0x98/0x150 [ 549.742394][T13918] do_syscall_64+0x55/0xb0 [ 549.747008][T13918] ? clear_bhb_loop+0x40/0x90 [ 549.751706][T13918] ? clear_bhb_loop+0x40/0x90 [ 549.756420][T13918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.762694][T13918] RIP: 0033:0x7f2b6379e159 [ 549.767140][T13918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.786797][T13918] RSP: 002b:00007f2b646c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.795246][T13918] RAX: ffffffffffffffda RBX: 00007f2b63a25fa0 RCX: 00007f2b6379e159 [ 549.803248][T13918] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 549.811247][T13918] RBP: 00007f2b646c0090 R08: 0000000000000000 R09: 0000000000000000 [ 549.819331][T13918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.827427][T13918] R13: 00007f2b63a26038 R14: 00007f2b63a25fa0 R15: 00007ffd5ef0a338 [ 549.835984][T13918] [ 550.254595][T13938] ÿ: renamed from bond_slave_0 [ 550.836054][T13955] FAULT_INJECTION: forcing a failure. [ 550.836054][T13955] name failslab, interval 1, probability 0, space 0, times 0 [ 550.849268][T13955] CPU: 0 PID: 13955 Comm: syz.1.1977 Not tainted syzkaller #0 [ 550.856803][T13955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 550.867080][T13955] Call Trace: [ 550.870483][T13955] [ 550.873457][T13955] dump_stack_lvl+0x18c/0x250 [ 550.878279][T13955] ? show_regs_print_info+0x20/0x20 [ 550.883524][T13955] ? load_image+0x420/0x420 [ 550.888077][T13955] ? mark_lock+0x94/0x320 [ 550.892450][T13955] ? mark_lock+0x94/0x320 [ 550.896833][T13955] should_fail_ex+0x394/0x4c0 [ 550.901653][T13955] should_failslab+0x9/0x20 [ 550.906206][T13955] slab_pre_alloc_hook+0x59/0x300 [ 550.911280][T13955] ? switchdev_deferred_enqueue+0x2d/0x240 [ 550.917204][T13955] ? switchdev_deferred_enqueue+0x2d/0x240 [ 550.923054][T13955] __kmem_cache_alloc_node+0x53/0x250 [ 550.928473][T13955] ? switchdev_deferred_enqueue+0x2d/0x240 [ 550.934329][T13955] ? switchdev_deferred_enqueue+0x240/0x240 [ 550.940263][T13955] __kmalloc+0xa7/0x240 [ 550.944487][T13955] ? verify_lock_unused+0x140/0x140 [ 550.949817][T13955] switchdev_deferred_enqueue+0x2d/0x240 [ 550.955601][T13955] switchdev_port_attr_set+0xff/0x2e0 [ 550.961022][T13955] ? switchdev_deferred_process+0x290/0x290 [ 550.966959][T13955] ? mark_lock+0x94/0x320 [ 550.971435][T13955] br_set_state+0x378/0x690 [ 550.976271][T13955] ? br_ioctl_stub+0xd50/0xd50 [ 550.981074][T13955] ? do_raw_spin_lock+0x11f/0x2b0 [ 550.986147][T13955] ? __rwlock_init+0x150/0x150 [ 550.990954][T13955] ? br_setlink+0x41b/0x860 [ 550.995501][T13955] br_setlink+0x61a/0x860 [ 551.000074][T13955] ? br_vlan_info+0x460/0x460 [ 551.004859][T13955] ? trace_contention_end+0x39/0xe0 [ 551.010208][T13955] ? __mutex_lock+0x30d/0xc80 [ 551.014960][T13955] ? mutex_is_locked+0x12/0x40 [ 551.019869][T13955] rtnl_bridge_setlink+0x5b2/0x7d0 [ 551.025039][T13955] ? mutex_lock_nested+0x20/0x20 [ 551.030111][T13955] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 551.035450][T13955] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 551.040781][T13955] rtnetlink_rcv_msg+0x843/0xf90 [ 551.045765][T13955] ? rtnetlink_rcv_msg+0x220/0xf90 [ 551.050930][T13955] ? rtnetlink_bind+0x80/0x80 [ 551.055748][T13955] ? perf_trace_preemptirq_template+0xac/0x330 [ 551.062419][T13955] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 551.068621][T13955] ? lock_chain_count+0x20/0x20 [ 551.073528][T13955] ? __local_bh_enable_ip+0x13a/0x1c0 [ 551.078944][T13955] ? lockdep_hardirqs_on+0x98/0x150 [ 551.084182][T13955] ? __local_bh_enable_ip+0x13a/0x1c0 [ 551.089604][T13955] ? _local_bh_enable+0xa0/0xa0 [ 551.094498][T13955] ? __dev_queue_xmit+0x272/0x37e0 [ 551.099920][T13955] ? __dev_queue_xmit+0x1329/0x37e0 [ 551.105188][T13955] ? __dev_queue_xmit+0x272/0x37e0 [ 551.110389][T13955] ? ref_tracker_free+0x686/0x830 [ 551.115663][T13955] netlink_rcv_skb+0x235/0x4c0 [ 551.120490][T13955] ? rtnetlink_bind+0x80/0x80 [ 551.125395][T13955] ? netlink_ack+0x1160/0x1160 [ 551.130585][T13955] ? __lock_acquire+0x7eb0/0x7eb0 [ 551.135655][T13955] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.141109][T13955] netlink_unicast+0x7b1/0x930 [ 551.145954][T13955] netlink_sendmsg+0x8d0/0xbf0 [ 551.150777][T13955] ? netlink_getsockopt+0x590/0x590 [ 551.156021][T13955] ? apparmor_socket_sendmsg+0x8e/0x330 [ 551.161610][T13955] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 551.167028][T13955] ? security_socket_sendmsg+0x80/0xa0 [ 551.172607][T13955] ? netlink_getsockopt+0x590/0x590 [ 551.177859][T13955] ____sys_sendmsg+0x61b/0x980 [ 551.182681][T13955] ? __asan_memset+0x22/0x40 [ 551.187323][T13955] ? __sys_sendmsg_sock+0x30/0x30 [ 551.192385][T13955] ? __import_iovec+0x5f2/0x850 [ 551.197303][T13955] ? import_iovec+0x73/0xa0 [ 551.201946][T13955] ___sys_sendmsg+0x2a6/0x360 [ 551.206663][T13955] ? get_pid_task+0x20/0x1e0 [ 551.211303][T13955] ? __sys_sendmsg+0x2b0/0x2b0 [ 551.216140][T13955] ? __lock_acquire+0x7eb0/0x7eb0 [ 551.221237][T13955] __se_sys_sendmsg+0x1d0/0x2c0 [ 551.226141][T13955] ? __x64_sys_sendmsg+0x80/0x80 [ 551.231154][T13955] ? lockdep_hardirqs_on+0x98/0x150 [ 551.236399][T13955] do_syscall_64+0x55/0xb0 [ 551.240859][T13955] ? clear_bhb_loop+0x40/0x90 [ 551.245744][T13955] ? clear_bhb_loop+0x40/0x90 [ 551.250460][T13955] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 551.256399][T13955] RIP: 0033:0x7f0846f9e159 [ 551.260851][T13955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.280716][T13955] RSP: 002b:00007f0847dd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.289211][T13955] RAX: ffffffffffffffda RBX: 00007f0847226090 RCX: 00007f0846f9e159 [ 551.297316][T13955] RDX: 0000000004040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 551.305332][T13955] RBP: 00007f0847dd3090 R08: 0000000000000000 R09: 0000000000000000 [ 551.313338][T13955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.321341][T13955] R13: 00007f0847226128 R14: 00007f0847226090 R15: 00007ffe9288cb98 [ 551.329540][T13955] [ 551.332842][T13955] bridge0: error setting offload STP state on port 1(bridge_slave_0) [ 553.712811][T13970] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1984'. [ 553.738441][T13970] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 556.796316][T13983] netlink: 'syz.1.1985': attribute type 2 has an invalid length. [ 556.818010][T13988] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1985'. [ 557.050178][T13998] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.573732][T14030] netlink: 'syz.1.2000': attribute type 21 has an invalid length. [ 559.109969][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.140724][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.169491][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.186306][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.229703][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.260444][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.292464][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.322781][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.359875][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.396467][T14033] netlink: 4027 bytes leftover after parsing attributes in process `syz.4.2001'. [ 559.465000][T14051] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 559.844934][T14058] netlink: 'syz.5.2007': attribute type 29 has an invalid length. [ 559.868401][T14058] netlink: 'syz.5.2007': attribute type 29 has an invalid length. [ 559.928750][T14058] netlink: 'syz.5.2007': attribute type 29 has an invalid length. [ 559.955191][T14063] netlink: 'syz.5.2007': attribute type 29 has an invalid length. [ 560.004377][T14058] netlink: 'syz.5.2007': attribute type 29 has an invalid length. [ 560.157365][T14068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.625332][T14083] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.744003][T14091] netlink: 'syz.5.2019': attribute type 10 has an invalid length. [ 560.979389][T14097] netlink: 'syz.5.2021': attribute type 10 has an invalid length. [ 561.020898][T14097] : entered promiscuous mode [ 561.026962][T14097] : entered allmulticast mode [ 561.032829][T14097] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 563.356717][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.366745][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.368312][T14128] netlink: 'syz.4.2029': attribute type 5 has an invalid length. [ 564.610969][T14137] __nla_validate_parse: 5 callbacks suppressed [ 564.610991][T14137] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2032'. [ 566.803090][T14177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2042'. [ 566.869034][T14177] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.508756][T14205] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2051'. [ 568.297494][T14227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.482724][T14256] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2063'. [ 572.082966][T14304] netlink: 'syz.0.2073': attribute type 10 has an invalid length. [ 572.147513][T14304] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2073'. [ 572.247860][T14303] netlink: 'syz.0.2073': attribute type 10 has an invalid length. [ 572.256190][T14303] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2073'. [ 573.023815][T14318] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2079'. [ 574.002214][T14333] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2083'. [ 574.264426][T14342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.967808][T14361] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2091'. [ 575.006927][T14361] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2091'. [ 575.028450][T14362] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2091'. [ 575.083496][T14361] netlink: 'syz.1.2091': attribute type 11 has an invalid length. [ 576.135771][T14380] netlink: 'syz.5.2098': attribute type 10 has an invalid length. [ 576.383459][T14386] netlink: 'syz.5.2101': attribute type 10 has an invalid length. [ 576.711581][T14386] team0: Device wg1 is of different type [ 577.251186][T14401] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2102'. [ 577.847500][T14415] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.097337][T14421] netlink: 'syz.1.2114': attribute type 12 has an invalid length. [ 578.105256][T14421] netlink: 'syz.1.2114': attribute type 11 has an invalid length. [ 578.118351][T14421] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.2114'. [ 578.528396][T14425] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2116'. [ 580.879370][T14475] netlink: 212912 bytes leftover after parsing attributes in process `syz.5.2131'. [ 580.904262][T14475] openvswitch: netlink: Key type 4112 is out of range max 32 [ 582.428793][T14506] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.466989][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 49 (since boot) is 1037 jiffies old. [ 585.241786][T14575] netlink: 'syz.0.2156': attribute type 3 has an invalid length. [ 585.289618][T14575] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2156'. [ 585.347962][T14574] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 585.354039][T14574] syzkaller1: linktype set to 769 [ 585.419610][T14580] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.737263][T14584] netlink: 'syz.5.2158': attribute type 1 has an invalid length. [ 585.807833][T14584] netlink: 161700 bytes leftover after parsing attributes in process `syz.5.2158'. [ 587.830602][T14621] netlink: 'syz.4.2164': attribute type 29 has an invalid length. [ 590.387090][T14621] netlink: 'syz.4.2164': attribute type 29 has an invalid length. [ 590.831388][T14632] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2169'. [ 590.857773][T14630] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.867681][T14632] openvswitch: netlink: Key type 4112 is out of range max 32 [ 592.133826][T14657] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.182629][T14660] netlink: 'syz.0.2182': attribute type 10 has an invalid length. [ 592.289366][T14667] netlink: 'syz.4.2181': attribute type 10 has an invalid length. [ 592.328390][T14666] netlink: 'syz.4.2181': attribute type 10 has an invalid length. [ 592.399225][T14664] tap0: tun_chr_ioctl cmd 2148553947 [ 593.174865][T14688] netlink: set zone limit has 8 unknown bytes [ 593.368693][T14687] netlink: 65027 bytes leftover after parsing attributes in process `syz.5.2189'. [ 593.483976][T14694] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.725372][T14696] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 593.808144][T14697] netlink: 'syz.4.2192': attribute type 3 has an invalid length. [ 593.866893][T14697] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2192'. [ 594.106437][T14715] netlink: 'syz.1.2196': attribute type 29 has an invalid length. [ 594.134119][T14715] netlink: 'syz.1.2196': attribute type 29 has an invalid length. [ 594.460316][T14723] netlink: 'syz.1.2200': attribute type 10 has an invalid length. [ 594.491305][T14723] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2200'. [ 595.124636][T14747] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2205'. [ 595.161235][T14747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.274927][T14752] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2211'. [ 595.285144][T14752] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 595.355999][T14756] netlink: 'syz.1.2211': attribute type 29 has an invalid length. [ 595.376795][T14756] netlink: 'syz.1.2211': attribute type 29 has an invalid length. [ 596.388847][T14782] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: batadv_slave_0 [ 596.501744][T14782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 597.216475][T14811] validate_nla: 1 callbacks suppressed [ 597.216520][T14811] netlink: 'syz.1.2224': attribute type 39 has an invalid length. [ 598.517973][T14842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 599.154374][T14858] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 599.170547][T14858] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 599.389619][T14862] netlink: 'syz.5.2241': attribute type 10 has an invalid length. [ 599.553607][T14862] team0: Device nlmon0 is of different type [ 600.007131][T14880] sctp: [Deprecated]: syz.1.2250 (pid 14880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 600.007131][T14880] Use struct sctp_sack_info instead [ 600.015384][T14885] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2247'. [ 600.133778][T14880] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2250'. [ 600.458315][T14906] netlink: 'syz.0.2252': attribute type 19 has an invalid length. [ 601.435407][T14942] syz.1.2264 (14942) used greatest stack depth: 17864 bytes left [ 602.181929][T14963] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2273'. [ 602.242909][T14965] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2274'. [ 602.525321][T14966] netlink: 'syz.1.2274': attribute type 29 has an invalid length. [ 602.560500][T14966] netlink: 'syz.1.2274': attribute type 29 has an invalid length. [ 602.752996][T14973] netlink: 'syz.1.2274': attribute type 39 has an invalid length. [ 603.378688][T14988] netlink: 'syz.4.2281': attribute type 2 has an invalid length. [ 603.397686][T14988] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2281'. [ 604.521118][T15017] netlink: 'syz.0.2288': attribute type 12 has an invalid length. [ 604.555630][T15017] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2288'. [ 605.332280][T15042] netlink: 'syz.5.2291': attribute type 10 has an invalid length. [ 606.362221][T15042] team0: Port device geneve1 added [ 606.491596][T15056] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 606.506779][T15056] syzkaller1: linktype set to 825 [ 606.525504][T15059] netlink: 'syz.1.2300': attribute type 28 has an invalid length. [ 606.539424][T15059] netlink: 'syz.1.2300': attribute type 3 has an invalid length. [ 606.550200][T15059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2300'. [ 606.801235][T15061] netlink: 'syz.0.2297': attribute type 2 has an invalid length. [ 606.872618][T15061] batman_adv: The newly added mac address (00:20:10:00:00:00) already exists on: veth0_vlan [ 606.906382][T15061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.982300][T15133] netlink: 'syz.4.2320': attribute type 13 has an invalid length. [ 610.001484][T15133] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2320'. [ 610.377937][T15141] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 610.387439][T15141] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2321'. [ 611.873228][T15170] netlink: 'syz.0.2331': attribute type 9 has an invalid length. [ 611.903092][T15170] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2331'. [ 611.938571][T15173] netlink: 'syz.4.2333': attribute type 4 has an invalid length. [ 611.956775][T15173] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2333'. [ 612.094467][T15180] netlink: 'syz.5.2335': attribute type 2 has an invalid length. [ 612.115307][T15180] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2335'. [ 612.164977][ T3519] tipc: Subscription rejected, illegal request [ 612.744998][T15202] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2340'. [ 613.463503][T15209] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 613.684255][T15215] netlink: 'syz.0.2344': attribute type 7 has an invalid length. [ 613.719048][T15225] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.988650][T15228] netlink: 'syz.5.2350': attribute type 39 has an invalid length. [ 616.550792][T15251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2356'. [ 617.868982][T15272] netlink: 'syz.5.2362': attribute type 29 has an invalid length. [ 617.915919][T15272] netlink: 'syz.5.2362': attribute type 29 has an invalid length. [ 617.938035][T15273] netlink: 'syz.5.2362': attribute type 29 has an invalid length. [ 618.156175][T15276] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 618.169960][T15276] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 618.179321][T15276] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 618.190457][T15276] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 618.196063][T15278] syzkaller0: entered promiscuous mode [ 618.209045][T15276] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 618.226440][T15278] syzkaller0: entered allmulticast mode [ 618.232403][T15276] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 618.596517][ T8261] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.695611][ T8261] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.910950][T15289] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2366'. [ 618.924569][ T8261] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.164902][T15289] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 619.205600][T15289] CPU: 0 PID: 15289 Comm: syz.5.2366 Not tainted syzkaller #0 [ 619.213345][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 619.223637][T15289] Call Trace: [ 619.227046][T15289] [ 619.229995][T15289] dump_stack_lvl+0x18c/0x250 [ 619.234709][T15289] ? show_regs_print_info+0x20/0x20 [ 619.239935][T15289] ? load_image+0x420/0x420 [ 619.244476][T15289] sysfs_warn_dup+0x8e/0xa0 [ 619.249006][T15289] sysfs_do_create_link_sd+0xc0/0x110 [ 619.254457][T15289] device_add_class_symlinks+0x1cf/0x240 [ 619.260154][T15289] device_add+0x4f9/0xc40 [ 619.264525][T15289] wiphy_register+0x1d99/0x2ac0 [ 619.269418][T15289] ? cfg80211_event_work+0x40/0x40 [ 619.274546][T15289] ? minstrel_ht_alloc+0x88a/0x990 [ 619.279698][T15289] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 619.285882][T15289] ieee80211_register_hw+0x2f3d/0x3cb0 [ 619.291470][T15289] ? ieee80211_register_hw+0xf51/0x3cb0 [ 619.297058][T15289] ? ieee80211_tasklet_handler+0x20/0x20 [ 619.302715][T15289] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 619.308730][T15289] ? __debug_object_init+0xec/0x450 [ 619.314080][T15289] ? __asan_memset+0x22/0x40 [ 619.318855][T15289] ? __hrtimer_init+0x189/0x270 [ 619.323924][T15289] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 619.329714][T15289] ? mac80211_hwsim_free+0x220/0x220 [ 619.335105][T15289] ? rcu_is_watching+0x15/0xb0 [ 619.339895][T15289] ? kstrndup+0xbd/0x140 [ 619.344174][T15289] hwsim_new_radio_nl+0xdad/0x1a70 [ 619.349312][T15289] ? __nla_validate+0x50/0x50 [ 619.354035][T15289] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 619.360432][T15289] ? __nla_parse+0x40/0x50 [ 619.364875][T15289] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 619.371243][T15289] genl_family_rcv_msg_doit+0x21a/0x310 [ 619.376828][T15289] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 619.382754][T15289] ? bpf_lsm_capable+0x9/0x10 [ 619.387447][T15289] ? security_capable+0x89/0xb0 [ 619.392325][T15289] genl_rcv_msg+0x611/0x7a0 [ 619.396964][T15289] ? genl_bind+0x360/0x360 [ 619.401407][T15289] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 619.407972][T15289] netlink_rcv_skb+0x235/0x4c0 [ 619.412762][T15289] ? genl_bind+0x360/0x360 [ 619.417376][T15289] ? netlink_ack+0x1160/0x1160 [ 619.422172][T15289] ? __lock_acquire+0x7eb0/0x7eb0 [ 619.427231][T15289] ? net_generic+0x1e/0x240 [ 619.431761][T15289] ? down_read+0x1ac/0x2e0 [ 619.436198][T15289] genl_rcv+0x28/0x40 [ 619.440293][T15289] netlink_unicast+0x7b1/0x930 [ 619.445176][T15289] netlink_sendmsg+0x8d0/0xbf0 [ 619.449979][T15289] ? netlink_getsockopt+0x590/0x590 [ 619.455624][T15289] ? apparmor_socket_sendmsg+0x8e/0x330 [ 619.461417][T15289] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 619.466846][T15289] ? security_socket_sendmsg+0x80/0xa0 [ 619.472345][T15289] ? netlink_getsockopt+0x590/0x590 [ 619.477682][T15289] ____sys_sendmsg+0x61b/0x980 [ 619.482484][T15289] ? __asan_memset+0x22/0x40 [ 619.487103][T15289] ? __sys_sendmsg_sock+0x30/0x30 [ 619.492147][T15289] ? __import_iovec+0x5f2/0x850 [ 619.497128][T15289] ? import_iovec+0x73/0xa0 [ 619.501667][T15289] ___sys_sendmsg+0x2a6/0x360 [ 619.506463][T15289] ? __sys_sendmsg+0x2b0/0x2b0 [ 619.511274][T15289] ? trace_call_bpf+0xc3/0x6c0 [ 619.516081][T15289] __se_sys_sendmsg+0x1d0/0x2c0 [ 619.520954][T15289] ? perf_trace_preemptirq_template+0x269/0x330 [ 619.527229][T15289] ? __x64_sys_sendmsg+0x80/0x80 [ 619.532210][T15289] ? lockdep_hardirqs_on+0x98/0x150 [ 619.537445][T15289] do_syscall_64+0x55/0xb0 [ 619.541898][T15289] ? clear_bhb_loop+0x40/0x90 [ 619.546768][T15289] ? clear_bhb_loop+0x40/0x90 [ 619.551470][T15289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.557389][T15289] RIP: 0033:0x7f6c9419e159 [ 619.561822][T15289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.581650][T15289] RSP: 002b:00007f6c923f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.590467][T15289] RAX: ffffffffffffffda RBX: 00007f6c94425fa0 RCX: 00007f6c9419e159 [ 619.598651][T15289] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 619.607005][T15289] RBP: 00007f6c9423506b R08: 0000000000000000 R09: 0000000000000000 [ 619.615249][T15289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.623243][T15289] R13: 00007f6c94426038 R14: 00007f6c94425fa0 R15: 00007ffe89126f88 [ 619.631251][T15289] [ 619.724726][ T8261] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.768930][T15291] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2367'. [ 620.331694][ T5788] Bluetooth: hci2: command tx timeout [ 620.353098][T15274] chnl_net:caif_netlink_parms(): no params data found [ 621.576188][T15274] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.590720][T15274] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.598613][T15274] bridge_slave_0: entered allmulticast mode [ 621.608889][T15274] bridge_slave_0: entered promiscuous mode [ 621.640375][T15347] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2377'. [ 621.723130][T15274] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.758553][T15274] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.765862][T15274] bridge_slave_1: entered allmulticast mode [ 621.788578][T15274] bridge_slave_1: entered promiscuous mode [ 621.831638][T15347] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.2377'. [ 621.856838][T15347] netlink: 6260 bytes leftover after parsing attributes in process `syz.5.2377'. [ 621.866291][T15347] netlink: 65 bytes leftover after parsing attributes in process `syz.5.2377'. [ 621.941436][T15355] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2380'. [ 622.061813][T15274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.120455][T15274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.377106][ T5788] Bluetooth: hci2: command tx timeout [ 622.603635][T15274] team0: Port device team_slave_0 added [ 622.719859][T15274] team0: Port device team_slave_1 added [ 622.881405][T15392] netlink: 'syz.4.2386': attribute type 10 has an invalid length. [ 622.908061][T15274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.915288][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.968699][T15274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.004603][T15274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.036671][T15274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.096983][T15274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.198030][T15401] netlink: 'syz.5.2389': attribute type 63 has an invalid length. [ 623.221588][T15401] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2389'. [ 623.465955][T15274] hsr_slave_0: entered promiscuous mode [ 623.484899][T15274] hsr_slave_1: entered promiscuous mode [ 623.493255][T15274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.502873][T15274] Cannot create hsr debugfs directory [ 624.456735][ T5788] Bluetooth: hci2: command tx timeout [ 624.783159][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.791841][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.536819][ T5788] Bluetooth: hci2: command tx timeout [ 627.500312][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.521951][ T8261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.543624][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.561959][ T8261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.134277][T15464] netlink: 'syz.4.2402': attribute type 10 has an invalid length. [ 629.630172][T15274] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.677153][T15274] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.793611][T15474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.801211][T15474] IPv6: NLM_F_CREATE should be set when creating new route [ 629.810176][T15474] IPv6: NLM_F_CREATE should be set when creating new route [ 629.818418][T15474] IPv6: NLM_F_CREATE should be set when creating new route [ 629.957446][T15274] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 630.026046][T15274] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 630.323472][T15490] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2407'. [ 630.344956][T15274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.420671][T15274] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.491396][ T8261] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.498837][ T8261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.542272][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.549775][ T8243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.310619][T15509] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2410'. [ 631.636141][T15517] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2411'. [ 631.679166][T15517] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 631.714843][T15523] syzkaller0: entered promiscuous mode [ 631.725523][T15523] syzkaller0: entered allmulticast mode [ 631.852901][T15524] netlink: 'syz.1.2411': attribute type 21 has an invalid length. [ 631.862134][T15524] IPv6: NLM_F_CREATE should be specified when creating new route [ 631.874187][T15524] IPv6: Can't replace route, no match found [ 631.945806][T15274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.099543][T15274] veth0_vlan: entered promiscuous mode [ 632.134124][T15274] veth1_vlan: entered promiscuous mode [ 632.253442][T15274] veth0_macvtap: entered promiscuous mode [ 632.271356][T15274] veth1_macvtap: entered promiscuous mode [ 632.334635][T15274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.368556][T15274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.406890][T15274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.426719][T15274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.449040][T15274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.225102][T15552] veth0_macvtap: left promiscuous mode [ 635.289032][T15274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.305667][T15274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.315904][T15274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 635.329940][T15274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 635.343681][T15274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.355922][T15559] netlink: 'syz.1.2416': attribute type 21 has an invalid length. [ 635.373108][T15274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.383822][T15274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.393833][T15274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.407752][T15274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.850289][T15580] netlink: 184408 bytes leftover after parsing attributes in process `syz.4.2420'. [ 636.936405][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.960023][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.272074][T15609] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2425'. [ 637.272718][ T8249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.298313][ T8249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.697218][T15619] FAULT_INJECTION: forcing a failure. [ 637.697218][T15619] name failslab, interval 1, probability 0, space 0, times 0 [ 637.752037][T15619] CPU: 1 PID: 15619 Comm: syz.4.2426 Not tainted syzkaller #0 [ 637.759869][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 637.772054][T15619] Call Trace: [ 637.776098][T15619] [ 637.779140][T15619] dump_stack_lvl+0x18c/0x250 [ 637.784093][T15619] ? show_regs_print_info+0x20/0x20 [ 637.789600][T15619] ? load_image+0x420/0x420 [ 637.794220][T15619] ? __might_sleep+0xe0/0xe0 [ 637.798977][T15619] ? __lock_acquire+0x7eb0/0x7eb0 [ 637.804115][T15619] should_fail_ex+0x394/0x4c0 [ 637.809285][T15619] should_failslab+0x9/0x20 [ 637.814003][T15619] slab_pre_alloc_hook+0x59/0x300 [ 637.819156][T15619] ? kernfs_fop_write_iter+0x158/0x520 [ 637.825443][T15619] ? kernfs_fop_write_iter+0x158/0x520 [ 637.831225][T15619] __kmem_cache_alloc_node+0x53/0x250 [ 637.836934][T15619] ? kernfs_fop_write_iter+0x158/0x520 [ 637.842934][T15619] __kmalloc+0xa7/0x240 [ 637.847132][T15619] kernfs_fop_write_iter+0x158/0x520 [ 637.852621][T15619] vfs_write+0x474/0x9a0 [ 637.858509][T15619] ? file_end_write+0x250/0x250 [ 637.864354][T15619] ? __fget_files+0x3fc/0x460 [ 637.869096][T15619] ? __fdget_pos+0x2a3/0x330 [ 637.873807][T15619] ? ksys_write+0x74/0x260 [ 637.878249][T15619] ksys_write+0x151/0x260 [ 637.882693][T15619] ? __ia32_sys_read+0x90/0x90 [ 637.887919][T15619] ? lockdep_hardirqs_on+0x98/0x150 [ 637.893589][T15619] do_syscall_64+0x55/0xb0 [ 637.898469][T15619] ? clear_bhb_loop+0x40/0x90 [ 637.903514][T15619] ? clear_bhb_loop+0x40/0x90 [ 637.908208][T15619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.914234][T15619] RIP: 0033:0x7f2b6379e159 [ 637.918667][T15619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.938483][T15619] RSP: 002b:00007f2b646c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 637.947099][T15619] RAX: ffffffffffffffda RBX: 00007f2b63a25fa0 RCX: 00007f2b6379e159 [ 637.955174][T15619] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000007 [ 637.963164][T15619] RBP: 00007f2b646c0090 R08: 0000000000000000 R09: 0000000000000000 [ 637.971271][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.979350][T15619] R13: 00007f2b63a26038 R14: 00007f2b63a25fa0 R15: 00007ffd5ef0a338 [ 637.987530][T15619] [ 639.289916][T15663] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 640.488341][T15709] FAULT_INJECTION: forcing a failure. [ 640.488341][T15709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.577102][T15709] CPU: 1 PID: 15709 Comm: syz.4.2440 Not tainted syzkaller #0 [ 640.584742][T15709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 640.594969][T15709] Call Trace: [ 640.598490][T15709] [ 640.601842][T15709] dump_stack_lvl+0x18c/0x250 [ 640.607115][T15709] ? show_regs_print_info+0x20/0x20 [ 640.612645][T15709] ? load_image+0x420/0x420 [ 640.617666][T15709] ? __might_fault+0xaa/0x120 [ 640.622408][T15709] ? __lock_acquire+0x7eb0/0x7eb0 [ 640.627588][T15709] should_fail_ex+0x394/0x4c0 [ 640.632413][T15709] _copy_from_iter+0x1cd/0x1290 [ 640.637312][T15709] ? __virt_addr_valid+0x10c/0x380 [ 640.642518][T15709] ? __lock_acquire+0x7eb0/0x7eb0 [ 640.647699][T15709] ? copyout_mc+0x70/0x70 [ 640.652099][T15709] ? __virt_addr_valid+0x10c/0x380 [ 640.657307][T15709] ? __virt_addr_valid+0x10c/0x380 [ 640.663083][T15709] ? __virt_addr_valid+0x10c/0x380 [ 640.668238][T15709] ? __check_object_size+0x4fc/0xa40 [ 640.673662][T15709] kernfs_fop_write_iter+0x19e/0x520 [ 640.679168][T15709] vfs_write+0x474/0x9a0 [ 640.683557][T15709] ? file_end_write+0x250/0x250 [ 640.688542][T15709] ? __fget_files+0x3fc/0x460 [ 640.693379][T15709] ? __fdget_pos+0x2a3/0x330 [ 640.698122][T15709] ? ksys_write+0x74/0x260 [ 640.702618][T15709] ksys_write+0x151/0x260 [ 640.707107][T15709] ? __ia32_sys_read+0x90/0x90 [ 640.712139][T15709] ? lockdep_hardirqs_on+0x98/0x150 [ 640.717401][T15709] do_syscall_64+0x55/0xb0 [ 640.721863][T15709] ? clear_bhb_loop+0x40/0x90 [ 640.726596][T15709] ? clear_bhb_loop+0x40/0x90 [ 640.731334][T15709] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 640.737364][T15709] RIP: 0033:0x7f2b6379e159 [ 640.741820][T15709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.761861][T15709] RSP: 002b:00007f2b6469f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 640.770320][T15709] RAX: ffffffffffffffda RBX: 00007f2b63a26090 RCX: 00007f2b6379e159 [ 640.778493][T15709] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000007 [ 640.786497][T15709] RBP: 00007f2b6469f090 R08: 0000000000000000 R09: 0000000000000000 [ 640.794540][T15709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.802721][T15709] R13: 00007f2b63a26128 R14: 00007f2b63a26090 R15: 00007ffd5ef0a338 [ 640.810742][T15709] [ 644.158048][T15757] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.550260][T15783] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.672468][T15788] FAULT_INJECTION: forcing a failure. [ 647.672468][T15788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.698905][T15788] CPU: 0 PID: 15788 Comm: syz.1.2457 Not tainted syzkaller #0 [ 647.706466][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 647.716574][T15788] Call Trace: [ 647.719893][T15788] [ 647.722873][T15788] dump_stack_lvl+0x18c/0x250 [ 647.727817][T15788] ? show_regs_print_info+0x20/0x20 [ 647.733195][T15788] ? load_image+0x420/0x420 [ 647.738366][T15788] ? __lock_acquire+0x7eb0/0x7eb0 [ 647.743862][T15788] ? snprintf+0xe9/0x140 [ 647.748158][T15788] should_fail_ex+0x394/0x4c0 [ 647.753373][T15788] _copy_to_user+0x2f/0xa0 [ 647.757812][T15788] simple_read_from_buffer+0xe7/0x150 [ 647.763393][T15788] proc_fail_nth_read+0x1e8/0x260 [ 647.768463][T15788] ? proc_fault_inject_write+0x360/0x360 [ 647.774302][T15788] ? fsnotify_perm+0x271/0x5e0 [ 647.779110][T15788] ? proc_fault_inject_write+0x360/0x360 [ 647.784792][T15788] vfs_read+0x298/0x990 [ 647.789157][T15788] ? kernel_read+0x1e0/0x1e0 [ 647.793856][T15788] ? __fget_files+0x28/0x460 [ 647.798469][T15788] ? __fget_files+0x3fc/0x460 [ 647.803352][T15788] ? __fdget_pos+0x2a3/0x330 [ 647.808089][T15788] ? ksys_read+0x74/0x260 [ 647.812651][T15788] ksys_read+0x151/0x260 [ 647.816943][T15788] ? vfs_write+0x9a0/0x9a0 [ 647.821510][T15788] ? lockdep_hardirqs_on+0x98/0x150 [ 647.826940][T15788] do_syscall_64+0x55/0xb0 [ 647.831614][T15788] ? clear_bhb_loop+0x40/0x90 [ 647.836596][T15788] ? clear_bhb_loop+0x40/0x90 [ 647.841479][T15788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.847668][T15788] RIP: 0033:0x7f0846f5e98e [ 647.852109][T15788] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.871930][T15788] RSP: 002b:00007f0847df3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.880501][T15788] RAX: ffffffffffffffda RBX: 00007f0847df46c0 RCX: 00007f0846f5e98e [ 647.888771][T15788] RDX: 000000000000000f RSI: 00007f0847df40a0 RDI: 0000000000000008 [ 647.896883][T15788] RBP: 00007f0847df4090 R08: 0000000000000000 R09: 0000000000000000 [ 647.904906][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.913077][T15788] R13: 00007f0847226038 R14: 00007f0847225fa0 R15: 00007ffe9288cb98 [ 647.921345][T15788] [ 648.454393][T15804] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2463'. [ 648.954031][T15802] syzkaller0: entered promiscuous mode [ 648.977238][T15802] syzkaller0: entered allmulticast mode [ 652.843455][T15814] netlink: 'syz.5.2465': attribute type 21 has an invalid length. [ 653.544815][T15844] netlink: 'syz.4.2475': attribute type 3 has an invalid length. [ 653.553015][T15844] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2475'. [ 653.592840][T15844] netlink: 'syz.4.2475': attribute type 1 has an invalid length. [ 653.601114][T15844] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2475'. [ 653.871495][T15847] syzkaller0: entered promiscuous mode [ 653.918630][T15847] syzkaller0: entered allmulticast mode [ 654.061037][T15856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.074806][T15856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.085267][T15856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.097663][T15856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.164265][T15864] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.451663][T15889] netlink: 'syz.1.2490': attribute type 30 has an invalid length. [ 657.732311][T15899] netlink: 'syz.0.2491': attribute type 3 has an invalid length. [ 657.784199][T15899] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2491'. [ 658.206988][T15905] tun0: tun_chr_ioctl cmd 35108 [ 658.864868][T15907] netlink: 'syz.4.2496': attribute type 10 has an invalid length. [ 658.967538][T15907] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2496'. [ 659.012450][T15907] hsr0: entered promiscuous mode [ 659.447832][T15916] netlink: 'syz.1.2497': attribute type 39 has an invalid length. [ 660.593536][T15938] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2507'. [ 661.228108][T15954] syzkaller0: entered promiscuous mode [ 661.235642][T15954] syzkaller0: entered allmulticast mode [ 661.859078][T15968] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2518'. [ 665.493685][T15988] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 665.503131][T15988] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2523'. [ 665.512417][T15988] hsr0: entered promiscuous mode [ 665.527065][T15988] bridge0: port 3(hsr0) entered blocking state [ 665.533611][T15988] bridge0: port 3(hsr0) entered disabled state [ 665.556875][T15988] hsr0: entered allmulticast mode [ 665.562087][T15988] hsr_slave_0: entered allmulticast mode [ 665.572957][T15988] hsr_slave_1: entered allmulticast mode [ 665.593133][T15988] bridge0: port 3(hsr0) entered blocking state [ 665.599600][T15988] bridge0: port 3(hsr0) entered forwarding state [ 665.950455][T15997] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.578175][T16024] netlink: 'syz.1.2535': attribute type 10 has an invalid length. [ 667.611601][T16024] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2535'. [ 667.719854][T16039] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.374331][T16057] syzkaller0: entered promiscuous mode [ 668.392111][T16057] syzkaller0: entered allmulticast mode [ 671.169895][T16074] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.024948][T16104] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.171999][T16101] netlink: 'syz.4.2562': attribute type 11 has an invalid length. [ 672.208301][T16101] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 672.228355][T16101] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 672.258210][T16101] netlink: 'syz.4.2562': attribute type 2 has an invalid length. [ 672.274850][T16101] netlink: 198100 bytes leftover after parsing attributes in process `syz.4.2562'. [ 673.049874][T16127] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 673.057252][T16127] IPv6: NLM_F_CREATE should be set when creating new route [ 673.064666][T16127] IPv6: NLM_F_CREATE should be set when creating new route [ 673.072239][T16127] IPv6: NLM_F_CREATE should be set when creating new route [ 673.136359][T16126] netlink: 'syz.0.2568': attribute type 9 has an invalid length. [ 673.163676][T16126] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.188667][T16128] netlink: 'syz.0.2568': attribute type 9 has an invalid length. [ 673.213521][T16128] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.254478][T16126] netlink: 'syz.0.2568': attribute type 9 has an invalid length. [ 673.279963][T16126] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.301958][T16128] netlink: 'syz.0.2568': attribute type 9 has an invalid length. [ 673.345333][T16128] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.368002][T16126] netlink: 'syz.0.2568': attribute type 9 has an invalid length. [ 673.400946][T16126] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.452074][T16128] netlink: 'syz.0.2568': attribute type 9 has an invalid length. [ 673.473151][T16128] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.486439][T16128] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.558735][T16128] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 673.576995][T16126] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2568'. [ 675.521985][T16148] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.583421][T16174] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.333582][T16191] validate_nla: 10 callbacks suppressed [ 678.333626][T16191] netlink: 'syz.5.2589': attribute type 11 has an invalid length. [ 678.367161][T16191] netlink: 'syz.5.2589': attribute type 1 has an invalid length. [ 678.375531][T16191] netlink: 'syz.5.2589': attribute type 1 has an invalid length. [ 678.401893][T16191] netlink: 'syz.5.2589': attribute type 2 has an invalid length. [ 678.411803][T16191] __nla_validate_parse: 4 callbacks suppressed [ 678.411852][T16191] netlink: 198100 bytes leftover after parsing attributes in process `syz.5.2589'. [ 678.703724][T15276] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.728367][T15276] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.737485][T15276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.745774][T15276] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.753847][T15276] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 678.762459][T15276] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.995432][ T5788] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 679.314550][T16199] chnl_net:caif_netlink_parms(): no params data found [ 679.571919][T16214] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.749979][T16199] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.765502][T16199] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.784519][T16199] bridge_slave_0: entered allmulticast mode [ 679.798540][T16199] bridge_slave_0: entered promiscuous mode [ 679.879776][T16223] syzkaller0: entered promiscuous mode [ 679.885625][T16223] syzkaller0: entered allmulticast mode [ 679.912655][T16199] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.936807][T16199] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.950556][T16199] bridge_slave_1: entered allmulticast mode [ 679.970170][T16199] bridge_slave_1: entered promiscuous mode [ 680.139036][T16199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.171334][T16199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.382311][T16199] team0: Port device team_slave_0 added [ 681.279956][T15276] Bluetooth: hci3: command tx timeout [ 681.287958][T15276] Bluetooth: hci2: command tx timeout [ 683.344235][ T5788] Bluetooth: hci3: command tx timeout [ 685.428195][ T5788] Bluetooth: hci3: command tx timeout [ 686.158132][T16199] team0: Port device team_slave_1 added [ 686.206514][T16237] syzkaller0: entered promiscuous mode [ 686.216511][T16237] syzkaller0: entered allmulticast mode [ 686.227979][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.228096][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.262085][T16245] bridge0: entered allmulticast mode [ 686.330627][T16199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.337835][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.376545][T16199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.552528][T16258] netlink: 'syz.5.2603': attribute type 2 has an invalid length. [ 686.560765][T16258] netlink: 'syz.5.2603': attribute type 3 has an invalid length. [ 686.569096][T16258] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2603'. [ 687.507146][ T5788] Bluetooth: hci3: command tx timeout [ 688.803806][T16199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.811512][T16199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.837897][T16199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.862769][T16255] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2602'. [ 688.878648][T16258] dummy0: entered promiscuous mode [ 688.883894][T16258] dummy0: entered allmulticast mode [ 689.042289][T16199] hsr_slave_0: entered promiscuous mode [ 689.052315][T16199] hsr_slave_1: entered promiscuous mode [ 689.069584][T16199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 689.091178][T16199] Cannot create hsr debugfs directory [ 689.115963][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.657258][T16199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.465891][T16286] syzkaller0: entered promiscuous mode [ 692.472486][T16286] syzkaller0: entered allmulticast mode [ 692.522663][T16199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.925946][T16199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.993915][T16336] syzkaller0: entered promiscuous mode [ 694.999808][T16336] syzkaller0: entered allmulticast mode [ 697.355999][T16199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.640000][T16355] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.652222][T16199] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 697.856681][T16199] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 697.880027][T16199] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 697.920722][T16199] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 698.155474][T16366] syzkaller0: entered promiscuous mode [ 698.173978][T16366] syzkaller0: entered allmulticast mode [ 701.022788][T16199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.092184][T16389] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.132475][T16199] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.143343][ C1] [ 701.143353][ C1] ================================ [ 701.143360][ C1] WARNING: inconsistent lock state [ 701.143366][ C1] syzkaller #0 Not tainted [ 701.143375][ C1] -------------------------------- [ 701.143380][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 701.143388][ C1] syz.1.2624/16391 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 701.143408][ C1] ffff88805dc7a9a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 701.143460][ C1] {INITIAL USE} state was registered at: [ 701.143467][ C1] lock_acquire+0x19e/0x420 [ 701.143491][ C1] _raw_spin_lock+0x2e/0x40 [ 701.143514][ C1] htab_lock_bucket+0x17d/0x300 [ 701.143531][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 701.143550][ C1] bpf_prog_a8e63e838209a5e2+0x49/0x4b [ 701.143568][ C1] bpf_overflow_handler+0x1fc/0x510 [ 701.143591][ C1] __perf_event_overflow+0x461/0x660 [ 701.143608][ C1] perf_swevent_event+0x319/0x570 [ 701.143627][ C1] perf_bp_event+0x319/0x430 [ 701.143645][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 701.143673][ C1] notifier_call_chain+0x18f/0x380 [ 701.143692][ C1] atomic_notifier_call_chain+0xda/0x180 [ 701.143712][ C1] notify_die+0x145/0x1a0 [ 701.143730][ C1] notify_debug+0x2e/0x50 [ 701.143778][ C1] noist_exc_debug+0x77/0x120 [ 701.143793][ C1] asm_exc_debug+0x33/0x40 [ 701.143815][ C1] irq event stamp: 1278 [ 701.143821][ C1] hardirqs last enabled at (1277): [] syscall_enter_from_user_mode+0x25/0x80 [ 701.143846][ C1] hardirqs last disabled at (1278): [] exc_debug+0x73/0x140 [ 701.143864][ C1] softirqs last enabled at (950): [] __irq_exit_rcu+0xd3/0x190 [ 701.143885][ C1] softirqs last disabled at (933): [] __irq_exit_rcu+0xd3/0x190 [ 701.143904][ C1] [ 701.143904][ C1] other info that might help us debug this: [ 701.143909][ C1] Possible unsafe locking scenario: [ 701.143909][ C1] [ 701.143913][ C1] CPU0 [ 701.143916][ C1] ---- [ 701.143918][ C1] lock(&htab->lockdep_key); [ 701.143931][ C1] [ 701.143934][ C1] lock(&htab->lockdep_key); [ 701.143944][ C1] [ 701.143944][ C1] *** DEADLOCK *** [ 701.143944][ C1] [ 701.143948][ C1] no locks held by syz.1.2624/16391. [ 701.143955][ C1] [ 701.143955][ C1] stack backtrace: [ 701.143960][ C1] CPU: 1 PID: 16391 Comm: syz.1.2624 Not tainted syzkaller #0 [ 701.143977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 701.143986][ C1] Call Trace: [ 701.143993][ C1] <#DB> [ 701.144044][ C1] dump_stack_lvl+0x18c/0x250 [ 701.144074][ C1] ? show_regs_print_info+0x20/0x20 [ 701.144104][ C1] ? print_usage_bug+0x43d/0x6a0 [ 701.144125][ C1] ? verify_lock_unused+0x15/0x140 [ 701.144148][ C1] lock_acquire+0x2c2/0x420 [ 701.144170][ C1] ? htab_lock_bucket+0x17d/0x300 [ 701.144192][ C1] ? read_lock_is_recursive+0x20/0x20 [ 701.144211][ C1] ? lock_release+0xb5/0x8c0 [ 701.144232][ C1] ? do_raw_spin_lock+0x2b0/0x2b0 [ 701.144260][ C1] _raw_spin_lock+0x2e/0x40 [ 701.144280][ C1] ? htab_lock_bucket+0x17d/0x300 [ 701.144300][ C1] htab_lock_bucket+0x17d/0x300 [ 701.144324][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 701.144347][ C1] ? _raw_spin_unlock+0x28/0x40 [ 701.144369][ C1] ? pcpu_freelist_push+0x12d/0x190 [ 701.144395][ C1] ? htab_map_hash+0x1e8/0x330 [ 701.144418][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 701.144443][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 701.144463][ C1] ? __bpf_get_stackid+0x733/0x900 [ 701.144494][ C1] bpf_prog_a8e63e838209a5e2+0x49/0x4b [ 701.144515][ C1] bpf_overflow_handler+0x1fc/0x510 [ 701.144544][ C1] ? bpf_overflow_handler+0xde/0x510 [ 701.144568][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 701.144599][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 701.144623][ C1] __perf_event_overflow+0x461/0x660 [ 701.144649][ C1] perf_swevent_event+0x319/0x570 [ 701.144683][ C1] ? perf_tp_event+0x1550/0x1550 [ 701.144704][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 701.144726][ C1] ? perf_trace_lock+0x19d/0x3b0 [ 701.144750][ C1] perf_bp_event+0x319/0x430 [ 701.144775][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 701.144818][ C1] ? lock_acquire+0x2c2/0x420 [ 701.144844][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 701.144871][ C1] notifier_call_chain+0x18f/0x380 [ 701.144895][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 701.144920][ C1] atomic_notifier_call_chain+0xda/0x180 [ 701.144944][ C1] notify_die+0x145/0x1a0 [ 701.144968][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 701.144997][ C1] ? rcu_is_watching+0x15/0xb0 [ 701.145022][ C1] notify_debug+0x2e/0x50 [ 701.145041][ C1] exc_debug+0xde/0x140 [ 701.145061][ C1] asm_exc_debug+0x1e/0x40 [ 701.145085][ C1] RIP: 0010:__put_user_4+0x13/0x20 [ 701.145107][ C1] Code: c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb 89 01 <31> c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 89 01 [ 701.145122][ C1] RSP: 0018:ffffc90004ad7e80 EFLAGS: 00040206 [ 701.145138][ C1] RAX: 000000000000000a RBX: 0000000000000000 RCX: 0000200000000300 [ 701.145150][ C1] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d4020 [ 701.145162][ C1] RBP: 000000000000000a R08: ffffffff8e8c626f R09: 1ffffffff1d18c4d [ 701.145174][ C1] R10: dffffc0000000000 R11: fffffbfff1d18c4e R12: 0000000000000000 [ 701.145186][ C1] R13: 0000200000000300 R14: 0000000000000001 R15: 0000000000000001 [ 701.145211][ C1] [ 701.145216][ C1] [ 701.145222][ C1] __sys_socketpair+0xb8/0x550 [ 701.145253][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 701.145277][ C1] do_syscall_64+0x55/0xb0 [ 701.145301][ C1] ? clear_bhb_loop+0x40/0x90 [ 701.145317][ C1] ? clear_bhb_loop+0x40/0x90 [ 701.145335][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.145360][ C1] RIP: 0033:0x7f0846f9e159 [ 701.145374][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.145389][ C1] RSP: 002b:00007f0847df4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 701.145407][ C1] RAX: ffffffffffffffda RBX: 00007f0847225fa0 RCX: 00007f0846f9e159 [ 701.145420][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 701.145431][ C1] RBP: 00007f084703506b R08: 0000000000000000 R09: 0000000000000000 [ 701.145443][ C1] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 701.145455][ C1] R13: 00007f0847226038 R14: 00007f0847225fa0 R15: 00007ffe9288cb98 [ 701.145479][ C1] [ 701.289769][T16386] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.2622'. [ 701.922376][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.929601][ T8262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.950399][T16386] netlink: 252 bytes leftover after parsing attributes in process `syz.5.2622'. [ 701.994178][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.001430][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.024180][T16386] base_sock_release(ffff888076db4e00) sk=ffff88802fa4d000 [ 702.250322][T16199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.338929][ T43] hsr_slave_0: left promiscuous mode [ 702.344737][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.352242][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.360359][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.368163][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.376163][ T43] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 702.386409][ T43] batman_adv: batadv0: Removing interface: virt_wifi0 [ 702.394101][ T43] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 702.402790][ T43] batman_adv: batadv0: Removing interface: veth0_vlan [ 702.412248][ T43] veth1_vlan: left allmulticast mode [ 702.418763][ T43] veth1_vlan: left promiscuous mode [ 702.424095][ T43] veth0_vlan: left promiscuous mode [ 703.051187][T16199] veth0_vlan: entered promiscuous mode [ 703.061690][T16199] veth1_vlan: entered promiscuous mode [ 703.099531][T16199] veth0_macvtap: entered promiscuous mode [ 703.114158][T16199] veth1_macvtap: entered promiscuous mode [ 703.130487][T16199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 703.141733][T16199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.153546][T16199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.165592][T16199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 703.181596][T16199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.193420][T16199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.205327][T16199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.214403][T16199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.223699][T16199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.232796][T16199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.272722][T16199] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 703.300994][ T8256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.304106][T16199] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 703.318138][ T8256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.348114][ T8262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.356354][ T8262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50