last executing test programs: 7m35.701010168s ago: executing program 1 (id=1650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000840000000500000085000000a00000009500000000000000ccae73109b831939567986914ed555900d9d672e526518b507edd20df8108a9749ef180520bfb7d8d36f6a1ecc1b27f5f20a38caf3000000"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916000000000000bf67000000000000170600000fff01006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90f89c54ca2d6b792beb3302600ff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adfff3f6daed3cdfee7de13ad4f90"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8915, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3, 0x0, 0x11000000}, 0x38) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x10, r2}, 0x18) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x73ac97b2, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000600000000000000000800001861000002000000000000000500702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000200008500000006000000850000004d0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xf8, &(0x7f0000000740)=""/248, 0x41100, 0x20, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x4, 0x3, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x7, &(0x7f0000000c40)=[r3, r3, r4, r5], &(0x7f0000000c80)=[{0x0, 0x3, 0x3, 0x4}, {0x5, 0x5, 0x4, 0x5}, {0x1, 0x2, 0xd, 0x2}, {0x0, 0x3, 0xc, 0x6}, {0x0, 0x3, 0x3, 0x5}, {0x1, 0x5, 0x6}, {0x5, 0x5, 0xa, 0x3}], 0x10, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 7m35.484095754s ago: executing program 1 (id=1654): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x20, 0x0, 0x3, 0xfffff000}]}) 7m35.24272641s ago: executing program 1 (id=1658): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3}, @float={0x4, 0x0, 0x0, 0x10, 0xc}, @var={0x1, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x61, 0x8709dcd68c71dd66, 0x2e]}}, 0x0, 0x49, 0x0, 0x1}, 0x28) 7m35.119493708s ago: executing program 1 (id=1662): perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xf, 0x8, 0x53, 0x4, 0x0, 0x8000, 0x310, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x161, 0x0, @perf_config_ext={0x5}, 0x110008, 0x7ff, 0x1ff, 0x3, 0x1, 0x8, 0xfff4, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62053c005902002f1eafbcf706e12b30087f5c112d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e4", 0x46}], 0x1}, 0x4040) 7m34.730073684s ago: executing program 1 (id=1666): r0 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x15) 7m34.597194714s ago: executing program 1 (id=1670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8983, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8983, &(0x7f0000000080)) r6 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) 7m19.266800146s ago: executing program 32 (id=1670): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x83}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e868000000f6e82e27ef4d", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="190000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="008000"/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/17], 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8983, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8983, &(0x7f0000000080)) r6 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x12) 21.612082401s ago: executing program 4 (id=3988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000800c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) 21.387652137s ago: executing program 4 (id=3989): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000400000000020000000000001202000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x2}, 0x28) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x6, 0x9, &(0x7f0000002a80)=ANY=[@ANYBLOB="8520000001000000d04f300008000000184b0000ffffffff000000000000000085100000fbffffff183a0000050000000000000000000200182300005211", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00\x00'], &(0x7f00000013c0)='GPL\x00', 0xb, 0x65, &(0x7f0000001400)=""/101, 0x41100, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000014c0)={0x1, 0xa, 0xfffffffe, 0x80}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f0000001500)=[r0, r1, r1, r0], &(0x7f0000001540)=[{0x3, 0x1, 0x10}, {0x4, 0x3, 0x0, 0x2}, {0x2, 0x2, 0x9, 0xc}, {0x2, 0x1, 0x8, 0x2}, {0x4, 0x1, 0x2, 0x6}, {0x2, 0x1, 0x6, 0x2}, {0x1, 0x4, 0xa}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xaf, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r6 = socket$kcm(0x11, 0x2, 0x0) (rerun: 32) socketpair(0x3, 0x3, 0x9, &(0x7f0000000500)) (async) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1}}}, 0x80, 0x0}, 0x40040) sendmsg$inet(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001680)="343df020c0fc225e074f09e9c0c5d6dcc42f649028909e58b86c282d83fe5d599731934a59ecc359d84ab4837919be28d798dc925ce2f3daf469a4992b0cae121c2b2f34b280ce1b468ab2b4c0317cc287f8b74f0b93bcf3e9eea3982a12", 0x5e}, {&(0x7f0000001700)="c227dc", 0x3}, {&(0x7f0000001740)="63701b3f16aa0e2828caa47c88016f879aa603b5fbaa2e98d7fce4d771b2a69ffb86911b93", 0x25}], 0x3, &(0x7f0000002880)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x104, 0x0, 0x7, {[@generic={0x86, 0x5, "c7f6a7"}, @cipso={0x86, 0x6b, 0xffffffffffffffff, [{0x0, 0xe, "a47f559fe328c1941fd6a22a"}, {0x0, 0x12, "6aa3dd81082c2d7b8af057f50b3e87b0"}, {0x5, 0xf, "01506281c38ba9ba8cf34b1076"}, {0x5, 0x9, "958186f019f232"}, {0x5, 0x2}, {0x6, 0x6, "01cae156"}, {0x2, 0x8, "3ecc81f94c2b"}, {0x2, 0xd, "20312f73fc7591bc39c4ba"}, {0x0, 0x10, "0f8ab743819af345bd6804ee8612"}]}, @timestamp={0x44, 0x28, 0xbb, 0x0, 0xb, [0x6, 0x9, 0x9, 0x8000, 0x9, 0x5, 0x6, 0x25, 0x12c5]}, @cipso={0x86, 0x5a, 0x3, [{0x6, 0x11, "8fda36f5032222afbc5a4806a43d7f"}, {0x7, 0xc, "092bc11cad56ca6956c5"}, {0x6, 0xc, "5ece66b9edc70beb892b"}, {0x2, 0xd, "7094326e2519be13a7505c"}, {0x4, 0x2}, {0x6, 0xc, "ae161f088830da60f74f"}, {0x1, 0x10, "ad459b73c9755247688b7a9c358f"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x180}, 0x20000040) recvmsg(r5, &(0x7f0000000f40)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/140, 0x8c}, {&(0x7f0000000bc0)=""/146, 0x92}, {&(0x7f0000000c80)=""/104, 0x68}, {&(0x7f0000000d00)=""/183, 0xb7}, {&(0x7f0000000dc0)=""/183, 0xb7}, {&(0x7f0000000e80)=""/59, 0x3b}], 0x6}, 0x12002) (async, rerun: 64) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206150000040000a118000200ff05000000000e1208000f0100810401a80016eaa400080000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000027c0)={r5, 0x0, 0x5e, 0x0, &(0x7f00000007c0)="2f03630b8bae86f480d7c2b13607d997bb7b168911bbfff6fd122de2cc2144afbbd85e8ee6e92bf46ef7b4d8c024e0eacfeee946be2e3e7bb0c3197821662dd5c9861953b5d51d259c2db519bedf38d8580dcafc35aa91ff59062070d4d5", &(0x7f00000009c0), 0x9, 0x0, 0xe4, 0x1000, &(0x7f0000001240)="ad0ab406448e2ec589f15e3cae2819ef1af61cbccdc8257b77b0755d912f93814d35bb37b4a7db46745318d3363c6cc6cba95ddc222ac3e3a6fda193ce9bff0cf074c4770a97780d2a9aa10255bec2426d77c19261856ae0443224e6489edcca97e51d5ddc80ee63bd207ec9da7c52fdaedd16e1fc7c651c6a6f208625a112ee73cccafa10ef9eaac9c82aef456b8b4cce814c16a3a8b3954b11ce31673e817529de20a9cc437b7e9c440cff4747a137b11954f6e26c28db3115068a1720a7a2a1d00f085b7401f4ecbaf7914d33b12f3ffef66111268e4971bf37e695325e3c8e9a31f4", &(0x7f00000017c0)="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", 0x7, 0x0, 0x9}, 0x50) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1, 0x0, 0x0, 0x9, 0xcc, &(0x7f0000000380)=""/204, 0x40f00, 0x19, '\x00', r3, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[0x1], &(0x7f0000000580)=[{0x1, 0x1, 0x2, 0x3}, {0x0, 0x4, 0x7, 0x9}], 0x10, 0x9}, 0x94) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f0000"], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x7, 0x0, r7, 0x7fff, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x10002}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x9, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000018ffffff000000000002000018220000", @ANYRES32=r4, @ANYBLOB="000000001000000067388000f0ffffff180000000900"/34], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x8b, &(0x7f0000000840)=""/139, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x6, 0x409, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) (async) syz_clone(0x101000, &(0x7f0000001040)="738d0feba2abd2fcda79a7dfaf3dff1f32bf4cc8034b8ffeac3966696886ef49fd4f7430fd13ea6edbb7bbfefe570c2eef2fc77e24bfa08d0a92102fb57d10595e5e754640d079fdaf13f1a12f1e37f61f0289bcafd5ef75a4977a56be04645a1ff4887b82bdf51c785e4db603daf5b199177a718812878a263ff16ed595de633a288ef2e6d9bd344915", 0x8a, &(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)="fbfb5a172252f19708595c686d302c90125c4c9534e8a75395415ec627052d885b7195875e74463df35080815c5ab4811c534bb267e60632810141f9c61250cfb9464c6d3c63208ba0c058035578bfe092fd4c84d6ee86dc8aac7b1c258f79323169c20a4253c323be0213a014c2bfe0899895c8d2cafaa64dbae5ac8f7b276624b57570921edb632032ae3d6d") socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.141700103s ago: executing program 4 (id=3992): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=ANY=[@ANYRESDEC], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x35}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x81, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x1ae00, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x28, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socket$kcm(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f0000000300), &(0x7f0000000380)=r0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x0, 0x4, 0x10000, 0x8}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb9, 0xb9, 0x8, [@float={0xe, 0x0, 0x0, 0x10, 0x10}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1, 0x1}, @fwd={0x5}, @fwd={0x7}, @datasec={0x9, 0x2, 0x0, 0xf, 0x1, [{0x4, 0xfffffffb, 0xffffffff}, {0x5, 0x7, 0x8}], 'V'}, @struct={0xf, 0x6, 0x0, 0x4, 0x0, 0x7, [{0x6, 0x3, 0x4}, {0x2, 0x3, 0xe}, {0x4, 0x1, 0x8}, {0x7, 0x3, 0x40000000}, {0x10, 0x5, 0x100}, {0xb, 0x3, 0x6}]}, @fwd={0x9}]}, {0x0, [0x61, 0x0, 0x2e, 0x30, 0x30, 0x2e]}}, &(0x7f0000000d00)=""/121, 0xdc, 0x79, 0x0, 0x80000001, 0x10000, @value=r0}, 0x28) socket$kcm(0xa, 0x1, 0x106) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x6, 0x12, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) close(r8) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @random='-\x00\x00\b\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000180)='%d\x1e\x00\x00\x00j\xfe?oz f;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\xaa\xb3\x00\x00\x00\x00\x00\x00\xd4\xb5\x0f\x00\x00\x00\x00\x00\x00\x00Q\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 20.105890473s ago: executing program 4 (id=3996): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x2000000000000000, 0x5}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x2, 0xfffe, 0x0, 0x1000}, 0x0, 0xfffefffffffffffe, r1, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(r4, 0x0, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x1}], 0x1}, 0xc8d4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='{#Z%(]-:\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x7400}, 0x0) r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x401) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, 0x0) 6.159906861s ago: executing program 0 (id=4034): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r0, @ANYBLOB="00000000000c0000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x3, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) 6.158916761s ago: executing program 3 (id=4035): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d0000000000000000030000000000000000003e4e7e760000000000000000000b00000000000021c26ca9e391e1dec7f5999cf0d375f86212783d3c1a42890c54092786b1ed6ae81daa2235a59ed3bb475331ee10ee8ccf014cc70b768ce892bb657f3b9766349585b0a87c00e18d515472bb93e2bac68cb82c"], 0x0, 0x46}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000540)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce220010"], 0xcfa4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200000000000000000000001000000000407276", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffff86f0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3d, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[], &(0x7f0000000140)=""/8, 0xa0, 0x8, 0x0, 0x6}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.987300195s ago: executing program 3 (id=4037): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10040002, 0x0, 0x0, 0x3}]}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) openat$cgroup_int(r7, &(0x7f0000000200)='memory.swap.max\x00', 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'veth0_to_bond\x00', @random="013100050100"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="e18a", 0x2}], 0x1}, 0x814) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r4, 0x10, 0x0, 0x363253ea, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="2e04fbf105b2d15c8900002000000000000000", @ANYRES32, @ANYRES64=r9], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000180000000800040000000000060000004c3600000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa0, &(0x7f0000000740)=""/160, 0x41000, 0x1}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$kcm(0x2, 0x2, 0x0) recvmsg$kcm(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) openat$cgroup_type(r7, &(0x7f0000000340), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffeffffffffffffd, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f8", 0x1}], 0x1}, 0x40040) syz_clone(0x20858100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.986407195s ago: executing program 0 (id=4044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000c6f43d2c0000000003000000850000002f000000950000000dd10000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.814011897s ago: executing program 2 (id=4038): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1d, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000bacd320", 0xa}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 1.811975537s ago: executing program 0 (id=4039): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="2539000020000306f107f62aa6172f7881"], 0x33fe0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffed7, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0xa}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000b4b56bbaae6a940000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f0000000940)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000004c0), &(0x7f0000000400)=r1}, 0x20) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x2, 0xfffd}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000005c0)=r9, 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0, 0x59}, 0x10) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r6, &(0x7f0000000900)={&(0x7f0000000280)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000540)=""/68, 0x44}, {&(0x7f0000000680)=""/76, 0x4c}, {&(0x7f0000000700)=""/165, 0xa5}], 0x4, &(0x7f0000000800)=""/211, 0xd3}, 0x40010040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.722233603s ago: executing program 2 (id=4040): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x1d, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r1, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r1, r3, 0x4, 0x3, 0x4}, 0x50) socketpair(0x2b, 0x5, 0x8, &(0x7f0000000480)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001600)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="0c29d1b1769b1493af1f2ffb43b070bd41a135a8d700637bce71f716ab148223c128d9", 0x23}], 0x2, &(0x7f00000015c0)=[@rights={{0x20, 0x1, 0x1, [r5, r5, r2, r0]}}], 0x20, 0x20048004}, 0x8800) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001780)={0xffffffffffffffff, &(0x7f0000001640)="f4a5c2e263d4017b592257f5f394032fd4dd828a8d903e2d93aeb2dad885c4f29b50fc375f083aa5d4", &(0x7f0000001680)=""/219}, 0x20) write$cgroup_devices(r3, &(0x7f00000017c0)={'b', ' *:* ', 'rm\x00'}, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_lsm={0x1d, 0x6, &(0x7f0000001800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000001840)='syzkaller\x00', 0x100, 0xea, &(0x7f0000001880)=""/234, 0x41000, 0x24, '\x00', r1, 0x1b, r3, 0x8, &(0x7f0000001980)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[r3, r0, r3, r3, r0, r0], &(0x7f0000001a00)=[{0x2, 0x2, 0x8, 0xa}, {0x5, 0x5, 0xa, 0x1}, {0x0, 0x3, 0xc}], 0x10, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001b00)={0x1}, 0x4) r6 = openat$cgroup(r3, &(0x7f0000001b40)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r6, &(0x7f0000001b80)='syz1\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r3, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000001c00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7d, &(0x7f0000001c80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000001d40)}}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000001ec0)=0x3c5d) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f80)={{r3, 0xffffffffffffffff}, &(0x7f0000001f00), &(0x7f0000001f40)='%ps \x00'}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000001fc0), 0x10600, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000020c0)={r4, &(0x7f0000002000)="9ca7756e9b9d582980a7efc36e5537c818a8d6ad9a04f352a18edc48a6227702683e4692e9dc3f287356f35c59dba90a0aa99fe0b3d95584ab7ac2cf109b1746ed743775f2102f7a93c4ba28fbf044bc1cbdb411c3731a0584fe2f2f8ad848cfcfb23859abd3736982b054d45e17aff3879ccd21500c9ec4293142160cfc99e7deb7db00511580dc700e4f2109610d084c"}, 0x20) r8 = socket$kcm(0x29, 0x5, 0x0) close(r7) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000002100)={0x2, 0x0, [0x0, 0x0]}) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1) openat$cgroup_freezer_state(r3, &(0x7f0000002140), 0x2, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002180)={0xffffffffffffffff, r0}, 0xc) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000021c0)={r3}, 0x8) sendmsg$kcm(r9, &(0x7f0000004b00)={&(0x7f0000002200)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @loopback}, 0x4, 0x4, 0x4, 0x4}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000002280)="ee1d8d7a43026b0bbffddbb4024fa1ef8f025fd3a0b0aebe8b7638d73fc27a284ab7ac0e3843fcd98c0a1041013bc0d4e2ea399c28ca62b4959b9c715305390586affe692ba1f14a369900645b3fbde6333cf4cd5420494f167eefbe4933816f87e33c4639d83b6b9a85b87ae8b76a25939da66fc6cfbab187b2", 0x7a}, {&(0x7f0000002300)="7552e4c6cddb266d40832919aa50240c650de20386beb37220095cbdfeaf15f04c90bd46bb298293266c86687bb41737489c7a3669ce2708d8b21eac211c331efdebcf3a2cbdff1ad102de3385ba0a1c7a1a77cdc39f0776cf95d9b59576ed96f716600d4d310b868b2129ceba", 0x6d}, {&(0x7f0000002380)="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", 0x1000}, {&(0x7f0000003380)="d02e3538432a50a703e0662be279cc5fdd7b5d98884eb54409410e90b9ed255c33e8737e63ba9cf1f788f24bf5549166d5983f495f0adf7f00a349bb30cf846cf6edfd7e2cfea425796026e49e361c81433d8c37a44c34140248e2e8e260c329d38a9a3156e838b2b9d2ccb595125fd89e0e989dda3a1431637b1aa75c26baf5e61f120a4bf8d0e684a673fbead338a484af0ff6855796229101156398f732973d7b44c79bc032144d8edda65aea69167b55b55df587fbee098c64f22fe5aef291ed2233298e261f77edb531720bc83f6299", 0xd2}, {&(0x7f0000003480)="61ba4c88b836a6f8a984317ef091e390f5d7ff4f", 0x14}, {&(0x7f00000034c0)="ada58c2fda98cf7f918205e859ff5de1e855cdb487b78bee074af80b3cd7724e8b94774500185fcbaec87a42b02b29d9b694d13a725f983bc934cd230fa7ffd10edfe11d26557c6f6c97dde9a20ec426d61177dbdfe4ea5561f2b07d1223c878388b76996b0380be383f8c3faabcd774e93fe93337906e0616612a8c51b9127556d555c4cb145f0d5d19719a9e827926bfe6d971670b61d947688c1a6cf6a3f3ec4dc37599e55ae6c3bbd66846c25d27104f4be9e23f554bc663d8d0ba874e64ad735c58bbc4007f4c8af47f7a089ade54317b84294e081cd7d2b05d991f3d78c613f1d56549e70a5dfe20b5aed33d8863524507d0b88246fdcebc6ddda2a4fe888af90e454635b9e4549d3418ccdc3559debfa1490f71b708f60339d5506544cdf954418e96aea0ba7b62b8256c73fc51dbdd6debef5119215fcc529e1d2703f425a7ae471f113238eab2b7638aebe6fa7ae1785e9df38be5232c88997e82fb7942580e5b42c6da6754d8b07b80538843bb5d47c7a03bc4e988e68f2010e8baeeb59ec7af9429f754cca633ce6049cb627c3189ac3e92c3c8f90a682390cd6e7a514daf09a755c1e426e88dbdb6b1d4c370baba63976386e467e050c86ca6fb5d2dd08e266e76fa97fa77db189d7030c4719c30e355f65667853dae5247bd30f0b4091993c1ece357eb0314d8b3c79a9e8108d8f4785433022de4a55c21cf285c9cf6c9b6e0af079d93f14d6ef3053cf6ba213689890ed17a1668ebc2f5723620c2f53bf7fe6c663e04e50cc6394394297bece62eb1c9d82fe19ad9a6db9de5071a1b4007f490667bdbac550ad5c41fac7856259ed902a22810e901735127988c86aabb112e1c840dea0b8687f75f6a5146f7dfc5e631cd245f601488eecfde1cba015e5f276bea8c63ca96bb49ea9f4ebff0102747cff22c22efb5dbcd3158ab449957de29aeff5ba5e3ac77e7b7a480f22d2c93f3fcb7b395a4fab0852fea5f3a0926bde4559bc570a78a0d9fe1903a4760081f95758d5bc187c9942b13c7061a35684443635470d820dc30cb6d7d17ca257125f59b334be305700a7ca7b4e862f7a2bd4f5e17efd9952b67ba49df78a785d9090c2b756b7664abd5bd57b2b05213ddfb8a095a5b6e96e3f35dd4c7689b471f8aff1b4439ef617e2c03b10aa71b51523016bb26d74f9749ade46301374d21ecf9893b8d3438498af7afd44ca9a6879c6cd493e6f6c54401cd4f8781774b28f3ca82e5257b1024e0d6ed3b2c64a68885767487ec4886188580fbea20bafa28ed4db1418d4959b568b3e24ddec5f66d372f387a08dcdfda5340c6b42cd38cbdf7f4d1b49322872e7d2af9e330e6d900886f59cd630b8c461f7a030e72a6bd81d1c6f9a83f23ac00c89bf559cf46d90e109c488dc95902f55529def7764337a4e1a6d7072b4e7a41436dfe39e8ce64792e187bb680593471c327bb506a24a31c5a3920d5437ed0295d970eb5a60d4936ac478006c270e3517c4846ee1c234d82f633f2e171e0991de82ab18dc47b72b5dbe176e372303c033a32f49e508bb0f346ca844abe54bcf4f46b7c0cbf9d2e16d8cca991d8212586b77dfcecca07cbdd11267aa50dfd5eb107f74085a7436d871ff237e82429601dea1a198264a7508cb736404db6cde35fbe611ee0f23bd63b2fe1dd17bd69f6aec03e7702fa571c1c0c1131daa218c6e04da5675f40b27d48ce261156c17e2e0eb67489643477deb8c66fa027f1c36ca1ce0d49e22b2da71be0f932e434a3ed42bb118595a88f37e935586c3bbaec49b7d0235b37a2badc8f820b54d662d13126b82b24a2badafb900d2214326a16fe2e214956a5afa42ec9da3e8ebc9bb3265a36fd789ff0ee6d515642bc0d6284f7ade6a75c0ef43759b5c73a9646514900754db3982ea58fa1e3dad07da92e5636ad0db6d9a886b38352b095299c3998eae75caeb45c8467220720e4f71ffc4f86d15b75d4af9c1d1ba8d89b2fd5017b9341a564cb07ee428b8c111f0d7c22138bde4aeecc232a80f9a3bdcdf2662406652c0da3c41f183f5cc234b91c6b4cf5b280a66f12c4aca1dfb888e0a418d1685dc8ae9c2ce9d78cdb7013510b36d2d2a20ee4a3b0b5c8dbff632f3af78d7077dcf222c9f86a9d25559469913ac02e8e5856f69e5f645a9ffd6e196ed2741899c79cf897d8880a2f78d48454bfe8f8e9ffaf51b20e558993db840067ef783ef75c1da92557c94b6d25008fd4e7cee047b3eef62c5748e5cafc7eed9fcf8667647a4dd7c59fd2512cdb3a5c9e41c194cb8b44e24ced81fd0909d0fb5687fd0362c7f9d4c90743cd2ad0dd8bd16b6c1a09c1477f6b645b69cd9dce4fa0ebba8fe0a1021aa263f1d3eaa012dbca7ca0b59a997c6c56f2908360f7666e870280ac5e16c5113f8c1dafda733f6e4218b1bbe0fb599889af83bd4756348edd4af58d727b6afea25cdccc777ef0df0385b1162f1964bfee22d32c4413fb634b3a2f6032f08d29fe26155d1968b69a6f88ad5b53d79b5340aaeaa57360857646a9f729243d19956ea05abc76bb097f4a48748dde79144160f7183b877847fa95ab806726f7b623da1643cc674ca1f4a08ee13cab982b2bf30882f6f38806f9c2b81c71cd8a6f007cc200d71cb332d65ada8973b01c4b7132fc418d2ebb5e45b175a393c5f2446f07efa75cf99a16f21089f2130191e9432b6eb7e7fbf3aa1c1a8e07204164f845f70a5549d71ff4110cad4d3f868d88aa76b058282ca0674c7211cdeab610e72f0485971f2443d237eb3131d7e30c247ceae713d0322c24d597de5149a5c757084ce634eadf4e761986fd47451343d7dfd352f9fae720578b0ed8862da971bec98af61016b7d1241a70c75c43eb113b7bf522509557bc25848cd6acb3c080e43e1760c22a0235953e93b2f6ecdba5e389a7334cfb9b2f44e9246319dceba628b16e49cea516f88b9806cc7d530935dc5ad390de1ecccb7bdceb2eff59199dbaf5235da5a84c88f1983382e6aaca24810d5fe01c9fd48bcda0a8cef2233a4c14e349bb067105033fb305996d8d937543f67d5c783b377e9a7ee289c8e9701f3a0f9af5ba240dfc837f04e86e4fd42f5a249c40f01f46560d93e09315b2b9d3644d494802840367fc068d34a59975faf3331c8683a129f43f29bfe935949fdde1ed832eb43ea010b7f64104f85b0aed46c26ca8500288ae9e1704418c27e6165d7943c425e39af9fc2208af8e20c626dd14bb1b7a710e1e3fac1df174bb59b1227a0812d12a09972a679c3d918cae1a186eee9b1e098137c47389893f686746a386e584ffc4798c0e486ed57949f54f6617d3417512b8115bd7d2352cb044975fdb80e9eef7868365ea6499895231b4f0fb9f0e031809d1ff38412aac0be7e3b9f0adba9d935bdd0b18e91d5cd19d4e8e74da62f68eea4cfed45e8600948549981e0cc129e087d8723b0dc3c573829b4a2d171cecaead13f5463720593cd9432fd6e69d180dd3782c676e6a06c5cf0545974a8bd5313f62adad7b31c76b8bb96afa23c4e27c3c40e64fb2b1fc362689200d5c3a16b0314b2dd184482539bf02333ecdc1f227217dbfaac5528012b56ec0d32a9ced528401456e33d59a4431ad55e29a533b9eb4e1552ade4fc957c77e2d0d611ce204572d6cc245ee873754062265552286fe58f7504b70d0ce52ab3e2576d8de7ee6e4d0171d21f40223bab419f10de4582de4dd2ccc9e2f7818c27f1354fdd17e45b3ac07f2c0104c49d216f3085c6239064e9e1092ea371788b0cb6c6124fab538c3a0c72f7b03fa4778c500fcbda8070c8775e404a1dcd90aca62a46cafebdff5ab02b45e690c1dde103d906e8bbcc538369eab29c91ecb23605b508fb7033cec98a019d536608d4112e3e88e5251fdda357f15b247e9bf5ae0cfb0e7569cff19fad6bec9d97a9b6d566098ba02165e23adb4ca31baf297f9691a27cf7ebde0387d2e10a03eda043ae619bc0a1b2d20f0b98008d3a2d86f103f24e172681df56492f40a141313e46935a96cb13c165a83140e24adc63e4991249ac98f0da5250fadf70f558dfcf8b56808b8693afec218e0e0f220cdaf15c94998c9d50c8755674b238a4abe13ead2cae5f91c67cffb87dcde13a430529dfb64ea84e1a37a6cba3d1312991b2a9f7ece535151e523be2ec5d1e83505f44cf097dedcd33e33bbbf1de24db73acd8d1da2293d24559ee2667911ed18f7f25e4e930139307c8fd5ce0a35d7ed547529b3071a4cfe49549798caa4b802f292322b8fa058c2f048e0e72733547438487d44a479edbda8807c87f26d12cc8d9eed1e09a08eafd7efc50b37a2fb0252142f713d99f10e6d97cab3b1aa957e0b459fd33f2bb10796f15f6052662e83056a43facaa91e04374b9a31a47944bdc6104a0af255b6c8eb52c78cce42e0a8f6ec78089457d99650ffcd468c6da2d4a70d0fad2329dce2052750461a264f25f567f446769e7a632848260a48a14e6899876bb251f7f25b384ad352b549a05992b789f101874fd9042a78c5b18e5f8369ea7d4bbdf3ca2a30640aa3ffdcef092a071807a4b0cfeab89661a09d49afece6b3e64f9db57e3af5d4e396128004ae29443c316486099592b595246d1ac8c2256bfdda7e737b70f9fe8d5a3892d43305eddaaaf0909c166bf854675d0c38f551125248a648e69da888752889a7cb7cd8aa7dfe5b9a0f1a6c9c28fbaae2ccc4211d388fcc8d28a812a9846353ca80ccdf9886b1b727ba035993cc94df6819756cc4c423c97a9175a03765950863431d38617ea06b8a0fb9df4a76744199749b9b8de5e122bc27585331374b759d0de0aeac47f6c7e034f810261809c622f9f1fe6477336a5811e3811eacb9fe53b5627b7ef0a05bbda92e7193cde861d9f76798db49ae8cca165c7f293925bcc0e4ec80629fe654755d0528f27dea84f2fcbcb93fd061a06d86dc720dfdacc327936dffd185b03496d1e609f15cc07425253401c63fa01be967ad0ffe6fd2387fb3e3ecc5eacb2ed0c56194b82d532c21c7d92852dd7289cd63db4927b8724aaac472c2de30f472e36d3b3b8beeee3a77c0c36f37f910ff94ca8ca9416a323182d020394bd03faa198c72fda9414f080ccd735f11c4165210e9ab4c397bf3c733dc52bdea08699db7373af51dbe57031a2fd0bc267f8741fa3ae7a8a456ad173c9bc6afcafe237a13ca94ef1ee5e9f50a1c18254d80872278e8cae96f866b70f5a6fe5b415f42dd895c482e1c4f513342107b73c689e3f511859581391f9c2b4282ed5310e3dd066560675c4c6fc6925e958bfa8f10c3103058622c78399810d318f224ad8647001bd1af249817464d128f2df56b83d7a827f10a30dd44110a157fb7ec8bb740286bc36bd788c4216197021dcd6a10a8bff8faf6c69e5b2c2f1b2af2e1405a812358b71b71abc755bcf996aa25a92ecdaaf01e63101f21006f3e25ea07ac685d97092a5c423e66d74df944f58c37254fb3268986708b037ae1dd3fd26039bcb4a6ef2655a3a0a0d80000292d651032afb18354dfc26b4547ffcf97087b3924db215014a683d09f0190e400bde3e75acbb0a3bcdc3e738238b375d7fbb1acff38aedc7c415eb60366d38a6a12c2206529bc6efefd7f93b157b5765f48ddf166f46d05ca64e0f7ae60369fdd1d7a39f206992ebdb4989497e563a03e43384286d8a3442969884581ffba0ac516579ce1f19f11fe52cdd152159903740bace60bde945156639dfec6a6eb017c17933539430b3ec8429511ad80", 0x1000}, {&(0x7f00000044c0)="827f6c50651e1dfd22e84489e01f2cd8e431b1a2faefa9352a296f578a7d5067967bab5963637bd628556cdf9626957326b0474d8447feb73a5bb1119e5701dd30bb7703541f79881d3e9ede309ba8b668253dac45810aca707c5b13ea82c472eb0b9505a4921fbf8f6ab1597fbfc092063f744a2470ecddbee8ee03d18360043908b427", 0x84}, {&(0x7f0000004580)="15ba8580c28b4480e8360d75c252489887c87ad9aacb9ab0dc28fdcb8902e0f4a9f31a3debb472e4461b6e5d79a8efa7ed730936a4c59dd1658de8795c", 0x3d}, {&(0x7f00000045c0)="c3add37d7d8df07fb86491b8c9a9518c0f13d80fb1f2f561092057b7debe7afb5a2d6f1c228558aa7fe8d135c901f01ae6d79cbd9bf1e86deecf28761340a96ca5248f05d740de78d17e1290306095767f2a9a21dc9ab3371ffd91b8f9a215c05859c340", 0x64}, {&(0x7f0000004640)="0d7d5c01fe82018b55850706997de9aba54c5fb1678775ef0a6a8fc21fd37236591eab9bcb1fc34d196f4fbc9acb0e4cc59a97a97fbfcf9e39263c1b43b1cfe4196e98943a63af95b183cfae8cb1c9bee4aa9ab3a7d2e12e9a481ffc4ec650cbc75691712e03da2b6ec3864689faa46884534970ca2a68416fed2b691bb2aacbc3dd42382f7a3b8634d46b5e5f85eb830aecc25593389bf9034d7143a9", 0x9d}], 0xa, &(0x7f00000047c0)=[{0xc8, 0x104, 0x5290, "3103c77b6a1091f07785cdcd6dc9dc76847c5f73cc41bde09b2c78f8dac12074d7fbb7f35cda38293607ba7fc6ce4a1ed190c68b69091b7dac6f66203eb927ea3be01dbb09c09968d3a5bee008701c2197a5784d779972a998b41412262b15564fa9121829420ddd1752e1b82306cc3f68eb27bddf94ebab92b3b84dffa0709fb6b7badc9e18eb303de04a3b5893467aea3b24a9cc494b79ae78d3644fac73ce2e1f4bafea43ee9dc72a6cd9d83b8e23d85f310b5ae1"}, {0x100, 0x110, 0x3, "1d51a8f8110874822253b38c012525b9954c1eec78861c0fac720bdf69877c06346e3eafe9d73dd40d5b45c43f1db8df44ac16112c369fb8a987d6c1365f467abb94aed797fe9c47284b2792c682e3e1fbb1ecfd89e0d3e339100d96484773a8103559887197cac0c08fd66b1318add5e7bc42d362ba53e119def42d88fd7310bba3f65373e2658998103214f4bb36b4dabb99824cc28942b960b4d1b818210e16f8ae99a52f773023940f4281424d9baefa28faea5e0c0ecd3139b954e0a1bd28d6d9f7e656a82c54fe59dcdc0478b07e2e8938ee2e484cc6b45f75d67a6fe12d215b213b8542ed8f6ed12d27"}, {0xd8, 0x10f, 0x8, "ef281cb074e071b978cf7eab91bdc268751b244a7496c4a4802377705493dc2737cf3cc303489cf033065be7b696f845ebaee59848fbac384cea4eddd644233bed6abfde1473cbce829e2956b0c4d40881e643d0f5be8526974683ea4048c5017673960eaed8507c87497f05356d530a3b24a8fd39ff63f91d73d4129bc0a1120646f56341ca729e9959f1a90428f5f3efda1d2c65713135a7ba583240c8b626739b6f5135354a7167b7a1370393ddb301c8872d229b948ea68b766c7bda620f125d9b8de903"}, {0x98, 0x118, 0x2, "421588b000889ffe724eee61420002d4549bbb1f979603efb3919cea93f888971cf1859468e5f29b0687a66fd3bbae2edba2a381f7583de7b1c27d54c6eabec6de420ad4d37aacb12263f73b8b26a96efb28d4714a1407645b38dd530e6d7f0d65171a771b968f16db6f2a05b400e172f3648249e8f46f7a666b35fdc71a32c10218d799b65001ef"}], 0x338}, 0x810) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000004c80)={r9, &(0x7f0000004b40)="2210d3fd0a12d4676c7ebb8963b6ae308866c07c6a2e8bb284fc73fe7620618bbaa25e8252e345", &(0x7f0000004b80)=""/214, 0x4}, 0x20) openat$cgroup(r6, &(0x7f0000004cc0)='syz0\x00', 0x200002, 0x0) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000004d40)=@generic={&(0x7f0000004d00)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005040)={@cgroup=r6, r10, 0x6, 0x10, 0xffffffffffffffff, @void, @value=r3}, 0x20) 1.546108595s ago: executing program 2 (id=4041): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xd1}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff7ffbfffffeffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x11, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x7, 0x2, 0x0, 0x1, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f00000000c0), 0x4) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f922240685", 0x14}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) r8 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916a", 0xe}, {&(0x7f00000007c0)="ed8ba40100e42e04c0cb0e32a0d018896144fbd2bbe9", 0x16}], 0x2}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x79, 0x0, 0x0, 0xe7}], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8915, &(0x7f0000000580)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) r4 = getpid() r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r2}, 0x8) sendmsg$unix(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)="3c82a854144b43c3eedd91e6f0b77df7685a3f4829fc66f6008269236ef3e744a2aa587a6b2ce1867dbe6ff20738ffcae1818b1176c835b9cf283e58c33a7973e1e2a061c651e08e2d8ce6706de3a582e1418aa9caf812b57c853a4e7bc691c3c1cb5a1b85bdf4c01a2b9715845f1dc6740b2b43cb5f0bbce2b43c1b2c5f5781276918dfa46f7f39836753ad2ddf3c9f7d06a07d7b6a38391585561c2e86cc0e26e59489efcd94b7668aaf073bd8d2ed68009e54f2029824a204e0b656e600c057eecd6d07bc1ba47c61c15a877a4f026d", 0xd1}], 0x1, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee00, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r2]}}], 0x40}, 0x40) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800004dda255d2555391dc08329848c1acab20000020000000000001300000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000003b000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r6, &(0x7f00000001c0)="0306e4f8ce394cc5bd13cd13c22b0f69fa0d4b2a10f14bfb72598313fa16ec36a1a1b4f29326a7c5e7a9e46399c10ec3e652d07a3961441136bd2abf2970469939a672f1d6076111f852ad0025f2c4bd57edf3c6aa70a5a23bbc9e03419d3e431637ffb8f20d67bbdc0a3f42af65225479acad36ab1d2cc920c3459b9567bdfaf8979aab373da1c604a679a3514e75c76dae2e3464c0026ff2cc417c"}, 0x20) r7 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r7, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8) 996.119962ms ago: executing program 0 (id=4043): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x100000, 0xca, 0x8, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x20000, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x140) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x5, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 979.210224ms ago: executing program 3 (id=4045): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, 0x0, &(0x7f0000000400)=""/181}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x1, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000200), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 913.653918ms ago: executing program 2 (id=4046): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000118000000000000000000000080000007272dba4f7d2d60db6e2f93c685bfe1d1769dbf4d4fa892b5e2f93cc3cd0820abe061a33a1abe845cb031a89a54e7ff11b707c0abadc9476dd22c151c4fedafc0eeb3cf25fcb478119bfd865fa6596b3b88e51b47576ebd5af93acd40bca70ea165e0a99f18fa85b057b108b407252e134dc1f0044967caa534b51c195fd7854e18e42"], 0xffffffffffffffff, 0x1a, 0x0, 0x2}, 0x28) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) socketpair(0x5, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xb, '\x00', 0x0, r2, 0x4, 0x4, 0x1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r6, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x6b, 0x0, 0x1, 0x48000000, '\x00', 0x0, r2, 0x4, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0x5, [@datasec={0x4, 0x7, 0x0, 0xf, 0x2, [{0x1, 0xc3e4cc3, 0x3}, {0x1, 0x6, 0x9}, {0x3, 0x5, 0x200}, {0x3, 0x7ff, 0x4}, {0x1, 0x7ff, 0x9}, {0x1, 0x4, 0x80000001}, {0x3, 0x12, 0xfffffff7}], 'o3'}]}, {0x0, [0x5f, 0x61, 0x2e]}}, &(0x7f0000000940)=""/139, 0x81, 0x8b, 0x1, 0xf8000000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0/../file0/../file0/file0\x00', 0x0, 0x4018, r0}, 0x18) r14 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r14) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r15}, &(0x7f0000000000), &(0x7f0000000080)=r14}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r6}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x1, 0x3, 0x6, 0x9, 0x10, 0x1}, @call={0x85, 0x0, 0x0, 0x74}, @map_val={0x18, 0x2, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x6541, 0x87, &(0x7f00000004c0)=""/135, 0x41000, 0x20, '\x00', r8, 0x25, r9, 0x8, &(0x7f0000000a40)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0xb, 0x401, 0x5faa4480}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r10, r11, r12, r13, 0xffffffffffffffff, r15, 0x1], &(0x7f0000000d80), 0x10, 0x1}, 0x94) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x8c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x84ac7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x40, 0x6, 0xfffffffe, 0x2, 0x0, 0xffff0000, 0x400, 0x0, 0x791, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 842.618903ms ago: executing program 3 (id=4047): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180800002d000000000000008700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000fcffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008e9ffff4508f0ff760000007d980000000000005608000000b7000000000000009500000000000000104284b99b84597f4aa7a4e148e19d6178068956cb3f8f03a1401a6ef240e0b66e167fb76b86c60b27cfecd8076aada1e758a8a095081a5b09211154bc0eec7aee9d57ac310495f877baf573746b6e8a4a10a5416977a8df2b580da5e64c48f255c08e0c37c1e606e4604a57f556dcbdf733508ecc577557082dfd64c2119306000056033586b98542b12d8ba96915ff550367984b3f702ce720199e2f0ba622ae73303b2e87f021e1258b2347d8433d64b8ab420a9cc1d0e400"/249], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 730.47963ms ago: executing program 2 (id=4048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4e}, [@call={0x85, 0x0, 0x0, 0x13}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0xfffffdb0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000c00), &(0x7f0000000340), 0xe9f, r1}, 0x38) 637.702506ms ago: executing program 4 (id=4049): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000104000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) write$cgroup_pressure(r1, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) socket$kcm(0xa, 0x0, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x2, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x104800}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 523.454454ms ago: executing program 3 (id=4050): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61152000000000006113500000000000bf5000000000000004000000080000003d0301000000000025050000000000006916660000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x5488, 0xb46, 0x0, 0x0, 0x9, 0x10000a, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x0, 0x6, r1, 0x9) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)="5c0000006c006bcd9e3fe3dc6e48aa31086b8703240000007ea60264160af365040914001f0003000e0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x11, &(0x7f0000000000)=r3, 0x4) openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) 125.047102ms ago: executing program 3 (id=4051): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x0, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x56, 0x0, 0x3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x0, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x56, 0x0, 0x3}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x12, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 1.75508ms ago: executing program 2 (id=4052): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0x1}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000011006bec9e3be3f9ff17aa31076b876c1d0000007ea20864160af3653c001ac00400020208000200030001001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x2000c004) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map=r6, 0xc, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map=r6, 0xc, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) (async) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x19) (async) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f00000000c0), 0x19) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711852000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) socketpair$unix(0x1, 0x6692a59e0bdfeef2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x4, 0x1, 0x9}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000030000000000000000000000850000008700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000c5ffffffb702000008000000b70300000000000085f4ff007b0000009500000000000000"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9, r8}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9, r8}, 0xc) 0s ago: executing program 0 (id=4053): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000040000000000058b1c524600be83b37f595e1a20a6a9cbd0da3cb952bf9a728d36b5eeb662a7a5ca7e527502f4f91ead852983ff2d7f3d8f6d9f74729d79b837b34f12eeb2b4710ef3e9588f4deff63870aac82669c6168ba75030cbb01322c311b88cd03a9cb1387a2227acc063d21f06ba9d41a6fef7a28ffad3d7fee79ef6c4acb3cf22e79a91b144923f94463b680492b4172f2a76a0cf2a00cd323450848a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000004000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) kernel console output (not intermixed with test programs): _read_unlock+0x7c/0xd0 [ 404.837955][T12263] ? netlink_deliver_tap+0x2e/0x1b0 [ 404.843183][T12263] netlink_unicast+0x751/0x8d0 [ 404.847971][T12263] netlink_sendmsg+0x8d0/0xbf0 [ 404.852771][T12263] ? netlink_getsockopt+0x590/0x590 [ 404.858077][T12263] ? aa_sock_msg_perm+0x94/0x150 [ 404.863034][T12263] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 404.868341][T12263] ? security_socket_sendmsg+0x80/0xa0 [ 404.873818][T12263] ? netlink_getsockopt+0x590/0x590 [ 404.879032][T12263] ____sys_sendmsg+0x5ba/0x960 [ 404.883901][T12263] ? __asan_memset+0x22/0x40 [ 404.888513][T12263] ? __sys_sendmsg_sock+0x30/0x30 [ 404.893635][T12263] ? __import_iovec+0x5f2/0x850 [ 404.898519][T12263] ? import_iovec+0x73/0xa0 [ 404.903167][T12263] ___sys_sendmsg+0x2a6/0x360 [ 404.907854][T12263] ? get_pid_task+0x20/0x1e0 [ 404.912475][T12263] ? __sys_sendmsg+0x2a0/0x2a0 [ 404.917281][T12263] ? __lock_acquire+0x7d40/0x7d40 [ 404.922343][T12263] __se_sys_sendmsg+0x1c2/0x2b0 [ 404.927295][T12263] ? __x64_sys_sendmsg+0x80/0x80 [ 404.932263][T12263] ? lockdep_hardirqs_on+0x98/0x150 [ 404.937499][T12263] do_syscall_64+0x55/0xa0 [ 404.941952][T12263] ? clear_bhb_loop+0x40/0x90 [ 404.946678][T12263] ? clear_bhb_loop+0x40/0x90 [ 404.951396][T12263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.957488][T12263] RIP: 0033:0x7f2df279c819 [ 404.961935][T12263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.981828][T12263] RSP: 002b:00007f2df3610028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.990265][T12263] RAX: ffffffffffffffda RBX: 00007f2df2a15fa0 RCX: 00007f2df279c819 [ 404.998346][T12263] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.006331][T12263] RBP: 00007f2df3610090 R08: 0000000000000000 R09: 0000000000000000 [ 405.014312][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.022303][T12263] R13: 00007f2df2a16038 R14: 00007f2df2a15fa0 R15: 00007ffe1af9baa8 [ 405.030304][T12263] [ 405.520738][T12119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 405.533356][T12119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 405.555622][T12119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 405.582008][T12119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 406.501825][T12119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.588209][T12119] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.692264][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.699515][ T6237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.755887][ T6233] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.763308][ T6233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.205902][T12333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2345'. [ 408.081871][T12119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.407818][T12119] veth0_vlan: entered promiscuous mode [ 408.440660][T12119] veth1_vlan: entered promiscuous mode [ 408.631661][T12119] veth0_macvtap: entered promiscuous mode [ 408.657303][T12119] veth1_macvtap: entered promiscuous mode [ 408.758727][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.779215][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.795803][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.814002][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.828677][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.839893][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.858900][T12119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.891769][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.923818][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.946877][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.005765][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.020959][T12119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.050394][T12119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.069385][T12119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.214622][T12119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.295880][T12119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.312594][T12119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.322433][T12119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.331097][T12378] netlink: 'syz.4.2354': attribute type 3 has an invalid length. [ 409.410433][T12384] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2355'. [ 409.419877][T12378] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2354'. [ 409.445624][T12384] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2355'. [ 409.445683][T12384] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2355'. [ 410.100243][T12395] FAULT_INJECTION: forcing a failure. [ 410.100243][T12395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.113906][ T4257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.160468][T12395] CPU: 1 PID: 12395 Comm: syz.2.2356 Not tainted syzkaller #0 [ 410.168013][T12395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.169879][ T4257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.178087][T12395] Call Trace: [ 410.178098][T12395] [ 410.178106][T12395] dump_stack_lvl+0x18c/0x250 [ 410.178143][T12395] ? show_regs_print_info+0x20/0x20 [ 410.178171][T12395] ? load_image+0x420/0x420 [ 410.178198][T12395] ? __might_fault+0xaa/0x120 [ 410.178218][T12395] ? __lock_acquire+0x7d40/0x7d40 [ 410.178245][T12395] should_fail_ex+0x39d/0x4d0 [ 410.178279][T12395] _copy_from_iter+0x1d9/0x12e0 [ 410.178307][T12395] ? rep_movs_alternative+0x4a/0x90 [ 410.178329][T12395] ? _copy_from_iter+0x24e/0x12e0 [ 410.178354][T12395] ? __virt_addr_valid+0x18c/0x540 [ 410.178381][T12395] ? __lock_acquire+0x7d40/0x7d40 [ 410.178403][T12395] ? copyout_mc+0x70/0x70 [ 410.250989][T12395] ? copyout_mc+0x70/0x70 [ 410.255367][T12395] ? __virt_addr_valid+0x18c/0x540 [ 410.260546][T12395] ? page_copy_sane+0x16a/0x270 [ 410.265543][T12395] copy_page_from_iter+0x7b/0x100 [ 410.270618][T12395] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 410.276489][T12395] tun_get_user+0x15db/0x3ca0 [ 410.281219][T12395] ? aa_file_perm+0x11b/0xee0 [ 410.285941][T12395] ? rcu_read_unlock+0xa0/0xa0 [ 410.290760][T12395] ? tun_get+0x1c/0x2e0 [ 410.294965][T12395] ? __lock_acquire+0x7d40/0x7d40 [ 410.300121][T12395] ? tun_get+0x1c/0x2e0 [ 410.304324][T12395] tun_chr_write_iter+0x119/0x200 [ 410.309477][T12395] vfs_write+0x46c/0x990 [ 410.313769][T12395] ? file_end_write+0x250/0x250 [ 410.318665][T12395] ? __fget_files+0x43d/0x4b0 [ 410.323398][T12395] ? __fdget_pos+0x1d8/0x330 [ 410.328027][T12395] ? ksys_write+0x75/0x260 [ 410.332489][T12395] ksys_write+0x150/0x260 [ 410.336867][T12395] ? __ia32_sys_read+0x90/0x90 [ 410.341693][T12395] ? lockdep_hardirqs_on+0x98/0x150 [ 410.346949][T12395] do_syscall_64+0x55/0xa0 [ 410.351389][T12395] ? clear_bhb_loop+0x40/0x90 [ 410.356082][T12395] ? clear_bhb_loop+0x40/0x90 [ 410.360784][T12395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.367219][T12395] RIP: 0033:0x7f2df279c819 [ 410.371698][T12395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.391330][T12395] RSP: 002b:00007f2df3610028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 410.399779][T12395] RAX: ffffffffffffffda RBX: 00007f2df2a15fa0 RCX: 00007f2df279c819 [ 410.407766][T12395] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 410.415753][T12395] RBP: 00007f2df3610090 R08: 0000000000000000 R09: 0000000000000000 [ 410.423733][T12395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.431715][T12395] R13: 00007f2df2a16038 R14: 00007f2df2a15fa0 R15: 00007ffe1af9baa8 [ 410.439715][T12395] [ 410.469402][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.491265][T12394] netlink: 'syz.3.2357': attribute type 10 has an invalid length. [ 410.502001][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.511815][T12394] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2357'. [ 410.549990][T12394] FAULT_INJECTION: forcing a failure. [ 410.549990][T12394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.573368][T12394] CPU: 0 PID: 12394 Comm: syz.3.2357 Not tainted syzkaller #0 [ 410.580909][T12394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.590982][T12394] Call Trace: [ 410.594272][T12394] [ 410.597229][T12394] dump_stack_lvl+0x18c/0x250 [ 410.601940][T12394] ? show_regs_print_info+0x20/0x20 [ 410.607158][T12394] ? load_image+0x420/0x420 [ 410.611685][T12394] ? __lock_acquire+0x7d40/0x7d40 [ 410.616721][T12394] ? snprintf+0xe9/0x140 [ 410.621013][T12394] should_fail_ex+0x39d/0x4d0 [ 410.625715][T12394] _copy_to_user+0x2f/0xa0 [ 410.630145][T12394] simple_read_from_buffer+0xe7/0x150 [ 410.635544][T12394] proc_fail_nth_read+0x1e8/0x260 [ 410.640592][T12394] ? proc_fault_inject_write+0x360/0x360 [ 410.646332][T12394] ? fsnotify_perm+0x271/0x5e0 [ 410.651114][T12394] ? proc_fault_inject_write+0x360/0x360 [ 410.656777][T12394] vfs_read+0x28b/0x970 [ 410.660963][T12394] ? kernel_read+0x1e0/0x1e0 [ 410.665618][T12394] ? __fget_files+0x28/0x4b0 [ 410.670218][T12394] ? __fget_files+0x28/0x4b0 [ 410.674908][T12394] ? __fget_files+0x43d/0x4b0 [ 410.679611][T12394] ? __fdget_pos+0x2a3/0x330 [ 410.684214][T12394] ? ksys_read+0x75/0x260 [ 410.688562][T12394] ksys_read+0x150/0x260 [ 410.692826][T12394] ? vfs_write+0x990/0x990 [ 410.697268][T12394] ? lockdep_hardirqs_on+0x98/0x150 [ 410.702582][T12394] do_syscall_64+0x55/0xa0 [ 410.707110][T12394] ? clear_bhb_loop+0x40/0x90 [ 410.711822][T12394] ? clear_bhb_loop+0x40/0x90 [ 410.716518][T12394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.722471][T12394] RIP: 0033:0x7fdbcbf5d04e [ 410.726898][T12394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 410.746603][T12394] RSP: 002b:00007fdbcce01fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.755120][T12394] RAX: ffffffffffffffda RBX: 00007fdbcce026c0 RCX: 00007fdbcbf5d04e [ 410.763190][T12394] RDX: 000000000000000f RSI: 00007fdbcce020a0 RDI: 0000000000000006 [ 410.771170][T12394] RBP: 00007fdbcce02090 R08: 0000000000000000 R09: 0000000000000000 [ 410.779154][T12394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.787134][T12394] R13: 00007fdbcc216038 R14: 00007fdbcc215fa0 R15: 00007ffd972d8e88 [ 410.795218][T12394] [ 411.673382][T12426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2367'. [ 411.720542][T12426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2367'. [ 412.136053][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 412.152615][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 412.161818][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 412.175468][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 412.184505][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 412.203948][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 412.680166][T12434] chnl_net:caif_netlink_parms(): no params data found [ 412.866704][T12434] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.874347][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.882111][T12434] bridge_slave_0: entered allmulticast mode [ 412.890058][T12434] bridge_slave_0: entered promiscuous mode [ 412.901128][T12434] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.908675][T12434] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.916497][T12434] bridge_slave_1: entered allmulticast mode [ 412.924784][T12434] bridge_slave_1: entered promiscuous mode [ 412.980578][T12434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.993764][T12434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.075975][T12434] team0: Port device team_slave_0 added [ 413.119433][T12434] team0: Port device team_slave_1 added [ 413.199360][T12434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.214873][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.261051][T12434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.307790][T12434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.340754][T12434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.400481][T12434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.762094][T12434] hsr_slave_0: entered promiscuous mode [ 413.900014][T12434] hsr_slave_1: entered promiscuous mode [ 413.935087][T12434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.957017][T12434] Cannot create hsr debugfs directory [ 414.299472][T12434] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.318674][ T51] Bluetooth: hci0: command tx timeout [ 414.476449][T12434] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.509636][T12498] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2387'. [ 415.507926][T12434] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.549876][T12507] FAULT_INJECTION: forcing a failure. [ 415.549876][T12507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.572943][T12507] CPU: 1 PID: 12507 Comm: syz.3.2392 Not tainted syzkaller #0 [ 415.580562][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.590661][T12507] Call Trace: [ 415.593987][T12507] [ 415.596948][T12507] dump_stack_lvl+0x18c/0x250 [ 415.601689][T12507] ? show_regs_print_info+0x20/0x20 [ 415.607206][T12507] ? load_image+0x420/0x420 [ 415.611757][T12507] ? __might_fault+0xaa/0x120 [ 415.616484][T12507] ? __lock_acquire+0x7d40/0x7d40 [ 415.621565][T12507] should_fail_ex+0x39d/0x4d0 [ 415.626296][T12507] _copy_from_iter+0x1d9/0x12e0 [ 415.631184][T12507] ? rep_movs_alternative+0x4a/0x90 [ 415.636398][T12507] ? _copy_from_iter+0x24e/0x12e0 [ 415.641445][T12507] ? __virt_addr_valid+0x18c/0x540 [ 415.646570][T12507] ? __lock_acquire+0x7d40/0x7d40 [ 415.651704][T12507] ? copyout_mc+0x70/0x70 [ 415.656149][T12507] ? copyout_mc+0x70/0x70 [ 415.660673][T12507] ? __virt_addr_valid+0x18c/0x540 [ 415.665808][T12507] ? page_copy_sane+0x16a/0x270 [ 415.670762][T12507] copy_page_from_iter+0x7b/0x100 [ 415.675921][T12507] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 415.681879][T12507] tun_get_user+0x15db/0x3ca0 [ 415.686609][T12507] ? aa_file_perm+0x11b/0xee0 [ 415.691348][T12507] ? rcu_read_unlock+0xa0/0xa0 [ 415.696171][T12507] ? tun_get+0x1c/0x2e0 [ 415.700391][T12507] ? __lock_acquire+0x7d40/0x7d40 [ 415.705462][T12507] ? tun_get+0x1c/0x2e0 [ 415.709658][T12507] tun_chr_write_iter+0x119/0x200 [ 415.714709][T12507] vfs_write+0x46c/0x990 [ 415.718982][T12507] ? file_end_write+0x250/0x250 [ 415.723857][T12507] ? __fget_files+0x43d/0x4b0 [ 415.728569][T12507] ? __fdget_pos+0x1d8/0x330 [ 415.733178][T12507] ? ksys_write+0x75/0x260 [ 415.737625][T12507] ksys_write+0x150/0x260 [ 415.741975][T12507] ? __ia32_sys_read+0x90/0x90 [ 415.746764][T12507] ? lockdep_hardirqs_on+0x98/0x150 [ 415.751984][T12507] do_syscall_64+0x55/0xa0 [ 415.756409][T12507] ? clear_bhb_loop+0x40/0x90 [ 415.761100][T12507] ? clear_bhb_loop+0x40/0x90 [ 415.765794][T12507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.771873][T12507] RIP: 0033:0x7fdbcbf9c819 [ 415.776349][T12507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.796059][T12507] RSP: 002b:00007fdbcce02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.804498][T12507] RAX: ffffffffffffffda RBX: 00007fdbcc215fa0 RCX: 00007fdbcbf9c819 [ 415.812484][T12507] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 415.820475][T12507] RBP: 00007fdbcce02090 R08: 0000000000000000 R09: 0000000000000000 [ 415.828553][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.836545][T12507] R13: 00007fdbcc216038 R14: 00007fdbcc215fa0 R15: 00007ffd972d8e88 [ 415.844552][T12507] [ 416.383567][ T51] Bluetooth: hci0: command tx timeout [ 416.469365][T12434] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.786576][ T5773] Bluetooth: hci4: command 0x0406 tx timeout [ 416.795257][ T4257] tipc: Subscription rejected, illegal request [ 416.829986][T12434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.849872][T12434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.862133][T12434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.117393][T12434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.282349][T12434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.341148][T12434] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.358837][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.366088][ T6238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.425827][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.433181][ T6234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.463788][T12534] netlink: 'syz.3.2401': attribute type 21 has an invalid length. [ 417.479031][T12534] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2401'. [ 417.512196][T12535] netlink: 'syz.3.2401': attribute type 21 has an invalid length. [ 417.530941][T12535] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2401'. [ 418.087944][T12552] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2406'. [ 418.305763][T12434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.425236][T12434] veth0_vlan: entered promiscuous mode [ 418.459153][T12562] netlink: 'syz.3.2410': attribute type 6 has an invalid length. [ 418.473077][T12562] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2410'. [ 418.484015][ T5773] Bluetooth: hci0: command tx timeout [ 418.534166][T12434] veth1_vlan: entered promiscuous mode [ 418.598584][T12434] veth0_macvtap: entered promiscuous mode [ 418.634695][T12434] veth1_macvtap: entered promiscuous mode [ 418.688325][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.699208][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.717030][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.728072][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.747256][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.759875][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.777784][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.791188][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.803086][T12434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.821732][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.832678][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.853323][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.868440][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.879215][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.890108][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.900643][T12434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.911489][T12434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.941256][T12434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.074171][T12577] FAULT_INJECTION: forcing a failure. [ 419.074171][T12577] name failslab, interval 1, probability 0, space 0, times 0 [ 419.116966][T12434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.136885][T12577] CPU: 1 PID: 12577 Comm: syz.4.2415 Not tainted syzkaller #0 [ 419.144617][T12577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.154807][T12577] Call Trace: [ 419.158156][T12577] [ 419.161143][T12577] dump_stack_lvl+0x18c/0x250 [ 419.165887][T12577] ? show_regs_print_info+0x20/0x20 [ 419.171178][T12577] ? load_image+0x420/0x420 [ 419.175909][T12577] ? __might_sleep+0xe0/0xe0 [ 419.180634][T12577] ? __lock_acquire+0x7d40/0x7d40 [ 419.185800][T12577] should_fail_ex+0x39d/0x4d0 [ 419.190480][T12434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.190597][T12577] should_failslab+0x9/0x20 [ 419.203813][T12577] slab_pre_alloc_hook+0x59/0x310 [ 419.208882][T12577] ? sk_prot_alloc+0xe7/0x210 [ 419.213601][T12577] ? sk_prot_alloc+0xe7/0x210 [ 419.218313][T12577] __kmem_cache_alloc_node+0x53/0x250 [ 419.223726][T12577] ? sk_prot_alloc+0xe7/0x210 [ 419.228434][T12577] __kmalloc+0xa4/0x230 [ 419.232615][T12577] sk_prot_alloc+0xe7/0x210 [ 419.237133][T12577] ? sk_alloc+0x24/0x360 [ 419.241486][T12577] sk_alloc+0x3a/0x360 [ 419.245662][T12577] ? bpf_ctx_init+0x163/0x1a0 [ 419.250361][T12577] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 419.255932][T12577] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 419.261317][T12577] ? __fget_files+0x28/0x4b0 [ 419.265927][T12577] ? __fget_files+0x28/0x4b0 [ 419.270534][T12577] ? __fget_files+0x43d/0x4b0 [ 419.275235][T12577] ? cpu_online+0x60/0x60 [ 419.279573][T12577] bpf_prog_test_run+0x321/0x390 [ 419.284528][T12577] __sys_bpf+0x49d/0x890 [ 419.288784][T12577] ? bpf_link_show_fdinfo+0x390/0x390 [ 419.294179][T12577] ? lock_chain_count+0x20/0x20 [ 419.299047][T12577] __x64_sys_bpf+0x7c/0x90 [ 419.303474][T12577] do_syscall_64+0x55/0xa0 [ 419.307897][T12577] ? clear_bhb_loop+0x40/0x90 [ 419.312587][T12577] ? clear_bhb_loop+0x40/0x90 [ 419.317277][T12577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.323182][T12577] RIP: 0033:0x7f5c8d19c819 [ 419.327604][T12577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.347331][T12577] RSP: 002b:00007f5c8e07c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.355771][T12577] RAX: ffffffffffffffda RBX: 00007f5c8d415fa0 RCX: 00007f5c8d19c819 [ 419.363770][T12577] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 419.371864][T12577] RBP: 00007f5c8e07c090 R08: 0000000000000000 R09: 0000000000000000 [ 419.379935][T12577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.387924][T12577] R13: 00007f5c8d416038 R14: 00007f5c8d415fa0 R15: 00007ffc3413d228 [ 419.395934][T12577] [ 419.415048][T12434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.427706][T12434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.381527][ T6237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.389430][ T6237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.472129][ T6240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.510575][ T6240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.541542][ T5773] Bluetooth: hci0: command tx timeout [ 421.421350][T12603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2424'. [ 421.484979][T12603] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2424'. [ 421.525496][T12607] FAULT_INJECTION: forcing a failure. [ 421.525496][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 421.538411][T12607] CPU: 0 PID: 12607 Comm: syz.4.2425 Not tainted syzkaller #0 [ 421.545953][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.556233][T12607] Call Trace: [ 421.559557][T12607] [ 421.562536][T12607] dump_stack_lvl+0x18c/0x250 [ 421.567293][T12607] ? show_regs_print_info+0x20/0x20 [ 421.572549][T12607] ? load_image+0x420/0x420 [ 421.577148][T12607] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 421.583194][T12607] ? __asan_memset+0x22/0x40 [ 421.587840][T12607] should_fail_ex+0x39d/0x4d0 [ 421.592662][T12607] should_failslab+0x9/0x20 [ 421.597296][T12607] slab_pre_alloc_hook+0x59/0x310 [ 421.602458][T12607] ? __debug_object_init+0xec/0x450 [ 421.607720][T12607] kmem_cache_alloc+0x5a/0x2d0 [ 421.613048][T12607] ? slab_build_skb+0x2b/0x3f0 [ 421.617855][T12607] slab_build_skb+0x2b/0x3f0 [ 421.622488][T12607] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 421.627902][T12607] ? __fget_files+0x28/0x4b0 [ 421.632543][T12607] ? __fget_files+0x28/0x4b0 [ 421.637177][T12607] ? __fget_files+0x43d/0x4b0 [ 421.641918][T12607] ? cpu_online+0x60/0x60 [ 421.646391][T12607] bpf_prog_test_run+0x321/0x390 [ 421.651388][T12607] __sys_bpf+0x49d/0x890 [ 421.655697][T12607] ? bpf_link_show_fdinfo+0x390/0x390 [ 421.661138][T12607] ? lock_chain_count+0x20/0x20 [ 421.666050][T12607] __x64_sys_bpf+0x7c/0x90 [ 421.670523][T12607] do_syscall_64+0x55/0xa0 [ 421.674987][T12607] ? clear_bhb_loop+0x40/0x90 [ 421.679709][T12607] ? clear_bhb_loop+0x40/0x90 [ 421.684429][T12607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.690367][T12607] RIP: 0033:0x7f5c8d19c819 [ 421.694815][T12607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.714468][T12607] RSP: 002b:00007f5c8e07c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.722940][T12607] RAX: ffffffffffffffda RBX: 00007f5c8d415fa0 RCX: 00007f5c8d19c819 [ 421.730961][T12607] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 421.738975][T12607] RBP: 00007f5c8e07c090 R08: 0000000000000000 R09: 0000000000000000 [ 421.746998][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.755189][T12607] R13: 00007f5c8d416038 R14: 00007f5c8d415fa0 R15: 00007ffc3413d228 [ 421.763225][T12607] [ 421.942747][T12610] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2426'. [ 422.098096][T12610] syzkaller0: entered promiscuous mode [ 422.127639][T12610] syzkaller0: entered allmulticast mode [ 422.231775][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 422.243450][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 422.251991][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 422.264583][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 422.278603][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 422.296388][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 422.394865][T12625] FAULT_INJECTION: forcing a failure. [ 422.394865][T12625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.408253][T12625] CPU: 1 PID: 12625 Comm: syz.2.2430 Not tainted syzkaller #0 [ 422.415783][T12625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.425852][T12625] Call Trace: [ 422.429137][T12625] [ 422.432080][T12625] dump_stack_lvl+0x18c/0x250 [ 422.436795][T12625] ? show_regs_print_info+0x20/0x20 [ 422.442101][T12625] ? load_image+0x420/0x420 [ 422.446613][T12625] ? __might_fault+0xaa/0x120 [ 422.451565][T12625] ? __lock_acquire+0x7d40/0x7d40 [ 422.456704][T12625] should_fail_ex+0x39d/0x4d0 [ 422.461415][T12625] _copy_from_user+0x2f/0xe0 [ 422.466139][T12625] __sys_bpf+0x23e/0x890 [ 422.470488][T12625] ? bpf_link_show_fdinfo+0x390/0x390 [ 422.475991][T12625] ? lock_chain_count+0x20/0x20 [ 422.481131][T12625] __x64_sys_bpf+0x7c/0x90 [ 422.485568][T12625] do_syscall_64+0x55/0xa0 [ 422.490000][T12625] ? clear_bhb_loop+0x40/0x90 [ 422.494692][T12625] ? clear_bhb_loop+0x40/0x90 [ 422.499412][T12625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.505392][T12625] RIP: 0033:0x7fa35af9c819 [ 422.509815][T12625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.529444][T12625] RSP: 002b:00007fa35be69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.537953][T12625] RAX: ffffffffffffffda RBX: 00007fa35b215fa0 RCX: 00007fa35af9c819 [ 422.545929][T12625] RDX: 0000000000000094 RSI: 0000200000000940 RDI: 0000000000000005 [ 422.553919][T12625] RBP: 00007fa35be69090 R08: 0000000000000000 R09: 0000000000000000 [ 422.561923][T12625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.569922][T12625] R13: 00007fa35b216038 R14: 00007fa35b215fa0 R15: 00007fffbb7ca398 [ 422.577912][T12625] [ 424.336626][T12618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 424.382752][ T51] Bluetooth: hci1: command tx timeout [ 424.445947][ T6240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.553566][ T6240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.111205][T12632] syz.0.2432[12632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.111379][T12632] syz.0.2432[12632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 425.539985][T12637] net_ratelimit: 102 callbacks suppressed [ 425.540006][T12637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.595327][ T6240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.726454][ T6240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.066669][T12619] chnl_net:caif_netlink_parms(): no params data found [ 426.373034][T12619] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.411240][T12619] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.461473][ T51] Bluetooth: hci1: command tx timeout [ 426.500122][T12619] bridge_slave_0: entered allmulticast mode [ 426.590219][T12619] bridge_slave_0: entered promiscuous mode [ 426.681367][T12619] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.688589][T12619] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.700893][T12619] bridge_slave_1: entered allmulticast mode [ 426.708274][T12619] bridge_slave_1: entered promiscuous mode [ 426.839718][T12619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.904682][T12619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.983247][T12662] veth1_to_bond: entered allmulticast mode [ 427.488170][T12619] team0: Port device team_slave_0 added [ 427.523478][T12619] team0: Port device team_slave_1 added [ 428.069477][T12675] netlink: 'syz.2.2442': attribute type 10 has an invalid length. [ 428.081072][T12675] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2442'. [ 428.090585][T12675] hsr0: entered promiscuous mode [ 428.103118][T12675] bridge0: port 3(hsr0) entered blocking state [ 428.126799][T12675] bridge0: port 3(hsr0) entered disabled state [ 428.153318][T12675] hsr0: entered allmulticast mode [ 428.161173][T12675] hsr_slave_0: entered allmulticast mode [ 428.169688][T12675] hsr_slave_1: entered allmulticast mode [ 428.280276][T12675] bridge0: port 3(hsr0) entered blocking state [ 428.290110][T12675] bridge0: port 3(hsr0) entered forwarding state [ 428.389161][T12619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.396355][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.423920][T12619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.542175][ T51] Bluetooth: hci1: command tx timeout [ 429.338108][T12691] FAULT_INJECTION: forcing a failure. [ 429.338108][T12691] name failslab, interval 1, probability 0, space 0, times 0 [ 429.350878][T12691] CPU: 1 PID: 12691 Comm: syz.0.2447 Not tainted syzkaller #0 [ 429.358360][T12691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.368438][T12691] Call Trace: [ 429.371820][T12691] [ 429.374900][T12691] dump_stack_lvl+0x18c/0x250 [ 429.379671][T12691] ? show_regs_print_info+0x20/0x20 [ 429.384894][T12691] ? load_image+0x420/0x420 [ 429.389421][T12691] should_fail_ex+0x39d/0x4d0 [ 429.394191][T12691] should_failslab+0x9/0x20 [ 429.398700][T12691] slab_pre_alloc_hook+0x59/0x310 [ 429.403736][T12691] kmem_cache_alloc+0x5a/0x2d0 [ 429.408939][T12691] ? skb_clone+0x1eb/0x370 [ 429.413533][T12691] skb_clone+0x1eb/0x370 [ 429.417799][T12691] bpf_clone_redirect+0x167/0x4a0 [ 429.422846][T12691] ? read_tsc+0x9/0x20 [ 429.427162][T12691] ? ktime_get+0x24b/0x280 [ 429.431652][T12691] bpf_prog_a2ed790a9c099f5a+0x21/0x25 [ 429.437153][T12691] bpf_test_run+0x2df/0x870 [ 429.441696][T12691] ? bpf_test_run+0x174/0x870 [ 429.446416][T12691] ? convert___skb_to_skb+0x590/0x590 [ 429.451850][T12691] ? eth_get_headlen+0x210/0x210 [ 429.456807][T12691] ? slab_build_skb+0x25f/0x3f0 [ 429.461749][T12691] ? convert___skb_to_skb+0x3d/0x590 [ 429.467054][T12691] bpf_prog_test_run_skb+0xad2/0x12b0 [ 429.472464][T12691] ? cpu_online+0x60/0x60 [ 429.477085][T12691] bpf_prog_test_run+0x321/0x390 [ 429.482040][T12691] __sys_bpf+0x49d/0x890 [ 429.486306][T12691] ? bpf_link_show_fdinfo+0x390/0x390 [ 429.491702][T12691] ? lock_chain_count+0x20/0x20 [ 429.496656][T12691] __x64_sys_bpf+0x7c/0x90 [ 429.501088][T12691] do_syscall_64+0x55/0xa0 [ 429.505538][T12691] ? clear_bhb_loop+0x40/0x90 [ 429.510231][T12691] ? clear_bhb_loop+0x40/0x90 [ 429.514915][T12691] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.520819][T12691] RIP: 0033:0x7f041739c819 [ 429.525258][T12691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.544885][T12691] RSP: 002b:00007f04181d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 429.553305][T12691] RAX: ffffffffffffffda RBX: 00007f0417615fa0 RCX: 00007f041739c819 [ 429.561301][T12691] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 429.569309][T12691] RBP: 00007f04181d4090 R08: 0000000000000000 R09: 0000000000000000 [ 429.577446][T12691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.585519][T12691] R13: 00007f0417616038 R14: 00007f0417615fa0 R15: 00007fff16952a68 [ 429.593551][T12691] [ 430.290290][T12694] netlink: 145576 bytes leftover after parsing attributes in process `syz.0.2448'. [ 430.623569][ T51] Bluetooth: hci1: command tx timeout [ 432.004153][T12619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.011405][T12619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.037714][T12619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.104189][T12694] netlink: 8446 bytes leftover after parsing attributes in process `syz.0.2448'. [ 432.368703][T12619] hsr_slave_0: entered promiscuous mode [ 432.406270][T12619] hsr_slave_1: entered promiscuous mode [ 432.470982][T12619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.478636][T12619] Cannot create hsr debugfs directory [ 432.871333][T12721] FAULT_INJECTION: forcing a failure. [ 432.871333][T12721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.918354][T12721] CPU: 0 PID: 12721 Comm: syz.0.2453 Not tainted syzkaller #0 [ 432.925911][T12721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.936016][T12721] Call Trace: [ 432.939336][T12721] [ 432.942297][T12721] dump_stack_lvl+0x18c/0x250 [ 432.947113][T12721] ? show_regs_print_info+0x20/0x20 [ 432.952355][T12721] ? load_image+0x420/0x420 [ 432.957008][T12721] ? __might_fault+0xaa/0x120 [ 432.961729][T12721] ? __lock_acquire+0x7d40/0x7d40 [ 432.966795][T12721] should_fail_ex+0x39d/0x4d0 [ 432.971685][T12721] _copy_from_iter+0x1d9/0x12e0 [ 432.976585][T12721] ? rep_movs_alternative+0x4a/0x90 [ 432.981818][T12721] ? _copy_from_iter+0x24e/0x12e0 [ 432.986880][T12721] ? __virt_addr_valid+0x18c/0x540 [ 432.992025][T12721] ? __lock_acquire+0x7d40/0x7d40 [ 432.997152][T12721] ? copyout_mc+0x70/0x70 [ 433.001498][T12721] ? copyout_mc+0x70/0x70 [ 433.005848][T12721] ? __virt_addr_valid+0x18c/0x540 [ 433.011243][T12721] ? page_copy_sane+0x16a/0x270 [ 433.016205][T12721] copy_page_from_iter+0x7b/0x100 [ 433.021257][T12721] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 433.027097][T12721] tun_get_user+0x15db/0x3ca0 [ 433.031803][T12721] ? aa_file_perm+0x11b/0xee0 [ 433.036502][T12721] ? rcu_read_unlock+0xa0/0xa0 [ 433.041382][T12721] ? tun_get+0x1c/0x2e0 [ 433.045549][T12721] ? __lock_acquire+0x7d40/0x7d40 [ 433.050699][T12721] ? tun_get+0x1c/0x2e0 [ 433.054900][T12721] tun_chr_write_iter+0x119/0x200 [ 433.059976][T12721] vfs_write+0x46c/0x990 [ 433.064444][T12721] ? file_end_write+0x250/0x250 [ 433.069338][T12721] ? __fget_files+0x43d/0x4b0 [ 433.074043][T12721] ? __fdget_pos+0x1d8/0x330 [ 433.078647][T12721] ? ksys_write+0x75/0x260 [ 433.083169][T12721] ksys_write+0x150/0x260 [ 433.087516][T12721] ? __ia32_sys_read+0x90/0x90 [ 433.092304][T12721] ? lockdep_hardirqs_on+0x98/0x150 [ 433.097518][T12721] do_syscall_64+0x55/0xa0 [ 433.102030][T12721] ? clear_bhb_loop+0x40/0x90 [ 433.106838][T12721] ? clear_bhb_loop+0x40/0x90 [ 433.111615][T12721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.117518][T12721] RIP: 0033:0x7f041739c819 [ 433.121943][T12721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.141745][T12721] RSP: 002b:00007f04181d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 433.150248][T12721] RAX: ffffffffffffffda RBX: 00007f0417615fa0 RCX: 00007f041739c819 [ 433.158408][T12721] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 433.166586][T12721] RBP: 00007f04181d4090 R08: 0000000000000000 R09: 0000000000000000 [ 433.174587][T12721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 433.182772][T12721] R13: 00007f0417616038 R14: 00007f0417615fa0 R15: 00007fff16952a68 [ 433.190810][T12721] [ 434.044248][T12729] netlink: 'syz.4.2455': attribute type 10 has an invalid length. [ 434.103970][T12729] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2455'. [ 434.436226][T12753] tun0: tun_chr_ioctl cmd 2148553947 [ 434.845448][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2464'. [ 435.240190][T12784] netlink: 'syz.0.2466': attribute type 1 has an invalid length. [ 435.262290][T12784] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2466'. [ 435.340886][ C0] icmp: detected local route for 172.20.20.30 during ICMP sending, src 100.1.1.0 [ 435.960569][T12779] netlink: 'syz.0.2466': attribute type 58 has an invalid length. [ 435.970422][T12779] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2466'. [ 436.639023][ T6240] hsr_slave_0: left promiscuous mode [ 436.649176][ T6240] hsr_slave_1: left promiscuous mode [ 436.663948][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.677817][ T6240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.687243][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.701263][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 436.711160][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 436.715961][ T6240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.729444][ T6240] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 436.744791][ T6240] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 436.755451][ T6240] hsr0: left allmulticast mode [ 436.761905][ T6240] bridge0: port 3(hsr0) entered disabled state [ 436.775240][ T6240] bridge_slave_1: left allmulticast mode [ 436.782413][ T6240] bridge_slave_1: left promiscuous mode [ 436.788474][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.799160][ T6240] bridge_slave_0: left allmulticast mode [ 436.806097][ T6240] bridge_slave_0: left promiscuous mode [ 436.813084][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.849253][ T6240] veth1_macvtap: left promiscuous mode [ 436.855275][ T6240] veth1_vlan: left promiscuous mode [ 437.057423][T12815] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2475'. [ 437.654163][ T6240] team0 (unregistering): Port device team_slave_1 removed [ 437.704848][ T6240] team0 (unregistering): Port device C removed [ 437.765617][ T6240] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.816445][ T6240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.379979][ T6240] bond0 (unregistering): Released all slaves [ 438.512508][T12797] netlink: 'syz.0.2468': attribute type 10 has an invalid length. [ 438.522803][T12797] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2468'. [ 438.532326][T12797] hsr0: entered promiscuous mode [ 438.537726][T12797] bridge0: port 3(hsr0) entered blocking state [ 438.549525][T12797] bridge0: port 3(hsr0) entered disabled state [ 438.564160][T12797] hsr0: entered allmulticast mode [ 438.578271][T12797] hsr_slave_0: entered allmulticast mode [ 438.587406][T12797] hsr_slave_1: entered allmulticast mode [ 438.596392][T12797] bridge0: port 3(hsr0) entered blocking state [ 438.602824][T12797] bridge0: port 3(hsr0) entered forwarding state [ 438.730278][T12619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.766650][T12619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.804087][T12619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.853586][T12836] netlink: 'syz.2.2477': attribute type 58 has an invalid length. [ 438.890014][T12836] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2477'. [ 438.927366][T12619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.988789][T12836] netlink: 'syz.2.2477': attribute type 1 has an invalid length. [ 439.010885][T12836] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2477'. [ 439.134639][T12846] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.2480'. [ 439.236105][T12619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.308845][T12619] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.335645][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.342944][ T4257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.388627][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.396159][ T4257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.959409][T12619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.080217][T12619] veth0_vlan: entered promiscuous mode [ 440.104508][T12619] veth1_vlan: entered promiscuous mode [ 440.168658][T12619] veth0_macvtap: entered promiscuous mode [ 440.195313][T12619] veth1_macvtap: entered promiscuous mode [ 440.234771][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.250297][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.268492][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.286558][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.308751][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.315222][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.327481][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.344781][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.356676][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.374402][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.388665][T12619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.416842][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.434739][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.447909][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.468484][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.479867][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.498100][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.508397][T12619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.530238][T12619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.543044][T12619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.569419][T12619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.578518][T12619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.589620][T12619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.598924][T12619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.772450][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.793161][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.829005][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.840226][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.113345][T12930] FAULT_INJECTION: forcing a failure. [ 442.113345][T12930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.150491][T12930] CPU: 0 PID: 12930 Comm: syz.0.2487 Not tainted syzkaller #0 [ 442.158116][T12930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.168211][T12930] Call Trace: [ 442.171532][T12930] [ 442.174490][T12930] dump_stack_lvl+0x18c/0x250 [ 442.179226][T12930] ? show_regs_print_info+0x20/0x20 [ 442.184483][T12930] ? load_image+0x420/0x420 [ 442.189120][T12930] ? __might_fault+0xaa/0x120 [ 442.193932][T12930] ? __lock_acquire+0x7d40/0x7d40 [ 442.198995][T12930] should_fail_ex+0x39d/0x4d0 [ 442.203799][T12930] _copy_from_iter+0x1d9/0x12e0 [ 442.208696][T12930] ? rep_movs_alternative+0x4a/0x90 [ 442.213938][T12930] ? _copy_from_iter+0x24e/0x12e0 [ 442.219012][T12930] ? __virt_addr_valid+0x18c/0x540 [ 442.224177][T12930] ? __lock_acquire+0x7d40/0x7d40 [ 442.229252][T12930] ? copyout_mc+0x70/0x70 [ 442.233630][T12930] ? copyout_mc+0x70/0x70 [ 442.238088][T12930] ? __virt_addr_valid+0x18c/0x540 [ 442.243259][T12930] ? page_copy_sane+0x16a/0x270 [ 442.248168][T12930] copy_page_from_iter+0x7b/0x100 [ 442.253261][T12930] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 442.259127][T12930] tun_get_user+0x15db/0x3ca0 [ 442.263865][T12930] ? aa_file_perm+0x11b/0xee0 [ 442.268599][T12930] ? rcu_read_unlock+0xa0/0xa0 [ 442.273501][T12930] ? tun_get+0x1c/0x2e0 [ 442.277693][T12930] ? __lock_acquire+0x7d40/0x7d40 [ 442.282760][T12930] ? tun_get+0x1c/0x2e0 [ 442.286960][T12930] tun_chr_write_iter+0x119/0x200 [ 442.292026][T12930] vfs_write+0x46c/0x990 [ 442.296330][T12930] ? file_end_write+0x250/0x250 [ 442.301237][T12930] ? __fget_files+0x43d/0x4b0 [ 442.305975][T12930] ? __fdget_pos+0x1d8/0x330 [ 442.310606][T12930] ? ksys_write+0x75/0x260 [ 442.315109][T12930] ksys_write+0x150/0x260 [ 442.319494][T12930] ? __ia32_sys_read+0x90/0x90 [ 442.324323][T12930] ? lockdep_hardirqs_on+0x98/0x150 [ 442.331402][T12930] do_syscall_64+0x55/0xa0 [ 442.336574][T12930] ? clear_bhb_loop+0x40/0x90 [ 442.341317][T12930] ? clear_bhb_loop+0x40/0x90 [ 442.346133][T12930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 442.352079][T12930] RIP: 0033:0x7f041739c819 [ 442.356532][T12930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.376287][T12930] RSP: 002b:00007f04181d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 442.384843][T12930] RAX: ffffffffffffffda RBX: 00007f0417615fa0 RCX: 00007f041739c819 [ 442.393026][T12930] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 442.401048][T12930] RBP: 00007f04181d4090 R08: 0000000000000000 R09: 0000000000000000 [ 442.409420][T12930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.417450][T12930] R13: 00007f0417616038 R14: 00007f0417615fa0 R15: 00007fff16952a68 [ 442.425568][T12930] [ 442.631156][T12931] netlink: 'syz.3.2484': attribute type 10 has an invalid length. [ 442.649535][T12931] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2484'. [ 442.682719][T12937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2489'. [ 442.690110][T12931] hsr0: entered promiscuous mode [ 442.714369][T12931] bridge0: port 3(hsr0) entered blocking state [ 442.730856][T12931] bridge0: port 3(hsr0) entered disabled state [ 442.746028][T12931] hsr0: entered allmulticast mode [ 442.756621][T12931] hsr_slave_0: entered allmulticast mode [ 442.763115][T12931] hsr_slave_1: entered allmulticast mode [ 442.782156][T12931] bridge0: port 3(hsr0) entered blocking state [ 442.788611][T12931] bridge0: port 3(hsr0) entered forwarding state [ 444.157540][T12964] netlink: 'syz.4.2499': attribute type 25 has an invalid length. [ 444.176810][T12964] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2499'. [ 444.612490][T12978] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2507'. [ 444.659606][T12981] netlink: 'syz.4.2505': attribute type 58 has an invalid length. [ 444.689300][T12981] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2505'. [ 444.787251][T12982] netlink: 'syz.4.2505': attribute type 1 has an invalid length. [ 444.813599][T12982] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.2505'. [ 445.785016][T12990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.039775][T13008] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2515'. [ 447.759007][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.2 [ 448.458637][T13019] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 448.469669][T13019] dvmrp1: linktype set to 804 [ 448.631795][T13029] FAULT_INJECTION: forcing a failure. [ 448.631795][T13029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.676867][T13029] CPU: 0 PID: 13029 Comm: syz.2.2523 Not tainted syzkaller #0 [ 448.684504][T13029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.694684][T13029] Call Trace: [ 448.697996][T13029] [ 448.700968][T13029] dump_stack_lvl+0x18c/0x250 [ 448.705697][T13029] ? show_regs_print_info+0x20/0x20 [ 448.710946][T13029] ? load_image+0x420/0x420 [ 448.715491][T13029] ? __might_fault+0xaa/0x120 [ 448.720208][T13029] ? __lock_acquire+0x7d40/0x7d40 [ 448.725280][T13029] should_fail_ex+0x39d/0x4d0 [ 448.730014][T13029] _copy_from_iter+0x1d9/0x12e0 [ 448.734911][T13029] ? rep_movs_alternative+0x4a/0x90 [ 448.740159][T13029] ? _copy_from_iter+0x24e/0x12e0 [ 448.745225][T13029] ? __virt_addr_valid+0x18c/0x540 [ 448.750392][T13029] ? __lock_acquire+0x7d40/0x7d40 [ 448.755472][T13029] ? copyout_mc+0x70/0x70 [ 448.759850][T13029] ? copyout_mc+0x70/0x70 [ 448.764227][T13029] ? __virt_addr_valid+0x18c/0x540 [ 448.769383][T13029] ? page_copy_sane+0x4e/0x270 [ 448.774197][T13029] copy_page_from_iter+0x7b/0x100 [ 448.779267][T13029] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 448.785127][T13029] tun_get_user+0x15db/0x3ca0 [ 448.789855][T13029] ? aa_file_perm+0x11b/0xee0 [ 448.794579][T13029] ? rcu_read_unlock+0xa0/0xa0 [ 448.799396][T13029] ? tun_get+0x1c/0x2e0 [ 448.803597][T13029] ? __lock_acquire+0x7d40/0x7d40 [ 448.808659][T13029] ? tun_get+0x1c/0x2e0 [ 448.812861][T13029] tun_chr_write_iter+0x119/0x200 [ 448.817928][T13029] vfs_write+0x46c/0x990 [ 448.822222][T13029] ? file_end_write+0x250/0x250 [ 448.827127][T13029] ? __fget_files+0x43d/0x4b0 [ 448.831879][T13029] ? __fdget_pos+0x1d8/0x330 [ 448.836603][T13029] ? ksys_write+0x75/0x260 [ 448.841152][T13029] ksys_write+0x150/0x260 [ 448.845530][T13029] ? __ia32_sys_read+0x90/0x90 [ 448.850336][T13029] ? lockdep_hardirqs_on+0x98/0x150 [ 448.855580][T13029] do_syscall_64+0x55/0xa0 [ 448.860023][T13029] ? clear_bhb_loop+0x40/0x90 [ 448.864740][T13029] ? clear_bhb_loop+0x40/0x90 [ 448.869459][T13029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 448.875562][T13029] RIP: 0033:0x7fa35af9c819 [ 448.880015][T13029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.901061][T13029] RSP: 002b:00007fa35be69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.909522][T13029] RAX: ffffffffffffffda RBX: 00007fa35b215fa0 RCX: 00007fa35af9c819 [ 448.917572][T13029] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 448.925575][T13029] RBP: 00007fa35be69090 R08: 0000000000000000 R09: 0000000000000000 [ 448.933678][T13029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.941764][T13029] R13: 00007fa35b216038 R14: 00007fa35b215fa0 R15: 00007fffbb7ca398 [ 448.949879][T13029] [ 449.362817][T13040] netlink: 208064 bytes leftover after parsing attributes in process `syz.4.2526'. [ 450.164243][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2527'. [ 450.537102][T13051] syzkaller0: entered promiscuous mode [ 450.585346][T13051] syzkaller0: entered allmulticast mode [ 450.625609][T13066] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 451.357668][ T6238] hsr_slave_0: left promiscuous mode [ 451.373451][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.387310][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.397929][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.422321][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.601980][ T6238] bridge_slave_1: left allmulticast mode [ 451.607716][ T6238] bridge_slave_1: left promiscuous mode [ 451.615382][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.503500][ T6238] team0 (unregistering): Port device team_slave_1 removed [ 452.615734][ T6238] team0 (unregistering): Port device team_slave_0 removed [ 452.672722][ T6238] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.738381][ T6238] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.923495][ T6238] .` (unregistering): Released all slaves [ 454.058113][T13102] netlink: 'syz.2.2543': attribute type 10 has an invalid length. [ 454.078702][T13102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.113152][T13102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.157029][T13102] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 455.025815][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.1.5 [ 456.885910][T13112] netlink: 'syz.0.2547': attribute type 10 has an invalid length. [ 456.910946][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2547'. [ 456.931548][T13112] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 456.938818][T13112] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.970609][T13112] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 459.889710][T13167] netlink: 'syz.4.2562': attribute type 27 has an invalid length. [ 459.897943][T13167] netlink: 'syz.4.2562': attribute type 3 has an invalid length. [ 459.905834][T13167] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2562'. [ 463.620751][T13231] netlink: 'syz.0.2581': attribute type 10 has an invalid length. [ 463.628646][T13231] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2581'. [ 463.731357][T13231] veth0_macvtap: left promiscuous mode [ 465.215437][T13269] netlink: 'syz.0.2596': attribute type 21 has an invalid length. [ 465.225116][T13269] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2596'. [ 465.641691][T13273] netlink: 'syz.2.2598': attribute type 2 has an invalid length. [ 465.663426][T13273] netlink: 'syz.2.2598': attribute type 8 has an invalid length. [ 465.680048][T13273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2598'. [ 465.840440][T13274] netlink: 'syz.2.2598': attribute type 11 has an invalid length. [ 466.361051][T13289] netlink: 'syz.0.2603': attribute type 10 has an invalid length. [ 466.368947][T13289] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2603'. [ 466.592799][T13295] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 466.609700][T13295] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 468.638171][T13328] sctp: [Deprecated]: syz.3.2618 (pid 13328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.638171][T13328] Use struct sctp_sack_info instead [ 469.065387][T13340] netlink: 'syz.2.2622': attribute type 10 has an invalid length. [ 469.110291][T13340] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2622'. [ 469.907258][T13340] veth0_macvtap: left promiscuous mode [ 474.014972][T13395] netlink: 'syz.3.2643': attribute type 9 has an invalid length. [ 474.040800][T13395] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2643'. [ 474.808983][T13408] netlink: 'syz.2.2645': attribute type 21 has an invalid length. [ 477.051419][T13439] netlink: 'syz.2.2657': attribute type 10 has an invalid length. [ 477.065627][T13439] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2657'. [ 477.553892][T13450] netlink: 'syz.3.2660': attribute type 21 has an invalid length. [ 477.565260][T13452] netlink: 'syz.3.2660': attribute type 10 has an invalid length. [ 477.892312][T13464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 477.941247][T13464] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2663'. [ 477.981634][T13465] netlink: 'syz.2.2662': attribute type 10 has an invalid length. [ 478.018429][T13465] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2662'. [ 478.176896][T13471] netlink: 'syz.3.2666': attribute type 2 has an invalid length. [ 478.200416][T13471] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2666'. [ 478.593591][T13465] caif0: entered promiscuous mode [ 478.600784][T13465] caif0: entered allmulticast mode [ 478.606224][T13465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.900591][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.0 [ 479.990801][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 10.1.1.2 [ 481.468692][T13556] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 481.483128][T13556] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2699'. [ 482.270236][T13565] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2694'. [ 482.280898][T13565] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 482.289266][T13565] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 482.900688][T13578] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 483.055579][T13563] netlink: 176972 bytes leftover after parsing attributes in process `syz.4.2693'. [ 483.120572][T13575] netlink: 'syz.2.2696': attribute type 39 has an invalid length. [ 483.311369][T13575] hsr_slave_1 (unregistering): left promiscuous mode [ 483.353751][T13563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2693'. [ 484.113374][T13611] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2711'. [ 484.579546][T13618] netlink: 'syz.2.2714': attribute type 1 has an invalid length. [ 484.606295][T13618] netlink: 'syz.2.2714': attribute type 4 has an invalid length. [ 484.640738][T13618] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2714'. [ 485.044299][T13639] netlink: 'syz.2.2720': attribute type 3 has an invalid length. [ 485.062690][T13639] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2720'. [ 485.116932][T13642] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2720'. [ 485.142897][T13642] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 485.147172][T13641] vxcan1: entered promiscuous mode [ 485.174250][T13641] vxcan1: entered allmulticast mode [ 485.364293][T13645] netlink: 'syz.2.2720': attribute type 10 has an invalid length. [ 485.394063][T13645] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.405718][T13645] bond0: (slave team0): Enslaving as an active interface with an up link [ 485.415434][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2721'. [ 486.342977][T13666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.851704][T13681] tap1: tun_chr_ioctl cmd 1074025677 [ 486.857511][T13681] tap1: linktype set to 778 [ 486.949718][T13687] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 487.366934][T13685] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2734'. [ 487.387727][T13685] openvswitch: netlink: Message has 20476 unknown bytes. [ 487.875290][T13704] hsr0: left allmulticast mode [ 487.884254][T13704] hsr_slave_0: left allmulticast mode [ 487.998947][T13704] bridge0: port 3(hsr0) entered disabled state [ 489.107108][T13704] bridge_slave_1: left allmulticast mode [ 489.123584][T13704] bridge_slave_1: left promiscuous mode [ 489.602228][T13704] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.688894][T13704] bridge_slave_0: left allmulticast mode [ 489.698752][T13704] bridge_slave_0: left promiscuous mode [ 489.709377][T13704] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.045924][T13711] netlink: 'syz.3.2742': attribute type 21 has an invalid length. [ 490.054539][T13719] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2742'. [ 490.065428][T13739] .&nr: renamed from bond_slave_1 (while UP) [ 491.570685][T13762] netlink: 'syz.2.2758': attribute type 10 has an invalid length. [ 491.597877][T13762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.622700][T13762] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 491.977012][T13776] netlink: 'syz.0.2761': attribute type 1 has an invalid length. [ 491.985319][T13776] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2761'. [ 492.059549][T13774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2761'. [ 493.861023][T13776] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 493.893013][T13776] bridge0: port 3(hsr0) entered disabled state [ 493.951656][T13776] hsr0: left allmulticast mode [ 493.956594][T13776] hsr_slave_0: left allmulticast mode [ 493.968315][T13776] hsr_slave_1: left allmulticast mode [ 493.974044][T13776] hsr0: left promiscuous mode [ 493.979025][T13776] bridge0: port 3(hsr0) entered disabled state [ 493.999682][T13776] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 494.017582][T13774] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2761'. [ 496.705040][T13825] netlink: 'syz.2.2777': attribute type 29 has an invalid length. [ 496.726424][T13825] netlink: 'syz.2.2777': attribute type 29 has an invalid length. [ 496.741906][T13830] netlink: 'syz.2.2777': attribute type 29 has an invalid length. [ 496.781994][T13833] netlink: 'syz.2.2777': attribute type 29 has an invalid length. [ 497.023151][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2781'. [ 497.050442][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2781'. [ 497.081486][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2781'. [ 497.543309][T13852] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2783'. [ 497.809882][T13857] netlink: 'syz.4.2784': attribute type 10 has an invalid length. [ 498.906484][T13882] netlink: 'syz.2.2788': attribute type 10 has an invalid length. [ 499.499940][T13889] tap1: tun_chr_ioctl cmd 1074025677 [ 499.533077][T13889] tap1: linktype set to 778 [ 500.400637][T13904] netlink: 'syz.4.2793': attribute type 10 has an invalid length. [ 500.945209][T13927] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2797'. [ 500.948602][T13909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.962868][T13927] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2797'. [ 501.746655][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.753191][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.262055][T13926] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2797'. [ 505.553193][T13979] netlink: 'syz.2.2814': attribute type 21 has an invalid length. [ 506.479636][T13985] netlink: 'syz.0.2815': attribute type 10 has an invalid length. [ 506.500747][T13985] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2815'. [ 506.521877][T13985] hsr0: entered promiscuous mode [ 506.529314][T13985] bridge0: port 3(hsr0) entered blocking state [ 506.559735][T13985] bridge0: port 3(hsr0) entered disabled state [ 506.576464][T13985] hsr0: entered allmulticast mode [ 506.609579][T13985] hsr_slave_0: entered allmulticast mode [ 506.645029][T13989] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2816'. [ 506.658951][T13985] hsr_slave_1: entered allmulticast mode [ 506.670257][T13985] bridge0: port 3(hsr0) entered blocking state [ 506.676661][T13985] bridge0: port 3(hsr0) entered forwarding state [ 506.825897][T13998] netlink: 'syz.2.2819': attribute type 9 has an invalid length. [ 506.859237][T13998] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2819'. [ 506.892674][T13999] netlink: 'syz.2.2819': attribute type 21 has an invalid length. [ 506.902892][T13999] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.2819'. [ 507.681659][T14033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2830'. [ 507.769722][T14033] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2830'. [ 507.841938][T14033] bridge_slave_0: entered allmulticast mode [ 507.910960][T14033] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2830'. [ 510.340423][T14105] netlink: 'syz.0.2855': attribute type 21 has an invalid length. [ 510.348504][T14105] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2855'. [ 510.485844][T14109] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2856'. [ 510.495618][T14109] openvswitch: netlink: IP tunnel dst address not specified [ 510.524524][T14109] netlink: 'syz.0.2856': attribute type 2 has an invalid length. [ 512.136328][T14128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2865'. [ 512.678068][T14157] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2872'. [ 514.089425][T14173] netlink: 'syz.2.2876': attribute type 4 has an invalid length. [ 514.126366][T14173] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2876'. [ 514.379369][T14173] .`: renamed from bond0 (while UP) [ 516.798171][T14223] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2888'. [ 516.850887][T14223] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 517.170556][T14230] netlink: 'syz.0.2892': attribute type 21 has an invalid length. [ 518.422516][T14252] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2898'. [ 519.273172][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 523.179224][T14331] mac80211_hwsim hwsim16 wlan0: entered promiscuous mode [ 523.271817][T14331] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 524.602831][T14343] netlink: 'syz.3.2927': attribute type 10 has an invalid length. [ 524.820274][T14343] team0: Device ipvlan1 failed to register rx_handler [ 525.011923][T14357] netlink: 'syz.0.2932': attribute type 39 has an invalid length. [ 525.887169][T14368] netlink: 'syz.2.2933': attribute type 4 has an invalid length. [ 525.898383][T14368] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2933'. [ 525.926055][T14373] netlink: 'syz.4.2935': attribute type 10 has an invalid length. [ 525.934311][T14373] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2935'. [ 525.943654][T14370] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 526.187521][T14380] netlink: 'syz.3.2938': attribute type 10 has an invalid length. [ 526.204283][T14384] netlink: 'syz.2.2937': attribute type 29 has an invalid length. [ 526.258738][T14380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.282557][T14380] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 526.299084][T14384] netlink: 'syz.2.2937': attribute type 29 has an invalid length. [ 526.313192][T14376] netlink: 'syz.2.2937': attribute type 29 has an invalid length. [ 526.325450][T14385] netlink: 'syz.2.2937': attribute type 29 has an invalid length. [ 526.451169][T14392] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2942'. [ 528.183719][T14434] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2951'. [ 529.316169][T14435] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2951'. [ 530.735851][T14474] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.2967'. [ 534.560672][ T5773] Bluetooth: hci0: command 0x0406 tx timeout [ 535.424045][T14560] validate_nla: 6 callbacks suppressed [ 535.424067][T14560] netlink: 'syz.3.2998': attribute type 3 has an invalid length. [ 535.446261][T14560] netlink: 'syz.3.2998': attribute type 1 has an invalid length. [ 535.455888][T14560] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2998'. [ 536.384763][T14599] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3009'. [ 536.618803][T14599] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3009'. [ 536.644581][T14600] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 536.701729][T14600] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 536.749739][T14601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3009'. [ 537.338906][T14626] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.3023'. [ 537.383854][T14631] netlink: 'syz.0.3024': attribute type 10 has an invalid length. [ 537.400866][T14631] bridge0: port 3(hsr0) entered disabled state [ 537.409301][T14631] hsr0: left allmulticast mode [ 537.414387][T14631] hsr_slave_0: left allmulticast mode [ 537.419921][T14631] hsr_slave_1: left allmulticast mode [ 537.425942][T14631] hsr0: left promiscuous mode [ 537.431224][T14631] bridge0: port 3(hsr0) entered disabled state [ 537.441515][T14633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3024'. [ 537.452288][T14631] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 537.469428][T14633] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3024'. [ 537.485014][T14631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3024'. [ 537.794223][T14639] Ÿë: port 1(gretap0) entered blocking state [ 537.818300][T14639] Ÿë: port 1(gretap0) entered disabled state [ 537.834986][T14639] gretap0: entered allmulticast mode [ 537.847047][T14639] gretap0: entered promiscuous mode [ 537.859772][T14643] Ÿë: port 2(veth0_to_team) entered blocking state [ 537.867494][T14643] Ÿë: port 2(veth0_to_team) entered disabled state [ 537.885865][T14643] veth0_to_team: entered allmulticast mode [ 537.894507][T14643] veth0_to_team: entered promiscuous mode [ 538.311449][T14662] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.3036'. [ 539.482487][T14688] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 539.583961][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.1.5 [ 539.665699][T14688] team0: Port device geneve1 added [ 539.695489][T14688] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 539.791867][T14688] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 539.816889][T14688] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 539.866375][T14688] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 539.877456][T14688] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 539.896763][T14695] netlink: 'syz.3.3045': attribute type 3 has an invalid length. [ 539.950556][T14695] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3045'. [ 540.687642][T14713] validate_nla: 29 callbacks suppressed [ 540.687659][T14713] netlink: 'syz.0.3051': attribute type 29 has an invalid length. [ 540.712386][T14713] netlink: 'syz.0.3051': attribute type 29 has an invalid length. [ 540.949966][T14731] netlink: 'syz.4.3056': attribute type 29 has an invalid length. [ 540.968918][T14731] netlink: 'syz.4.3056': attribute type 29 has an invalid length. [ 540.985579][T14733] netlink: 'syz.4.3056': attribute type 29 has an invalid length. [ 540.994889][T14731] netlink: 'syz.4.3056': attribute type 29 has an invalid length. [ 542.863282][T14787] __nla_validate_parse: 1 callbacks suppressed [ 542.863301][T14787] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3073'. [ 543.011016][T14792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3077'. [ 544.881744][ T5773] Bluetooth: hci1: command 0x0406 tx timeout [ 548.895759][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3097'. [ 549.058528][T14870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3098'. [ 550.325719][T14904] netlink: 'syz.3.3109': attribute type 3 has an invalid length. [ 550.869514][T14918] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3111'. [ 551.293561][T14932] netlink: 'syz.4.3116': attribute type 29 has an invalid length. [ 551.320232][T14932] netlink: 'syz.4.3116': attribute type 29 has an invalid length. [ 551.350197][T14935] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3117'. [ 551.359832][T14935] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 551.369337][T14935] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 551.790864][T14936] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3117'. [ 552.343285][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3121'. [ 552.766272][T14958] netlink: 'syz.2.3124': attribute type 12 has an invalid length. [ 552.785182][T14958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3124'. [ 553.565275][T14984] netlink: 'syz.2.3134': attribute type 39 has an invalid length. [ 553.811566][T14994] delete_channel: no stack [ 553.826488][T14994] delete_channel: no stack [ 554.586497][T15001] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3139'. [ 554.960493][T15010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 555.006938][T15018] netlink: 'syz.3.3144': attribute type 21 has an invalid length. [ 555.130421][T15018] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3144'. [ 555.183182][T15018] netlink: 'syz.3.3144': attribute type 4 has an invalid length. [ 555.270552][T15018] netlink: 'syz.3.3144': attribute type 5 has an invalid length. [ 555.363852][T15018] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3144'. [ 555.430254][T15026] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3146'. [ 556.259569][T15044] netlink: 'syz.0.3153': attribute type 2 has an invalid length. [ 556.278056][T15044] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3153'. [ 556.482970][T15044] netlink: 'syz.0.3153': attribute type 21 has an invalid length. [ 557.168884][T15048] netlink: 'syz.3.3154': attribute type 10 has an invalid length. [ 557.199826][T15048] bridge0: port 3(hsr0) entered disabled state [ 557.206392][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.214376][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.262252][T15048] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 557.316758][T15048] bridge0: port 3(hsr0) entered blocking state [ 557.323503][T15048] bridge0: port 3(hsr0) entered forwarding state [ 557.330434][T15048] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.337846][T15048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.345711][T15048] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.353069][T15048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.395506][T15048] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 557.408674][T15052] netlink: 'syz.2.3155': attribute type 1 has an invalid length. [ 557.694472][T15056] netlink: 'syz.0.3156': attribute type 27 has an invalid length. [ 557.730982][T15056] netlink: 'syz.0.3156': attribute type 3 has an invalid length. [ 557.738842][T15056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3156'. [ 559.091080][T15105] netlink: 'syz.0.3169': attribute type 6 has an invalid length. [ 559.128605][T15105] netlink: 'syz.0.3169': attribute type 10 has an invalid length. [ 559.171630][T15105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3169'. [ 559.211161][T15105] ipvlan1: entered promiscuous mode [ 559.216468][T15105] ipvlan1: entered allmulticast mode [ 559.255371][T15105] veth0_vlan: entered allmulticast mode [ 559.277340][T15105] bridge0: port 3(ipvlan1) entered blocking state [ 559.290639][T15105] bridge0: port 3(ipvlan1) entered disabled state [ 559.305251][T15105] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 559.409063][T15117] netlink: 'syz.4.3172': attribute type 10 has an invalid length. [ 559.452264][T15119] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3174'. [ 560.794663][T15151] netlink: 'syz.0.3186': attribute type 17 has an invalid length. [ 560.810423][T15151] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3186'. [ 560.840806][T15151] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3186'. [ 561.740713][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.1.5 [ 562.261482][T15181] netlink: 'syz.0.3197': attribute type 1 has an invalid length. [ 562.286460][T15181] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3197'. [ 562.828689][T15205] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3205'. [ 563.615416][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.622336][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.249601][T15223] netlink: 'syz.2.3209': attribute type 10 has an invalid length. [ 564.262475][T15223] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3209'. [ 564.275790][T15223] .`: entered promiscuous mode [ 564.284220][T15223] bond_slave_0: entered promiscuous mode [ 564.293317][T15223] bond_slave_1: entered promiscuous mode [ 564.320655][T15223] batadv_slave_0: entered promiscuous mode [ 564.332191][T15223] team0: entered promiscuous mode [ 564.338234][T15223] team_slave_0: entered promiscuous mode [ 564.340073][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3209'. [ 564.345633][T15223] team_slave_1: entered promiscuous mode [ 564.362728][T15223] geneve1: entered promiscuous mode [ 564.375853][T15223] batadv0: entered promiscuous mode [ 564.398455][T15223] 8021q: adding VLAN 0 to HW filter on device .` [ 564.440630][T15222] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3208'. [ 564.451643][T15228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3209'. [ 564.609061][T15231] netlink: 'syz.3.3212': attribute type 29 has an invalid length. [ 564.617562][T15231] netlink: 'syz.3.3212': attribute type 29 has an invalid length. [ 564.629118][T15231] netlink: 'syz.3.3212': attribute type 29 has an invalid length. [ 565.271956][T15221] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3210'. [ 565.297388][T15221] bridge_slave_1: default FDB implementation only supports local addresses [ 568.454005][T15304] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3231'. [ 568.505227][T15304] netlink: 'syz.2.3231': attribute type 10 has an invalid length. [ 568.642681][ T51] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 568.644733][T15310] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3232'. [ 569.179889][T15304] team0: Device hsr_slave_0 failed to register rx_handler [ 569.553779][T15321] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3235'. [ 570.135926][T15338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.322164][T15349] netlink: 'syz.0.3244': attribute type 2 has an invalid length. [ 570.735659][T15359] netlink: 'syz.3.3248': attribute type 29 has an invalid length. [ 570.763765][T15359] netlink: 'syz.3.3248': attribute type 29 has an invalid length. [ 570.803313][T15362] netlink: 'syz.3.3248': attribute type 29 has an invalid length. [ 570.945237][T15364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3250'. [ 571.515790][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 0.0.0.6 [ 571.637194][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.1.5 [ 575.307684][T15385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3255'. [ 575.479975][T15385] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.721294][T15385] bridge_slave_0 (unregistering): left allmulticast mode [ 575.759042][T15385] bridge_slave_0 (unregistering): left promiscuous mode [ 575.785574][T15385] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.163341][T15403] vcan0: entered allmulticast mode [ 576.397569][T15411] netlink: 'syz.4.3262': attribute type 11 has an invalid length. [ 576.453178][T15411] netlink: 184116 bytes leftover after parsing attributes in process `syz.4.3262'. [ 577.040513][ T51] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 577.783498][T15450] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3277'. [ 577.861170][T15450] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 579.318692][T15480] netlink: 'syz.0.3285': attribute type 11 has an invalid length. [ 580.007293][T15494] netlink: 'syz.0.3289': attribute type 10 has an invalid length. [ 580.244929][T15503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3291'. [ 583.394617][T15563] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3308'. [ 586.512097][T15602] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3320'. [ 586.914918][T15624] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.3326'. [ 587.294408][T15636] netlink: 'syz.3.3331': attribute type 10 has an invalid length. [ 587.464791][T15636] team0: Port device macvlan0 added [ 588.761774][T15663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.786582][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 588.800097][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 588.814448][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 588.829319][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 588.927645][T15675] netlink: 'syz.3.3344': attribute type 19 has an invalid length. [ 590.223003][T15693] IPv6: NLM_F_CREATE should be specified when creating new route [ 590.271128][T15693] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3351'. [ 590.769557][T15716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3354'. [ 590.782610][T15715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3354'. [ 590.856219][T15721] netlink: 'syz.4.3355': attribute type 3 has an invalid length. [ 590.869352][T15721] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3355'. [ 593.116752][T15752] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 593.128490][T15752] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 594.267561][T15767] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3370'. [ 594.569613][T15770] netlink: 'syz.4.3371': attribute type 8 has an invalid length. [ 594.604612][T15770] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3371'. [ 596.597805][T15779] netlink: 'syz.0.3375': attribute type 33 has an invalid length. [ 596.610065][T15779] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3375'. [ 602.476297][T15811] netlink: 'syz.0.3383': attribute type 39 has an invalid length. [ 603.311141][T15851] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3389'. [ 603.331298][T15851] netlink: 21096 bytes leftover after parsing attributes in process `syz.2.3389'. [ 603.346643][T15851] tipc: Started in network mode [ 603.354968][T15851] tipc: Node identity 1a, cluster identity 4711 [ 603.371102][T15851] tipc: Node number set to 26 [ 603.616355][T15874] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3394'. [ 604.027201][T15888] netlink: 'syz.2.3399': attribute type 10 has an invalid length. [ 604.076898][T15888] dummy0: entered promiscuous mode [ 604.097315][T15888] .`: (slave dummy0): Enslaving as an active interface with an up link [ 605.095253][ T51] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 605.429768][T15928] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3411'. [ 606.122726][T15958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3416'. [ 606.168683][T15958] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3416'. [ 606.261577][T15960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3416'. [ 606.352461][T15963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3416'. [ 606.390435][ T51] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 606.856699][T15967] netlink: 'syz.4.3421': attribute type 3 has an invalid length. [ 606.907405][T15967] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.3421'. [ 608.950888][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 10.1.1.1 [ 609.469380][T15984] syzkaller0: entered promiscuous mode [ 609.482137][T15984] syzkaller0: entered allmulticast mode [ 609.960967][T15997] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3428'. [ 612.514506][T15997] netlink: 22828 bytes leftover after parsing attributes in process `syz.0.3428'. [ 612.687237][T16011] netlink: 'syz.3.3434': attribute type 2 has an invalid length. [ 612.695290][T16011] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3434'. [ 614.621624][T16026] netlink: 'syz.4.3437': attribute type 5 has an invalid length. [ 615.136332][T16046] netlink: 'syz.2.3442': attribute type 12 has an invalid length. [ 615.158368][T16046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3442'. [ 615.176447][T16053] netlink: 'syz.0.3443': attribute type 10 has an invalid length. [ 615.232154][T16053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.246961][T16053] team0: Port device bond0 added [ 617.902147][T16112] sit0: entered allmulticast mode [ 618.030537][T16117] netlink: 'syz.0.3462': attribute type 2 has an invalid length. [ 618.038481][T16117] netlink: 'syz.0.3462': attribute type 8 has an invalid length. [ 618.066202][T16117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3462'. [ 618.090111][T16116] netlink: 'syz.2.3464': attribute type 21 has an invalid length. [ 618.126484][T16114] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 619.033775][ T51] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 619.035442][ T51] Bluetooth: hci2: hardware error 0x0f [ 619.202536][T16151] netlink: 'syz.4.3475': attribute type 1 has an invalid length. [ 619.210550][T16151] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.3475'. [ 619.323217][T16154] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3478'. [ 619.350505][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 619.385316][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 619.738537][T16163] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.3477'. [ 619.751380][T16162] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 619.764797][T16160] netlink: 'syz.2.3473': attribute type 39 has an invalid length. [ 620.629078][ T5773] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 620.945493][T16193] netlink: 'syz.2.3486': attribute type 10 has an invalid length. [ 620.961800][T16193] netlink: 'syz.2.3486': attribute type 10 has an invalid length. [ 620.969895][T16193] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.3486'. [ 620.992570][T16193] openvswitch: netlink: Message has 4 unknown bytes. [ 621.100531][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 621.959454][T16219] syzkaller0: entered promiscuous mode [ 621.970446][T16219] syzkaller0: entered allmulticast mode [ 624.633099][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.639953][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.919392][T16234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3499'. [ 627.057134][T16274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.064549][T16274] IPv6: NLM_F_CREATE should be set when creating new route [ 627.071984][T16274] IPv6: NLM_F_CREATE should be set when creating new route [ 627.079343][T16274] IPv6: NLM_F_CREATE should be set when creating new route [ 627.588728][T16288] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3513'. [ 627.956515][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 627.972279][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3516'. [ 627.993710][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3516'. [ 628.009153][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3516'. [ 628.031632][T16300] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3516'. [ 628.051994][T16300] netlink: 'syz.2.3516': attribute type 1 has an invalid length. [ 628.060066][T16300] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3516'. [ 628.493049][T16303] netlink: 'syz.2.3517': attribute type 33 has an invalid length. [ 628.532556][T16303] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3517'. [ 631.864228][T16381] delete_channel: no stack [ 631.879231][T16381] delete_channel: no stack [ 632.114944][T16390] delete_channel: no stack [ 632.151678][T16391] delete_channel: no stack [ 632.156519][T16390] delete_channel: no stack [ 632.183134][T16391] delete_channel: no stack [ 632.614616][ T51] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 633.439817][T16426] netlink: 'syz.3.3551': attribute type 9 has an invalid length. [ 633.461946][T16426] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3551'. [ 634.042576][T16443] netlink: 'syz.2.3555': attribute type 10 has an invalid length. [ 634.058284][T16443] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3555'. [ 634.069892][T16443] netlink: 'syz.2.3555': attribute type 4 has an invalid length. [ 635.942453][T16480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3565'. [ 636.438709][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 255 [ 636.789934][T16501] netlink: 204416 bytes leftover after parsing attributes in process `syz.4.3563'. [ 636.862121][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3563'. [ 637.788606][T16538] delete_channel: no stack [ 638.720022][T16555] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3583'. [ 638.905312][T16559] netlink: 'syz.4.3583': attribute type 21 has an invalid length. [ 638.929123][T16559] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3583'. [ 639.856754][T16564] netlink: set zone limit has 8 unknown bytes [ 640.391681][T16577] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3591'. [ 640.468333][T16577] openvswitch: netlink: Duplicate key (type 0). [ 640.603368][T16575] netlink: 'syz.4.3590': attribute type 10 has an invalid length. [ 640.661936][T16580] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3590'. [ 640.739131][T16575] bridge0: port 3(hsr0) entered disabled state [ 640.908573][T16575] hsr0: left allmulticast mode [ 640.915179][T16575] hsr_slave_0: left allmulticast mode [ 640.937501][T16575] hsr_slave_1: left allmulticast mode [ 640.957996][T16575] hsr0: left promiscuous mode [ 640.970069][T16575] bridge0: port 3(hsr0) entered disabled state [ 641.162876][T16580] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3590'. [ 641.313033][T16597] netlink: 'syz.3.3596': attribute type 3 has an invalid length. [ 641.332475][T16588] netlink: 204416 bytes leftover after parsing attributes in process `syz.2.3592'. [ 641.421863][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3592'. [ 641.440627][T16597] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3596'. [ 641.592433][T16597] netlink: 'syz.3.3596': attribute type 3 has an invalid length. [ 641.611156][T16597] netlink: 'syz.3.3596': attribute type 1 has an invalid length. [ 641.641600][T16597] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.3596'. [ 642.033710][T16614] delete_channel: no stack [ 642.223466][T16625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3602'. [ 642.567797][T16633] netlink: 'syz.2.3602': attribute type 21 has an invalid length. [ 642.623794][T16629] netlink: 'syz.4.3603': attribute type 29 has an invalid length. [ 642.716954][T16629] netlink: 'syz.4.3603': attribute type 29 has an invalid length. [ 642.812064][T16632] netlink: 'syz.4.3603': attribute type 29 has an invalid length. [ 642.822566][T16634] netlink: 'syz.4.3603': attribute type 29 has an invalid length. [ 643.360908][T16657] IPv6: Can't replace route, no match found [ 643.677439][T16664] @ÿ: renamed from bond_slave_0 (while UP) [ 644.388479][T16680] __nla_validate_parse: 1 callbacks suppressed [ 644.388500][T16680] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3617'. [ 644.409806][T16680] bridge_slave_1: default FDB implementation only supports local addresses [ 644.584513][T16682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 644.592496][T16682] IPv6: NLM_F_CREATE should be set when creating new route [ 644.600112][T16682] IPv6: NLM_F_CREATE should be set when creating new route [ 644.607766][T16682] IPv6: NLM_F_CREATE should be set when creating new route [ 644.836231][T16694] validate_nla: 1 callbacks suppressed [ 644.836249][T16694] netlink: 'syz.2.3618': attribute type 10 has an invalid length. [ 644.912606][T16696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3618'. [ 645.257421][T16694] hsr0: left promiscuous mode [ 645.297257][T16694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 645.355395][T16694] hsr0: entered promiscuous mode [ 645.380060][T16694] team0: Port device hsr0 added [ 645.408639][T16696] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3618'. [ 645.436538][T16691] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3619'. [ 645.523039][T16700] netlink: 'syz.3.3619': attribute type 21 has an invalid length. [ 645.550782][T16700] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3619'. [ 645.591928][T16698] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3618'. [ 645.644992][T16705] netlink: 'syz.0.3622': attribute type 6 has an invalid length. [ 645.658304][T16705] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3622'. [ 646.558441][T16716] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3627'. [ 646.797357][T16724] : port 1(ip6gretap0) entered blocking state [ 646.806784][T16724] : port 1(ip6gretap0) entered disabled state [ 646.813609][T16724] ip6gretap0: entered allmulticast mode [ 646.820084][T16724] ip6gretap0: entered promiscuous mode [ 646.877920][T16724] ip6gretap0: left allmulticast mode [ 646.899584][T16724] ip6gretap0: left promiscuous mode [ 646.932663][T16724] : port 1(ip6gretap0) entered disabled state [ 647.078191][T16735] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3631'. [ 647.364793][T16739] netlink: 'syz.4.3634': attribute type 10 has an invalid length. [ 647.375226][T16739] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3634'. [ 647.402604][T16740] netlink: 'syz.3.3633': attribute type 10 has an invalid length. [ 647.436077][T16740] bridge0: port 3(hsr0) entered disabled state [ 647.506083][T16740] hsr0: left allmulticast mode [ 647.523438][T16740] hsr_slave_0: left allmulticast mode [ 647.546072][T16740] hsr_slave_1: left allmulticast mode [ 647.566425][T16740] hsr0: left promiscuous mode [ 647.580132][T16740] bridge0: port 3(hsr0) entered disabled state [ 647.611864][T16740] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 648.069957][T16756] netlink: 'syz.0.3637': attribute type 12 has an invalid length. [ 649.099325][T16770] netlink: 'syz.3.3642': attribute type 21 has an invalid length. [ 649.741776][T16789] netlink: set zone limit has 8 unknown bytes [ 650.008614][T16801] macvlan1: entered promiscuous mode [ 650.612015][T16813] netlink: 'syz.0.3656': attribute type 2 has an invalid length. [ 650.718845][T16813] netlink: 'syz.0.3656': attribute type 8 has an invalid length. [ 650.744942][T16813] __nla_validate_parse: 8 callbacks suppressed [ 650.744980][T16813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3656'. [ 650.910666][T16816] netlink: 'syz.0.3656': attribute type 11 has an invalid length. [ 651.601098][T16833] netlink: 'syz.3.3661': attribute type 64 has an invalid length. [ 651.609317][T16833] netlink: 'syz.3.3661': attribute type 64 has an invalid length. [ 651.621864][T16832] netlink: 'syz.3.3661': attribute type 64 has an invalid length. [ 652.429828][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 652.479091][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 657.268076][T16916] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3682'. [ 657.538261][T16922] netlink: 'syz.4.3683': attribute type 21 has an invalid length. [ 657.547620][T16922] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3683'. [ 658.123480][ T51] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 658.124761][ T5773] Bluetooth: hci0: hardware error 0x0f [ 659.153088][T16983] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3702'. [ 660.300492][ T5773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 660.457088][T17000] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3706'. [ 663.584175][T17031] bridge_slave_1: left allmulticast mode [ 663.596656][T17031] bridge_slave_1: left promiscuous mode [ 663.611079][T17031] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.199676][T17036] netlink: 'syz.4.3717': attribute type 21 has an invalid length. [ 664.470739][ T6239] tipc: Subscription rejected, illegal request [ 664.656926][T17055] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3724'. [ 664.675067][T17055] bridge_slave_1: default FDB implementation only supports local addresses [ 664.975909][ T5773] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 665.557521][T17081] netlink: 'syz.4.3733': attribute type 2 has an invalid length. [ 665.634119][T17081] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3733'. [ 666.703874][T17100] netlink: 'syz.3.3737': attribute type 21 has an invalid length. [ 666.831339][T17100] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3737'. [ 668.979822][T17145] netlink: 'syz.0.3751': attribute type 10 has an invalid length. [ 668.991870][T17145] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3751'. [ 669.006769][T17150] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3749'. [ 669.249069][T17160] C: renamed from team_slave_0 (while UP) [ 669.256909][T17160] netlink: 'syz.0.3754': attribute type 2 has an invalid length. [ 669.265559][T17160] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3754'. [ 669.275188][T17160] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 669.437783][T17164] netlink: 'syz.0.3755': attribute type 1 has an invalid length. [ 669.446727][T17164] netlink: 'syz.0.3755': attribute type 4 has an invalid length. [ 669.470358][T17164] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3755'. [ 670.025628][T17176] netlink: 'syz.2.3759': attribute type 3 has an invalid length. [ 670.052953][T17176] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3759'. [ 670.408452][ T6240] tipc: Subscription rejected, illegal request [ 670.469896][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 670.541322][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 672.279800][T17233] syzkaller0: entered promiscuous mode [ 672.285567][T17233] syzkaller0: entered allmulticast mode [ 674.655808][T17253] netlink: 'syz.2.3782': attribute type 6 has an invalid length. [ 674.681497][T17253] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3782'. [ 674.717618][T17260] netlink: 'syz.0.3784': attribute type 2 has an invalid length. [ 674.750551][T17260] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3784'. [ 675.093015][T17272] netlink: 'syz.3.3785': attribute type 21 has an invalid length. [ 678.090840][T17316] netlink: 'syz.4.3800': attribute type 1 has an invalid length. [ 678.114426][T17316] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.3800'. [ 679.274805][T17348] netlink: 'syz.4.3804': attribute type 3 has an invalid length. [ 679.282778][T17348] netlink: 'syz.4.3804': attribute type 1 has an invalid length. [ 679.290592][T17348] netlink: 198800 bytes leftover after parsing attributes in process `syz.4.3804'. [ 679.652061][T17353] netlink: 'syz.0.3807': attribute type 29 has an invalid length. [ 679.696071][T17353] netlink: 'syz.0.3807': attribute type 29 has an invalid length. [ 680.170945][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 680.243999][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 684.724420][T17424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3826'. [ 684.760383][T17424] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3826'. [ 684.797718][T17437] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3829'. [ 685.792732][T17459] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 685.923887][T17458] delete_channel: no stack [ 686.063652][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.080656][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.180736][T17466] netlink: 'syz.0.3840': attribute type 2 has an invalid length. [ 686.188963][T17466] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3840'. [ 686.666579][T17491] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3846'. [ 686.938487][T17502] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3848'. [ 687.429315][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3853'. [ 687.763101][T17521] C: renamed from team_slave_0 [ 687.775065][T17521] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3854'. [ 687.807133][T17530] netlink: 'syz.2.3856': attribute type 2 has an invalid length. [ 687.830601][T17530] netlink: 51 bytes leftover after parsing attributes in process `syz.2.3856'. [ 688.288858][T17549] netlink: 'syz.2.3862': attribute type 27 has an invalid length. [ 688.328771][T17549] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3862'. [ 688.380472][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 688.460327][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 688.746337][T17552] bond_slave_1: entered promiscuous mode [ 688.780815][T17552] bond_slave_1: entered allmulticast mode [ 690.140419][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.1.5 [ 690.562576][T17601] netlink: 'syz.0.3878': attribute type 1 has an invalid length. [ 690.662096][T17601] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3878'. [ 690.733252][T17601] netlink: 'syz.0.3878': attribute type 1 has an invalid length. [ 690.753130][T17591] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3872'. [ 691.310616][T17628] netlink: 'syz.4.3884': attribute type 10 has an invalid length. [ 691.335759][T17628] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3884'. [ 691.351086][T17628] hsr0: entered promiscuous mode [ 691.362810][T17628] bridge0: port 3(hsr0) entered blocking state [ 691.369578][T17628] bridge0: port 3(hsr0) entered disabled state [ 691.378220][T17628] hsr0: entered allmulticast mode [ 691.405979][T17628] hsr_slave_0: entered allmulticast mode [ 691.420551][T17628] hsr_slave_1: entered allmulticast mode [ 691.474286][T17628] bridge0: port 3(hsr0) entered blocking state [ 691.480896][T17628] bridge0: port 3(hsr0) entered forwarding state [ 691.566978][T17634] netlink: 'syz.0.3886': attribute type 19 has an invalid length. [ 691.637716][T17634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3886'. [ 691.866717][T17635] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3887'. [ 691.992851][T17639] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3888'. [ 692.140591][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 692.150024][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 692.159583][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 692.169231][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.5 [ 692.238343][T17625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3884'. [ 692.249340][T17625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3884'. [ 692.268302][T17625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3884'. [ 692.285829][T17647] netlink: 'syz.2.3890': attribute type 10 has an invalid length. [ 692.485180][T17647] .`: (slave dummy0): Releasing backup interface [ 692.546243][T17647] dummy0: left promiscuous mode [ 692.643359][T17647] dummy0: entered promiscuous mode [ 692.649344][T17647] team0: Port device dummy0 added [ 693.415871][T17685] wg2: entered promiscuous mode [ 693.425254][T17685] wg2: entered allmulticast mode [ 693.584366][ T5773] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 693.652814][T17692] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3900'. [ 693.756768][T17676] pim6reg1: entered promiscuous mode [ 693.983504][T17676] pim6reg1: entered allmulticast mode [ 695.877477][T17723] netlink: 'syz.3.3912': attribute type 10 has an invalid length. [ 695.928023][T17725] netlink: 'syz.0.3907': attribute type 1 has an invalid length. [ 695.937268][T17725] __nla_validate_parse: 1 callbacks suppressed [ 695.937284][T17725] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3907'. [ 695.980501][T17725] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3907'. [ 696.095126][T17728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3911'. [ 696.264352][T17723] team0: Port device dummy0 added [ 696.291009][T17720] netlink: 'syz.2.3911': attribute type 10 has an invalid length. [ 696.334055][T17720] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3911'. [ 696.541576][T17720] team0: Port device hsr0 removed [ 696.567763][T17728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3911'. [ 696.694248][T17723] syz.3.3912 (17723) used greatest stack depth: 17896 bytes left [ 697.684998][T17770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 698.207340][T17787] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 698.305377][T17784] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3926'. [ 698.512559][T17797] tap1: tun_chr_ioctl cmd 1074025675 [ 698.517958][T17797] tap1: persist enabled [ 698.527375][T17793] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3929'. [ 698.740888][T17790] tap1: tun_chr_ioctl cmd 21731 [ 698.865846][T17791] tap1: tun_chr_ioctl cmd 1074025675 [ 698.900569][T17791] tap1: persist enabled [ 699.269020][T17812] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3934'. [ 699.499232][T17812] team0: Port device team_slave_0 removed [ 699.509412][T17812] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 700.608703][T17840] netlink: 'syz.2.3942': attribute type 21 has an invalid length. [ 700.619027][T17840] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3942'. [ 700.817024][T17853] netlink: 8063 bytes leftover after parsing attributes in process `syz.2.3945'. [ 701.337929][T17868] -: renamed from syzkaller0 [ 701.399051][T17872] netlink: 'syz.2.3952': attribute type 1 has an invalid length. [ 701.407156][T17872] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3952'. [ 701.713823][T17878] netlink: 'syz.3.3953': attribute type 9 has an invalid length. [ 701.787723][T17878] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3953'. [ 701.828245][T17883] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3955'. [ 701.859362][T17887] netlink: 22 bytes leftover after parsing attributes in process `syz.2.3955'. [ 702.426747][T17895] tap2: tun_chr_ioctl cmd 1074025675 [ 702.442780][T17895] tap2: persist enabled [ 702.464475][T17898] netlink: 14023 bytes leftover after parsing attributes in process `syz.4.3958'. [ 703.156674][T17916] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3964'. [ 703.200100][T17916] team_slave_0: left promiscuous mode [ 703.408397][T17916] team0: Port device team_slave_0 removed [ 703.515332][T17916] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 704.965615][T17946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3972'. [ 705.159955][T17949] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3974'. [ 705.563230][T17962] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3978'. [ 706.065324][T17962] team0: Port device C removed [ 706.104380][T17962] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 706.155336][T17966] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3979'. [ 707.328648][T17994] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3983'. [ 707.381948][T17992] netlink: 'syz.4.3986': attribute type 27 has an invalid length. [ 707.404057][T17992] netlink: 'syz.4.3986': attribute type 4 has an invalid length. [ 707.444177][T17992] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3986'. [ 708.017438][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3987'. [ 709.171621][T18021] -: renamed from syzkaller0 [ 710.593891][T18029] delete_channel: no stack [ 710.717954][T18041] netlink: 'syz.3.3995': attribute type 1 has an invalid length. [ 710.750338][T18041] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3995'. [ 710.853710][T18039] netlink: 'syz.3.3995': attribute type 4 has an invalid length. [ 710.895208][T18039] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3995'. [ 710.963574][T18039] .`: renamed from bond0 (while UP) [ 711.574390][T18054] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 711.746943][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.767119][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.775892][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.785146][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.801166][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 711.810758][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.383193][ T51] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 712.495570][T18061] chnl_net:caif_netlink_parms(): no params data found [ 712.835240][T18095] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4010'. [ 713.011785][T18089] netlink: 'syz.2.4007': attribute type 10 has an invalid length. [ 713.118058][T18089] batman_adv: batadv0: Adding interface: netdevsim0 [ 713.126489][T18089] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 713.209674][T18111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4012'. [ 713.235883][T18061] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.249544][T18061] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.257252][T18061] bridge_slave_0: entered allmulticast mode [ 713.266411][T18061] bridge_slave_0: entered promiscuous mode [ 713.287990][T18061] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.300645][T18061] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.318150][T18061] bridge_slave_1: entered allmulticast mode [ 713.326066][T18061] bridge_slave_1: entered promiscuous mode [ 713.380651][T18111] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 713.427323][T18061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.440725][T18061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.502020][T18061] team0: Port device team_slave_0 added [ 713.519333][T18116] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.4014'. [ 713.530575][T18116] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.4014'. [ 713.538615][T18061] team0: Port device team_slave_1 added [ 713.626235][T18117] syzkaller0: entered promiscuous mode [ 713.636813][T18117] syzkaller0: entered allmulticast mode [ 713.715512][T18061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.730136][T18061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.766204][T18061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.780130][T18061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.782571][ T51] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 713.796130][T18061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.873128][T18061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.900404][ T51] Bluetooth: hci3: command tx timeout [ 714.140664][ T6240] wlan1: Trigger new scan to find an IBSS to join [ 715.990381][ T51] Bluetooth: hci3: command tx timeout [ 716.363955][T18061] hsr_slave_0: entered promiscuous mode [ 716.383119][T18061] hsr_slave_1: entered promiscuous mode [ 716.392402][T18061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.400026][T18061] Cannot create hsr debugfs directory [ 718.070507][ T51] Bluetooth: hci3: command tx timeout [ 718.971129][T18061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.102160][T18061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.207885][T15813] wlan1: Trigger new scan to find an IBSS to join [ 719.292113][T18061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.347849][T18162] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.4026'. [ 719.408808][T18162] : renamed from veth0_to_bond (while UP) [ 719.474547][T18061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.658857][T18165] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.4027'. [ 720.102917][T18156] syzkaller0: entered promiscuous mode [ 720.119250][T18156] syzkaller0: entered allmulticast mode [ 720.140677][ T51] Bluetooth: hci3: command tx timeout [ 720.399124][T17663] wlan1: Creating new IBSS network, BSSID 16:cf:d0:55:87:3a [ 723.105084][T18061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 723.135211][T18061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 723.164093][T18196] netlink: 'syz.0.4032': attribute type 12 has an invalid length. [ 723.179668][T18196] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4032'. [ 723.195139][T18061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 723.226673][T18061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 723.385048][T18196] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4032'. [ 723.400643][T18196] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.4032'. [ 723.625819][T18061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.686354][T18061] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.724095][T15837] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.731329][T15837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.747141][ T6240] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.754378][ T6240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.847030][T18209] netlink: zone id is out of range [ 723.858138][T18209] netlink: set zone limit has 8 unknown bytes [ 723.926579][T18061] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 723.954585][T18061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 726.279903][T18061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.468671][T18061] veth0_vlan: entered promiscuous mode [ 727.506542][T18061] veth1_vlan: entered promiscuous mode [ 727.586792][T18061] veth0_macvtap: entered promiscuous mode [ 727.607611][T18061] veth1_macvtap: entered promiscuous mode [ 727.659323][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.678958][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.701220][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.722476][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.736113][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.746758][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.767169][T18061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.790716][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.807013][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.818603][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.829320][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.839366][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.877543][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.894118][T18061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.910372][T18061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.920044][T18226] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4037'. [ 727.925055][T18061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.953866][T18061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.992968][T18061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.010130][T18061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.027151][T18061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.051140][T18226] : renamed from veth0_to_bond (while UP) [ 728.180519][T18232] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.4039'. [ 728.418851][T15813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.448258][T15813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.574768][T15813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.649760][T15813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 729.523974][T18267] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4050'. [ 729.947695][T18277] netlink: 'syz.2.4052': attribute type 39 has an invalid length. [ 730.117107][T18272] ================================================================== [ 730.125423][T18272] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 730.133265][T18272] Write of size 56 at addr ffff88802b8d2290 by task syz.3.4051/18272 [ 730.141441][T18272] [ 730.143786][T18272] CPU: 1 PID: 18272 Comm: syz.3.4051 Not tainted syzkaller #0 [ 730.151262][T18272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.161438][T18272] Call Trace: [ 730.164913][T18272] [ 730.167874][T18272] dump_stack_lvl+0x18c/0x250 [ 730.172589][T18272] ? __lock_acquire+0x7d40/0x7d40 [ 730.177628][T18272] ? show_regs_print_info+0x20/0x20 [ 730.182868][T18272] ? load_image+0x420/0x420 [ 730.187416][T18272] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 730.192895][T18272] ? __virt_addr_valid+0x18c/0x540 [ 730.198036][T18272] ? __virt_addr_valid+0x469/0x540 [ 730.203254][T18272] print_report+0xa8/0x210 [ 730.207706][T18272] ? __bpf_get_stackid+0x6bf/0x900 [ 730.212837][T18272] kasan_report+0x117/0x150 [ 730.217356][T18272] ? __bpf_get_stackid+0x6bf/0x900 [ 730.222488][T18272] kasan_check_range+0x241/0x290 [ 730.227435][T18272] ? __bpf_get_stackid+0x6bf/0x900 [ 730.232646][T18272] __asan_memcpy+0x40/0x70 [ 730.237076][T18272] __bpf_get_stackid+0x6bf/0x900 [ 730.242028][T18272] bpf_get_stackid_pe+0x343/0x410 [ 730.247150][T18272] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 730.252617][T18272] bpf_overflow_handler+0x43f/0x510 [ 730.257913][T18272] ? perf_event_output_forward+0x3e0/0x3e0 [ 730.263729][T18272] ? bpf_overflow_handler+0xde/0x510 [ 730.269059][T18272] ? tp_perf_event_destroy+0x20/0x20 [ 730.274382][T18272] ? __lock_acquire+0x1273/0x7d40 [ 730.279506][T18272] ? __perf_event_account_interrupt+0x187/0x280 [ 730.285766][T18272] __perf_event_overflow+0x447/0x630 [ 730.291072][T18272] perf_swevent_overflow+0x268/0x340 [ 730.296371][T18272] ? perf_event_switch_output+0x790/0x790 [ 730.302107][T18272] ? rcu_is_watching+0x15/0xb0 [ 730.306971][T18272] perf_swevent_event+0x45c/0x570 [ 730.312181][T18272] ? perf_tp_event+0x1520/0x1520 [ 730.317161][T18272] ? trace_call_bpf+0xc3/0x6c0 [ 730.321960][T18272] ___perf_sw_event+0x4a7/0x730 [ 730.326829][T18272] ? ___perf_sw_event+0x199/0x730 [ 730.331883][T18272] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 730.338320][T18272] ? __lock_acquire+0x1347/0x7d40 [ 730.343377][T18272] ? verify_lock_unused+0x140/0x140 [ 730.348591][T18272] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 730.354586][T18272] ? lock_chain_count+0x20/0x20 [ 730.359470][T18272] __perf_sw_event+0x139/0x270 [ 730.364257][T18272] do_user_addr_fault+0x123e/0x12c0 [ 730.369464][T18272] ? rcu_is_watching+0x15/0xb0 [ 730.374243][T18272] exc_page_fault+0x64/0x100 [ 730.378842][T18272] asm_exc_page_fault+0x26/0x30 [ 730.383701][T18272] RIP: 0010:strncpy_from_user+0xff/0x2d0 [ 730.389347][T18272] Code: 4c 89 ee e8 63 69 2a fd 49 83 fd 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 e4 4c 89 3c 24 49 89 de <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 730.408970][T18272] RSP: 0018:ffffc90003807b50 EFLAGS: 00050246 [ 730.415050][T18272] RAX: ffffffff845cbcad RBX: ffffc90003807c70 RCX: ffff88802a3f8000 [ 730.423045][T18272] RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000007 [ 730.431044][T18272] RBP: ffffc90003807d70 R08: ffff88802a3f8000 R09: 0000000000000003 [ 730.439026][T18272] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 730.447006][T18272] R13: 000000000000007f R14: ffffc90003807c70 R15: 0000000000000000 [ 730.455166][T18272] ? strncpy_from_user+0xdd/0x2d0 [ 730.460230][T18272] bpf_prog_load+0xcea/0x1670 [ 730.464952][T18272] ? map_freeze+0x420/0x420 [ 730.469473][T18272] ? __might_fault+0xaa/0x120 [ 730.474160][T18272] ? __might_fault+0xc6/0x120 [ 730.478844][T18272] ? __might_fault+0xaa/0x120 [ 730.483528][T18272] ? bpf_lsm_bpf+0x9/0x10 [ 730.487882][T18272] ? security_bpf+0x7e/0xa0 [ 730.492399][T18272] __sys_bpf+0x5ba/0x890 [ 730.496651][T18272] ? bpf_link_show_fdinfo+0x390/0x390 [ 730.502045][T18272] ? lock_chain_count+0x20/0x20 [ 730.506926][T18272] __x64_sys_bpf+0x7c/0x90 [ 730.511410][T18272] do_syscall_64+0x55/0xa0 [ 730.515836][T18272] ? clear_bhb_loop+0x40/0x90 [ 730.520528][T18272] ? clear_bhb_loop+0x40/0x90 [ 730.525226][T18272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.531135][T18272] RIP: 0033:0x7f526219c819 [ 730.535570][T18272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.555274][T18272] RSP: 002b:00007f526310f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 730.563726][T18272] RAX: ffffffffffffffda RBX: 00007f5262415fa0 RCX: 00007f526219c819 [ 730.571886][T18272] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 730.579860][T18272] RBP: 00007f5262232c91 R08: 0000000000000000 R09: 0000000000000000 [ 730.587923][T18272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.595930][T18272] R13: 00007f5262416038 R14: 00007f5262415fa0 R15: 00007fff93dec988 [ 730.603991][T18272] [ 730.607020][T18272] [ 730.609345][T18272] Allocated by task 18272: [ 730.613764][T18272] kasan_set_track+0x4e/0x70 [ 730.618488][T18272] __kasan_kmalloc+0x8f/0xa0 [ 730.623107][T18272] __kmalloc_node+0xb4/0x230 [ 730.627806][T18272] bpf_map_area_alloc+0x5e/0x110 [ 730.632849][T18272] prealloc_elems_and_freelist+0x86/0x1c0 [ 730.638579][T18272] stack_map_alloc+0x33a/0x4c0 [ 730.643353][T18272] map_create+0x877/0x12f0 [ 730.647859][T18272] __sys_bpf+0x651/0x890 [ 730.652170][T18272] __x64_sys_bpf+0x7c/0x90 [ 730.656589][T18272] do_syscall_64+0x55/0xa0 [ 730.661095][T18272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.666996][T18272] [ 730.669331][T18272] Last potentially related work creation: [ 730.675044][T18272] kasan_save_stack+0x3e/0x60 [ 730.679724][T18272] __kasan_record_aux_stack+0xaf/0xc0 [ 730.685433][T18272] call_rcu+0x153/0x950 [ 730.689596][T18272] nf_unregister_net_hooks+0xcb/0x130 [ 730.694984][T18272] nf_ct_netns_put+0x2d2/0x520 [ 730.699755][T18272] nf_conncount_destroy+0x41/0x150 [ 730.704874][T18272] ovs_ct_exit+0x9c/0x200 [ 730.709433][T18272] ovs_exit_net+0xed/0x7a0 [ 730.713874][T18272] cleanup_net+0x70a/0xbb0 [ 730.718312][T18272] process_scheduled_works+0xa5d/0x15d0 [ 730.723970][T18272] worker_thread+0xa55/0xfc0 [ 730.728571][T18272] kthread+0x2fa/0x390 [ 730.732645][T18272] ret_from_fork+0x48/0x80 [ 730.737068][T18272] ret_from_fork_asm+0x11/0x20 [ 730.741839][T18272] [ 730.744170][T18272] Second to last potentially related work creation: [ 730.750758][T18272] kasan_save_stack+0x3e/0x60 [ 730.755447][T18272] __kasan_record_aux_stack+0xaf/0xc0 [ 730.760827][T18272] call_rcu+0x153/0x950 [ 730.764991][T18272] __nf_register_net_hook+0x788/0x910 [ 730.770367][T18272] nf_register_net_hook+0xb2/0x190 [ 730.775488][T18272] nf_register_net_hooks+0x44/0x1b0 [ 730.780693][T18272] nf_ct_netns_do_get+0x213/0x5c0 [ 730.785725][T18272] nf_ct_netns_inet_get+0x3b/0x150 [ 730.790844][T18272] nf_conncount_init+0x127/0x380 [ 730.795787][T18272] ovs_ct_init+0x316/0x490 [ 730.800213][T18272] ovs_init_net+0x1e6/0x250 [ 730.804734][T18272] ops_init+0x397/0x640 [ 730.808905][T18272] setup_net+0x3b6/0xa30 [ 730.813249][T18272] copy_net_ns+0x36d/0x5e0 [ 730.817672][T18272] create_new_namespaces+0x3d3/0x6f0 [ 730.822962][T18272] copy_namespaces+0x430/0x4a0 [ 730.827822][T18272] copy_process+0x1724/0x3d80 [ 730.832505][T18272] kernel_clone+0x24b/0x8a0 [ 730.837015][T18272] __x64_sys_clone+0x1b7/0x230 [ 730.841787][T18272] do_syscall_64+0x55/0xa0 [ 730.846210][T18272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 730.852120][T18272] [ 730.854486][T18272] The buggy address belongs to the object at ffff88802b8d2280 [ 730.854486][T18272] which belongs to the cache kmalloc-cg-64 of size 64 [ 730.868779][T18272] The buggy address is located 16 bytes inside of [ 730.868779][T18272] allocated 40-byte region [ffff88802b8d2280, ffff88802b8d22a8) [ 730.882769][T18272] [ 730.885194][T18272] The buggy address belongs to the physical page: [ 730.891608][T18272] page:ffffea0000ae3480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b8d2 [ 730.901761][T18272] memcg:ffff888021b37801 [ 730.906183][T18272] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 730.914100][T18272] page_type: 0xffffffff() [ 730.918463][T18272] raw: 00fff00000000800 ffff888017c4da00 ffffea000090e3c0 dead000000000007 [ 730.927060][T18272] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888021b37801 [ 730.935647][T18272] page dumped because: kasan: bad access detected [ 730.942061][T18272] page_owner tracks the page as allocated [ 730.947948][T18272] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 6168, tgid 6158 (syz.1.97), ts 110152681086, free_ts 110130773525 [ 730.966068][T18272] post_alloc_hook+0x1c1/0x200 [ 730.970868][T18272] get_page_from_freelist+0x1951/0x19e0 [ 730.976444][T18272] __alloc_pages+0x1f0/0x460 [ 730.981139][T18272] alloc_slab_page+0x5d/0x160 [ 730.985917][T18272] new_slab+0x87/0x2d0 [ 730.990004][T18272] ___slab_alloc+0xc5d/0x12f0 [ 730.994805][T18272] __kmem_cache_alloc_node+0x19e/0x250 [ 731.000279][T18272] __kmalloc_node+0xa4/0x230 [ 731.004883][T18272] kvmalloc_node+0x70/0x180 [ 731.009418][T18272] nf_hook_entries_grow+0x27d/0x6d0 [ 731.014746][T18272] __nf_register_net_hook+0x2c9/0x910 [ 731.020169][T18272] nf_register_net_hook+0xb2/0x190 [ 731.025299][T18272] nf_register_net_hooks+0x44/0x1b0 [ 731.030505][T18272] ops_init+0x397/0x640 [ 731.034672][T18272] setup_net+0x3b6/0xa30 [ 731.038999][T18272] copy_net_ns+0x36d/0x5e0 [ 731.043512][T18272] page last free stack trace: [ 731.048186][T18272] free_unref_page_prepare+0x7b2/0x8c0 [ 731.053746][T18272] free_unref_page+0x32/0x2e0 [ 731.058455][T18272] ringbuf_map_free+0xc9/0x120 [ 731.063252][T18272] bpf_map_free_deferred+0xfc/0x120 [ 731.068560][T18272] process_scheduled_works+0xa5d/0x15d0 [ 731.074125][T18272] worker_thread+0xa55/0xfc0 [ 731.078847][T18272] kthread+0x2fa/0x390 [ 731.082921][T18272] ret_from_fork+0x48/0x80 [ 731.087432][T18272] ret_from_fork_asm+0x11/0x20 [ 731.092207][T18272] [ 731.094556][T18272] Memory state around the buggy address: [ 731.100199][T18272] ffff88802b8d2180: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 731.108306][T18272] ffff88802b8d2200: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 731.116394][T18272] >ffff88802b8d2280: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 731.124483][T18272] ^ [ 731.129857][T18272] ffff88802b8d2300: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 731.137925][T18272] ffff88802b8d2380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 731.145988][T18272] ================================================================== [ 731.154053][T18272] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 731.161246][T18272] CPU: 1 PID: 18272 Comm: syz.3.4051 Not tainted syzkaller #0 [ 731.168710][T18272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.178866][T18272] Call Trace: [ 731.182157][T18272] [ 731.185186][T18272] dump_stack_lvl+0x18c/0x250 [ 731.189886][T18272] ? show_regs_print_info+0x20/0x20 [ 731.195098][T18272] ? load_image+0x420/0x420 [ 731.199618][T18272] panic+0x2dc/0x730 [ 731.203520][T18272] ? __lock_acquire+0x7d40/0x7d40 [ 731.208577][T18272] ? bpf_jit_dump+0xd0/0xd0 [ 731.213122][T18272] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 731.219039][T18272] ? _raw_spin_unlock+0x40/0x40 [ 731.223940][T18272] ? __bpf_get_stackid+0x6bf/0x900 [ 731.229065][T18272] check_panic_on_warn+0x84/0xa0 [ 731.234014][T18272] ? __bpf_get_stackid+0x6bf/0x900 [ 731.239132][T18272] end_report+0x6f/0x130 [ 731.243404][T18272] kasan_report+0x128/0x150 [ 731.247930][T18272] ? __bpf_get_stackid+0x6bf/0x900 [ 731.253055][T18272] kasan_check_range+0x241/0x290 [ 731.257998][T18272] ? __bpf_get_stackid+0x6bf/0x900 [ 731.263318][T18272] __asan_memcpy+0x40/0x70 [ 731.267745][T18272] __bpf_get_stackid+0x6bf/0x900 [ 731.272693][T18272] bpf_get_stackid_pe+0x343/0x410 [ 731.277726][T18272] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 731.283191][T18272] bpf_overflow_handler+0x43f/0x510 [ 731.288408][T18272] ? perf_event_output_forward+0x3e0/0x3e0 [ 731.294310][T18272] ? bpf_overflow_handler+0xde/0x510 [ 731.300038][T18272] ? tp_perf_event_destroy+0x20/0x20 [ 731.305337][T18272] ? __lock_acquire+0x1273/0x7d40 [ 731.310381][T18272] ? __perf_event_account_interrupt+0x187/0x280 [ 731.316631][T18272] __perf_event_overflow+0x447/0x630 [ 731.321931][T18272] perf_swevent_overflow+0x268/0x340 [ 731.327242][T18272] ? perf_event_switch_output+0x790/0x790 [ 731.332977][T18272] ? rcu_is_watching+0x15/0xb0 [ 731.337756][T18272] perf_swevent_event+0x45c/0x570 [ 731.342791][T18272] ? perf_tp_event+0x1520/0x1520 [ 731.347734][T18272] ? trace_call_bpf+0xc3/0x6c0 [ 731.352514][T18272] ___perf_sw_event+0x4a7/0x730 [ 731.357373][T18272] ? ___perf_sw_event+0x199/0x730 [ 731.362494][T18272] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 731.368913][T18272] ? __lock_acquire+0x1347/0x7d40 [ 731.374043][T18272] ? verify_lock_unused+0x140/0x140 [ 731.379284][T18272] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 731.385284][T18272] ? lock_chain_count+0x20/0x20 [ 731.390144][T18272] __perf_sw_event+0x139/0x270 [ 731.394915][T18272] do_user_addr_fault+0x123e/0x12c0 [ 731.400124][T18272] ? rcu_is_watching+0x15/0xb0 [ 731.404906][T18272] exc_page_fault+0x64/0x100 [ 731.409506][T18272] asm_exc_page_fault+0x26/0x30 [ 731.414453][T18272] RIP: 0010:strncpy_from_user+0xff/0x2d0 [ 731.420183][T18272] Code: 4c 89 ee e8 63 69 2a fd 49 83 fd 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 e4 4c 89 3c 24 49 89 de <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 [ 731.439830][T18272] RSP: 0018:ffffc90003807b50 EFLAGS: 00050246 [ 731.445935][T18272] RAX: ffffffff845cbcad RBX: ffffc90003807c70 RCX: ffff88802a3f8000 [ 731.453923][T18272] RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000007 [ 731.461907][T18272] RBP: ffffc90003807d70 R08: ffff88802a3f8000 R09: 0000000000000003 [ 731.469888][T18272] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 731.477863][T18272] R13: 000000000000007f R14: ffffc90003807c70 R15: 0000000000000000 [ 731.485856][T18272] ? strncpy_from_user+0xdd/0x2d0 [ 731.490912][T18272] bpf_prog_load+0xcea/0x1670 [ 731.495785][T18272] ? map_freeze+0x420/0x420 [ 731.500310][T18272] ? __might_fault+0xaa/0x120 [ 731.505005][T18272] ? __might_fault+0xc6/0x120 [ 731.509683][T18272] ? __might_fault+0xaa/0x120 [ 731.514365][T18272] ? bpf_lsm_bpf+0x9/0x10 [ 731.518706][T18272] ? security_bpf+0x7e/0xa0 [ 731.523227][T18272] __sys_bpf+0x5ba/0x890 [ 731.527485][T18272] ? bpf_link_show_fdinfo+0x390/0x390 [ 731.532874][T18272] ? lock_chain_count+0x20/0x20 [ 731.537751][T18272] __x64_sys_bpf+0x7c/0x90 [ 731.542176][T18272] do_syscall_64+0x55/0xa0 [ 731.546614][T18272] ? clear_bhb_loop+0x40/0x90 [ 731.551345][T18272] ? clear_bhb_loop+0x40/0x90 [ 731.556047][T18272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.562131][T18272] RIP: 0033:0x7f526219c819 [ 731.566556][T18272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.586265][T18272] RSP: 002b:00007f526310f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 731.594785][T18272] RAX: ffffffffffffffda RBX: 00007f5262415fa0 RCX: 00007f526219c819 [ 731.602766][T18272] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 731.610752][T18272] RBP: 00007f5262232c91 R08: 0000000000000000 R09: 0000000000000000 [ 731.618731][T18272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.626707][T18272] R13: 00007f5262416038 R14: 00007f5262415fa0 R15: 00007fff93dec988 [ 731.634698][T18272] [ 731.638071][T18272] Kernel Offset: disabled [ 731.642421][T18272] Rebooting in 86400 seconds..