last executing test programs: 2m20.926339892s ago: executing program 0 (id=2946): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@ip_ttl={{0x14, 0x110}}], 0x18}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb7}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x22) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 2m19.577716934s ago: executing program 0 (id=2954): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3d8", 0x3e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}]}}, 0x0, 0x2a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m17.392641275s ago: executing program 0 (id=2960): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000100) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4c02, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000089000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c78335ca782a727387814d284a345419a6e8200ccf1ea757a73f0d9405c63a16168e406cb668694f52dc3d4ed80e1c6f"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socketpair(0x22, 0x2, 0x2, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x14, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m11.754233649s ago: executing program 0 (id=2966): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, 0x1}, 0xc) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x5f]}}, 0x0, 0x27}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x7, &(0x7f0000000380)=@raw=[@generic={0x7, 0x8, 0x0, 0x1000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb3b}], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x7f, &(0x7f0000000400)=""/127, 0x41000, 0x50, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x5, 0x10, 0x2, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r4], &(0x7f0000000600)=[{0x1, 0x2, 0xa, 0x1}, {0x2, 0x3, 0xb, 0x7}, {0x4, 0x4, 0x6, 0x8}, {0x0, 0x1, 0x10, 0x1}], 0x10, 0xf}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0xc000, r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r9, 0x0, 0x15, 0x90, &(0x7f0000000840)="261fb5174215bddc527f3a3dffaa06f29487b21ecb", &(0x7f0000000880)=""/144, 0x7, 0x0, 0xe, 0xa8, &(0x7f0000000940)="46cffdadb293a9c120196176bfe9", &(0x7f0000000980)="669ce4eacb95af3fa06d6c44958d302e7edc2dfa368ff0ffa37ebc46caeeed0028d7eb743071a49ca8a05fbdf6526bdff4c28ab1a4a1c21b3d35b143e96ea8ea2f4502e22c7400d0c3d34dd7883a3cd5043c186547793fc1b0d50f7da8666c9eb923ee83828e883d17e39d5a26b58397682e9fcace6781aea18e2e9793ddf60a19c655990bf33eb0f0cff6b702619567f75be928af078cd9929000b03d89f980c0de4f2a03569386", 0x4, 0x0, 0x8}, 0x50) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x572, @remote}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="f4001100022b3325a6d5b02f3af865fe8007000000007afefff50000090000000000000000", 0x25}, {&(0x7f0000000080)="e3da9b", 0x3}, {0x0, 0xbb}], 0x3}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r10, 0x11}, 0xa) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) socketpair(0x27, 0x4, 0x1, &(0x7f0000000200)) 2m9.488416713s ago: executing program 0 (id=2972): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'batadv_slave_0\x00', @random="02000000670b"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2}, @generic={0xbf, 0x4, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4c568, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x3}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r7, &(0x7f0000000340)="d905b63e86ca56518e6bf606107b8ab0ff6c51b287875ede3d7a6cc74c5b6b9432f653e226a93be2c87c29584d1856c74c0f381df6d5f486e15dec650d554c5b6fc534", &(0x7f00000003c0)=""/113}, 0x20) 2m5.931292857s ago: executing program 0 (id=2978): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) 1m50.59895906s ago: executing program 32 (id=2978): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r2, 0x0, 0x3, &(0x7f0000000200)='\\{\x00\xafO\xfcg2\xa1\xd8\x13\x8d\xc9\x16\xb5\x7f*2L\xdf\"\xd2\x91@\xb16'}, 0x12) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0x60000000}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) 9.077040676s ago: executing program 1 (id=3541): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$kcm(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.830257606s ago: executing program 1 (id=3549): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1081c2, 0x6, 0x800, 0x1, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x190, 0xfffffff3, 0x3, 0x6046, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x3f, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xd2, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="10000000040000000400000002", @ANYBLOB, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), 0x0, 0x2}, 0x20) 7.479347554s ago: executing program 1 (id=3553): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28470, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x101}, 0x11401a, 0x4, 0xffffffff, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000010b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0xe5, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x20}, 0x20040805) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000900)=r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x57, 0xe5e919b5517ad0d3, 0x0]}}, &(0x7f0000001f00)=""/4083, 0x35, 0xff3, 0x3}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000870000001801000020f620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000300000000850000001700000095000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) close(r9) 4.629126682s ago: executing program 1 (id=3557): perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'ipvlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000210b02000000000000000300000d000000000300000003000000000000000300000004000000030000000300000000000005000000000000005f2e"], &(0x7f0000000b80)=""/4090, 0x5e, 0xffa, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.303538053s ago: executing program 2 (id=3567): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001900599c6d0e00009bd028ef8020ab0700040005"], 0xfe33) 3.302326233s ago: executing program 5 (id=3577): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="c805000000000000290000000200000043"], 0x5c8}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x54, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, r2, 0x4, 0x2, 0x4}, 0x50) 3.172794246s ago: executing program 2 (id=3568): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28470, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x101}, 0x11401a, 0x4, 0xffffffff, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000010b00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0xe5, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000000440)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}], 0x20}, 0x20040805) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000900)=r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2063) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x57, 0xe5e919b5517ad0d3, 0x0]}}, &(0x7f0000001f00)=""/4083, 0x35, 0xff3, 0x3}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000870000001801000020f620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000300000000850000001700000095000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) close(r9) 3.141543627s ago: executing program 5 (id=3569): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x75040000, 0x0, r1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1c8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x800, 0x67, 0x0, 0x10, r0, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r0, 0x58, &(0x7f00000007c0)}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000078040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.01955927s ago: executing program 3 (id=3570): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000f000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.01881356s ago: executing program 4 (id=3571): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x6, &(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7fdf, 0xc3, &(0x7f0000000780)=""/195, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x6}, 0x94) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x80, 0x0, 0x0, 0x0, 0xd2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xffffffffffff7fff}, 0xc220, 0xac5d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r4 = openat$cgroup_int(r2, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000002c0)=0x3, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0x21, &(0x7f0000000880)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xbbe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x8000}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x778}}, @map_val={0x18, 0xc, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x401}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x4, 0x1, 0x2, 0xa, 0x7, 0xfffffffffffffff0, 0x8}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}], &(0x7f00000009c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x4, 0x8000, 0x1}, 0x10, 0x192ab, r0, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x89}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="2e00000011008188040f80ec59acbc0413a18100caf2a1e7ed5f5519d431000080000f000000028002002d1f00"/55, 0x37}], 0x1}, 0x44004) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xc5}], 0x1}, 0x24000841) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000140)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaa\x04{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2\x00\x00\x00\xf8\x1dG\x00}H\'\xed\x00\x00\x00\x00\x00\x00\x00\x00') socketpair(0x1e, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000180)}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x203, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8923, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x2f, &(0x7f0000000480)=r7, 0x4) 2.592302679s ago: executing program 4 (id=3573): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x1}, 0x80, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000000)="005744620bfe05", 0x7}], 0x2}, 0x4044800) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r1}, 0x18) 2.358207405s ago: executing program 3 (id=3574): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000f2000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.14694597s ago: executing program 2 (id=3575): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x6ab21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 2.14617378s ago: executing program 3 (id=3576): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x4b, &(0x7f0000000000)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9e40902080006000000e8fe0ba1f1ffffff02001471b3dc48822603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55", 0xd8}], 0x1, 0x0, 0x0, 0x300}, 0x0) 2.091406141s ago: executing program 5 (id=3578): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x2000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.847351797s ago: executing program 2 (id=3579): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x4000000, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r4}, 0xc) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f0000000380)=ANY=[]) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000)=r0, 0x4) 1.846847127s ago: executing program 3 (id=3580): perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x40, 0x7, 0xf1, 0xfa, 0x0, 0x5, 0x8040, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x9, 0x10000}, 0x80, 0xb516, 0xdd64, 0x6, 0x80000000, 0xd, 0xc97e, 0x0, 0x9, 0x0, 0xca5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$sock(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="d6e970fdc0c2e41202e4051f43bee0153d9ff5430c22024fe4a7ca60d1cbe6aadc42dd3f6233c9e0e69114ce21eebcbf85348a4d512139526c9e6d9d21f1a46a77272ee67dd7e27b23427bd22f82361646b36d61895a2fe2822bb542f7008f4e89f1663f9ab91b621a6df7c5785e3c", 0x6f}, {&(0x7f00000006c0)="7b1596411fbfbed8986d9075b2b8360ea43be3bcd111911a21044ba25f75f307cf64f9edd3d5543b51dc87f80ec837fd76f9b694d9d71798bb715361378e89dfb38272a97e337e050a44d225b3485d", 0x4f}], 0x2, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0x97}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0xee3c}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x78}, 0x40090) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000400)=r5, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x300}, 0x48) 1.846330097s ago: executing program 5 (id=3581): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b866c1d0000007ea60864160af3653c001a0038000000040000000600010009000300eab556a705251e618a94ff0251f60a84a7f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000040)="277184ff3e24f844e463576a6b0b8787f412e2ab81ac012ebcb2d9143252e47952775085ad41896b004655cfe515622b35", 0x31}, {&(0x7f0000000100)="fc8337a0581900d4f92a0732ed62115b2346c57fcb24eb425863a0ef2e1c7eae44d9c58b381ea1a2ca41e086caf7758d95cb4b2038b8", 0x36}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000001) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b866c1d0000007ea60864160af3653c001a0038000000040000000600010009000300eab556a705251e618a94ff0251f60a84a7f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}, {&(0x7f0000000040)="277184ff3e24f844e463576a6b0b8787f412e2ab81ac012ebcb2d9143252e47952775085ad41896b004655cfe515622b35", 0x31}, {&(0x7f0000000100)="fc8337a0581900d4f92a0732ed62115b2346c57fcb24eb425863a0ef2e1c7eae44d9c58b381ea1a2ca41e086caf7758d95cb4b2038b8", 0x36}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000001) (async) 1.798407908s ago: executing program 4 (id=3582): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0xb0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) 1.672559181s ago: executing program 5 (id=3583): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x204, 0x1, 0xfffffffc}, 0x50) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x400, 0xac5d, 0x0, 0x6, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x80000}, 0x100, 0x0, 0x0, 0x7, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac7a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3d0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b2581b555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbc"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008004000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x102) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) (async) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60072fc569", 0x33}], 0x1}, 0x4084) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f0000000880), 0x8, 0x64, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0xb, 0x0, 0x0, 0x82100, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.612879863s ago: executing program 4 (id=3584): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800b976", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 7) 1.482187655s ago: executing program 1 (id=3585): socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 474.932339ms ago: executing program 3 (id=3586): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220080006007c06e8fe55a10a0015400600142603600e12b000060000000201a80016002000014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x14, 0x17, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xa4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000004b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=r7, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xc8eb, '\x00', r8, r7, 0x4, 0x0, 0x4}, 0x50) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000040)=r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@type_tag={0x2, 0x0, 0x0, 0x12, 0x1}, @fwd={0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x6}}, @enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x5}, {0x4, 0x1}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x2e, 0x5f, 0x61]}}, &(0x7f0000000a00), 0x79, 0x0, 0x1, 0x0, 0x10000}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000ffffffff000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000851000000000000095000000000000b7080000000000007b8af8ff00000000b7080000510de30b7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018170000", @ANYRES32=r3, @ANYBLOB="000000000000000018500000070000000000000000000000182c0000", @ANYRES32=r3, @ANYBLOB="0000000006000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000c40)='syzkaller\x00', 0x6, 0x2b, &(0x7f0000000c80)=""/43, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0xd, 0x7f, 0x8}, 0x10, 0x0, r2, 0x3, &(0x7f0000000d40)=[r3, r3, r3], &(0x7f0000000d80)=[{0x1, 0x1, 0xe, 0xa}, {0x4, 0x2, 0x2, 0xa}, {0x5, 0x1, 0xe, 0x8}], 0x10, 0xfffffffb}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f40)=@bpf_tracing={0x1a, 0x2c, &(0x7f0000000700)=@raw=[@generic={0x9, 0x0, 0x4, 0x7, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, &(0x7f00000008c0), 0x41000, 0x50, '\x00', r8, 0x19, r9, 0x8, &(0x7f0000000a80)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x10, 0x8000, 0x10}, 0x10, 0x1aedd, r10, 0x5, &(0x7f0000000e80)=[r3, r3, r0, r3, r3, r3, r3, r3], &(0x7f0000000ec0)=[{0x1, 0x2, 0x7, 0x5}, {0x1, 0x1, 0xf, 0x3}, {0x5, 0x2, 0x6, 0x6}, {0x1, 0x4, 0x58, 0x4}, {0x3, 0x1, 0x8, 0x4}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x4000) sendmsg(r6, 0x0, 0x40) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/193, 0xc1}], 0x4}, 0x20) r11 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000280)={r1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800b976", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 390.861111ms ago: executing program 1 (id=3587): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x2201, 0x0, 0xc, 0x0, 0x4000004, 0x100, 0xffff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x10, 0x1, 0x10, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000008500000020000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000080)="05000000df000000428b4c650805", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0xc020, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100), 0x4) 390.479761ms ago: executing program 2 (id=3588): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000040180100002020752500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 369.304132ms ago: executing program 4 (id=3589): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xe, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'batadv_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x6ab21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) 365.710782ms ago: executing program 5 (id=3590): r0 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x14, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632b77fbac14140ce000006a62079f4b4d2f87e505ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x3f, 0x47, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4", 0x0, 0x3}, 0x50) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000029000befd5022dffffffff9506a902d3", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c810000000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) recvmsg$kcm(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40002000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0x0, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) 204.402286ms ago: executing program 2 (id=3591): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) recvmsg$unix(r0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) 0s ago: executing program 4 (id=3592): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) (async) r1 = socket$kcm(0xa, 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7080000e70000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) socket$kcm(0x10, 0x3, 0x10) (async) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x6, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x10001) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d11, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) unlink(&(0x7f00000000c0)='./file0\x00') (async) socket$kcm(0x10, 0x2, 0x10) (async) mkdir(0x0, 0x144540f2249c4cec) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={0x0, 0x0, 0x18}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000001d711861000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x20}, 0x4040880) (async) recvmsg(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x3e, &(0x7f0000000180)=[{&(0x7f00000007c0)="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", 0xd8}], 0x1, 0x0, 0xfffffe41, 0x6000}, 0x200040e2) setsockopt$sock_attach_bpf(r1, 0x29, 0x12, 0x0, 0x37) bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r0, 0x4) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) kernel console output (not intermixed with test programs): etlink: 14 bytes leftover after parsing attributes in process `syz.2.2497'. [ 728.645718][T12551] openvswitch: netlink: Message has 6 unknown bytes. [ 728.911576][T12559] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 728.955447][T10079] wlan1: Creating new IBSS network, BSSID c6:3e:c8:ea:65:dc [ 729.088588][T12559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2487'. [ 729.543960][T12570] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 729.552534][T12570] syzkaller1: linktype set to 825 [ 729.601984][T12568] netlink: 'syz.1.2492': attribute type 10 has an invalid length. [ 729.637652][T12566] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 729.644386][T12566] syzkaller1: persist disabled [ 730.194608][T12588] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 730.237006][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2498'. [ 730.292668][T12593] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2501'. [ 730.358819][T12593] openvswitch: netlink: Message has 6 unknown bytes. [ 730.530248][T12598] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2502'. [ 731.471231][T12606] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2504'. [ 732.955305][T10087] wlan1: Trigger new scan to find an IBSS to join [ 733.189673][T12606] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 733.200000][T12606] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 733.210194][T12606] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 733.442495][T12611] netlink: 'syz.1.2505': attribute type 10 has an invalid length. [ 733.897734][T12625] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 734.381873][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 734.592485][T12635] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2513'. [ 734.669349][T12635] openvswitch: netlink: Message has 6 unknown bytes. [ 735.864516][T12654] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 735.896443][T12658] netlink: 'syz.4.2522': attribute type 10 has an invalid length. [ 735.915327][T10075] wlan1: Trigger new scan to find an IBSS to join [ 736.018397][T12657] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2519'. [ 736.064505][T12662] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2523'. [ 736.098111][T12662] openvswitch: netlink: Message has 6 unknown bytes. [ 736.282910][T12658] team0: Device gre0 is of different type [ 736.764943][T12660] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2521'. [ 736.876115][T10087] wlan1: Trigger new scan to find an IBSS to join [ 737.864678][T12688] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 737.895672][T10077] wlan1: Creating new IBSS network, BSSID 16:98:f9:94:1d:ca [ 737.962076][T12691] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2528'. [ 738.028139][T12691] openvswitch: netlink: Message has 6 unknown bytes. [ 738.160631][T12680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2527'. [ 738.409046][T12702] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2532'. [ 738.717651][T12709] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 738.782956][T12715] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2535'. [ 739.073654][T12726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2539'. [ 739.255415][T12728] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2540'. [ 739.390681][T12735] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2543'. [ 739.415711][T12735] openvswitch: netlink: Message has 6 unknown bytes. [ 739.871010][T12736] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2542'. [ 739.915532][T10079] wlan1: Trigger new scan to find an IBSS to join [ 740.553814][T12756] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2549'. [ 740.593778][T12755] netlink: 'syz.3.2548': attribute type 10 has an invalid length. [ 741.600259][T12774] netlink: 'syz.4.2554': attribute type 10 has an invalid length. [ 742.062642][T10075] wlan1: Creating new IBSS network, BSSID b6:4d:81:f7:68:fe [ 742.213942][T12774] team0: Device hsr_slave_0 failed to register rx_handler [ 742.363601][T10083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 742.753678][T12786] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2558'. [ 743.348949][T12806] netlink: 'syz.1.2564': attribute type 21 has an invalid length. [ 743.390578][T12806] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2564'. [ 743.570640][T12806] netlink: 'syz.1.2564': attribute type 21 has an invalid length. [ 743.635512][T12806] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2564'. [ 743.739565][T12814] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2565'. [ 743.769571][T12814] openvswitch: netlink: Message has 6 unknown bytes. [ 743.916686][T12816] Dead loop on virtual device ip6_vti0, fix it urgently! [ 744.170729][T12831] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2568'. [ 744.291851][T12829] netlink: 'syz.2.2569': attribute type 21 has an invalid length. [ 744.313832][T12829] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2569'. [ 745.501525][T12859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2579'. [ 746.829959][T12890] netlink: 'syz.0.2587': attribute type 10 has an invalid length. [ 747.279297][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.286242][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.675151][T12912] netlink: 'syz.2.2593': attribute type 10 has an invalid length. [ 748.707169][T12912] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2593'. [ 748.708717][T12918] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2596'. [ 748.782715][T12918] openvswitch: netlink: Message has 6 unknown bytes. [ 748.796384][T12912] bridge0: port 1(ipvlan1) entered blocking state [ 748.827366][T12912] bridge0: port 1(ipvlan1) entered disabled state [ 748.913860][T12912] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 749.198438][T12936] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2597'. [ 749.269260][T12936] openvswitch: netlink: Message has 6 unknown bytes. [ 751.130198][T12976] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2607'. [ 751.144505][T12976] openvswitch: netlink: Message has 6 unknown bytes. [ 751.533813][T12989] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2610'. [ 751.574606][T12989] openvswitch: netlink: Message has 6 unknown bytes. [ 755.784674][T13024] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2619'. [ 755.802360][T13024] openvswitch: netlink: Message has 6 unknown bytes. [ 757.043489][T10063] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 759.636825][T13069] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2629'. [ 759.806534][T13070] netlink: 'syz.3.2633': attribute type 16 has an invalid length. [ 759.883529][T13070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2633'. [ 759.954870][T13074] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2634'. [ 760.010624][T13074] openvswitch: netlink: Message has 6 unknown bytes. [ 760.335555][T13084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2637'. [ 760.669311][T13086] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.2639'. [ 760.734447][T13086] openvswitch: netlink: Flow actions attr not present in new flow. [ 761.829296][T13107] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2646'. [ 763.522596][T13111] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2647'. [ 763.553267][T13111] openvswitch: netlink: Message has 6 unknown bytes. [ 764.105598][T13118] netlink: 'syz.0.2650': attribute type 21 has an invalid length. [ 764.113521][T13118] netlink: 'syz.0.2650': attribute type 7 has an invalid length. [ 764.246790][T13120] bridge0: port 1(batadv0) entered blocking state [ 764.284740][T13120] bridge0: port 1(batadv0) entered disabled state [ 764.383508][T13120] device batadv0 entered promiscuous mode [ 764.498025][T10075] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 764.508012][T10075] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 764.855031][T13142] Dead loop on virtual device ip6_vti0, fix it urgently! [ 765.593644][T13136] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.2655'. [ 765.616143][T13136] openvswitch: netlink: Flow actions attr not present in new flow. [ 766.101818][T13157] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2662'. [ 766.123363][T13156] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2663'. [ 766.212222][T13156] openvswitch: netlink: Message has 6 unknown bytes. [ 766.734783][T13167] netlink: 'syz.2.2661': attribute type 2 has an invalid length. [ 766.763652][T13167] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2661'. [ 767.291786][T13187] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 767.332036][T13194] netlink: 'syz.4.2670': attribute type 21 has an invalid length. [ 767.341807][T13194] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2670'. [ 767.352527][T13194] netlink: 'syz.4.2670': attribute type 5 has an invalid length. [ 767.360707][T13194] netlink: 'syz.4.2670': attribute type 6 has an invalid length. [ 767.369763][T13194] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2670'. [ 767.385031][T13196] netlink: 'syz.0.2671': attribute type 10 has an invalid length. [ 767.415432][T13196] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2671'. [ 767.445165][T13196] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 767.703382][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2675'. [ 767.724653][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2675'. [ 767.739865][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2675'. [ 768.010234][T10063] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 768.088689][T13209] netlink: 'syz.1.2676': attribute type 6 has an invalid length. [ 768.100230][T13209] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2676'. [ 768.823632][T13225] netlink: 'syz.1.2678': attribute type 10 has an invalid length. [ 768.872654][T13225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2678'. [ 768.937574][T13225] bridge0: port 1(ipvlan1) entered blocking state [ 768.985222][T13225] bridge0: port 1(ipvlan1) entered disabled state [ 769.033077][T13225] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 769.780496][T13236] FAULT_INJECTION: forcing a failure. [ 769.780496][T13236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.851611][T13232] device syzkaller0 entered promiscuous mode [ 769.877073][T13236] CPU: 0 PID: 13236 Comm: syz.2.2684 Not tainted syzkaller #0 [ 769.884650][T13236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 769.894748][T13236] Call Trace: [ 769.898059][T13236] [ 769.901020][T13236] dump_stack_lvl+0x188/0x24e [ 769.905747][T13236] ? show_regs_print_info+0x12/0x12 [ 769.910990][T13236] ? load_image+0x410/0x410 [ 769.915539][T13236] ? __lock_acquire+0x7c40/0x7c40 [ 769.920781][T13236] should_fail_ex+0x390/0x4c0 [ 769.925503][T13236] _copy_from_user+0x2c/0x170 [ 769.930250][T13236] iovec_from_user+0x143/0x360 [ 769.935065][T13236] __import_iovec+0x6c/0x510 [ 769.939698][T13236] import_iovec+0x6f/0xa0 [ 769.944069][T13236] ___sys_sendmsg+0x252/0x360 [ 769.948787][T13236] ? __sys_sendmsg+0x2a0/0x2a0 [ 769.953602][T13236] ? __lock_acquire+0x7c40/0x7c40 [ 769.958683][T13236] __se_sys_sendmsg+0x1c3/0x2b0 [ 769.963585][T13236] ? __x64_sys_sendmsg+0x80/0x80 [ 769.968577][T13236] ? syscall_enter_from_user_mode+0x2a/0x80 [ 769.974596][T13236] do_syscall_64+0x4c/0xa0 [ 769.979059][T13236] ? clear_bhb_loop+0x60/0xb0 [ 769.983768][T13236] ? clear_bhb_loop+0x60/0xb0 [ 769.988505][T13236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.994434][T13236] RIP: 0033:0x7f2426f9e159 [ 769.998967][T13236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.018606][T13236] RSP: 002b:00007f2427de0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 770.027077][T13236] RAX: ffffffffffffffda RBX: 00007f2427226090 RCX: 00007f2426f9e159 [ 770.035167][T13236] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 770.043258][T13236] RBP: 00007f2427de0090 R08: 0000000000000000 R09: 0000000000000000 [ 770.051252][T13236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 770.059253][T13236] R13: 00007f2427226128 R14: 00007f2427226090 R15: 00007ffc853f03b8 [ 770.067263][T13236] [ 770.099462][T13239] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2686'. [ 772.066362][T10079] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 772.960376][T13265] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2689'. [ 773.201743][T13261] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.2692'. [ 773.217958][T13261] openvswitch: netlink: Flow actions attr not present in new flow. [ 773.777708][T13266] delete_channel: no stack [ 775.717262][T13253] netlink: 'syz.2.2690': attribute type 21 has an invalid length. [ 775.726810][T13253] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2690'. [ 775.736175][T13253] netlink: 'syz.2.2690': attribute type 5 has an invalid length. [ 775.744173][T13253] netlink: 'syz.2.2690': attribute type 6 has an invalid length. [ 775.752025][T13253] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2690'. [ 775.764911][T13265] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2689'. [ 775.977820][T13285] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2699'. [ 776.025600][T13285] openvswitch: netlink: Message has 6 unknown bytes. [ 776.053155][T13291] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2701'. [ 776.740843][T13328] netlink: 'syz.0.2710': attribute type 10 has an invalid length. [ 776.749219][T13328] team0: Device gre0 is up. Set it down before adding it as a team port [ 776.874781][T13331] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2711'. [ 777.105290][T13335] netlink: 'syz.3.2713': attribute type 21 has an invalid length. [ 777.133625][T13335] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2713'. [ 777.144456][T13335] netlink: 'syz.3.2713': attribute type 5 has an invalid length. [ 777.153573][T13335] netlink: 'syz.3.2713': attribute type 6 has an invalid length. [ 777.161777][T13335] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2713'. [ 777.226596][T13340] openvswitch: netlink: Message has 6 unknown bytes. [ 777.471363][T13349] netlink: 'syz.0.2718': attribute type 2 has an invalid length. [ 778.304159][T13367] netlink: 'syz.3.2723': attribute type 21 has an invalid length. [ 778.572213][T13382] __nla_validate_parse: 1 callbacks suppressed [ 778.572250][T13382] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2729'. [ 778.621411][T13382] openvswitch: netlink: Message has 6 unknown bytes. [ 778.792179][T13392] netlink: 'syz.4.2732': attribute type 23 has an invalid length. [ 779.011696][T13395] Dead loop on virtual device ip6_vti0, fix it urgently! [ 779.488317][T13384] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2730'. [ 779.497352][T13384] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 779.558540][T13402] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2734'. [ 780.389060][T13423] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2743'. [ 780.436195][T13423] openvswitch: netlink: Message has 6 unknown bytes. [ 781.293843][T13448] netlink: 'syz.3.2751': attribute type 6 has an invalid length. [ 781.324298][T13448] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2751'. [ 781.823834][T13457] delete_channel: no stack [ 781.869171][T13462] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2757'. [ 781.900149][T13462] openvswitch: netlink: Message has 6 unknown bytes. [ 782.786649][T13469] netlink: 'syz.1.2759': attribute type 10 has an invalid length. [ 782.794926][T13469] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2759'. [ 782.804350][T13469] bridge0: port 1(ipvlan1) entered blocking state [ 782.849848][T13469] bridge0: port 1(ipvlan1) entered disabled state [ 782.877279][T13469] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 782.963998][T13471] syzkaller0: tun_chr_ioctl cmd 2147767519 [ 783.077243][T13474] netlink: 'syz.2.2762': attribute type 6 has an invalid length. [ 783.096519][T13474] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2762'. [ 783.412235][T13486] FAULT_INJECTION: forcing a failure. [ 783.412235][T13486] name failslab, interval 1, probability 0, space 0, times 0 [ 783.435440][T13486] CPU: 1 PID: 13486 Comm: syz.3.2766 Not tainted syzkaller #0 [ 783.442995][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.453110][T13486] Call Trace: [ 783.456429][T13486] [ 783.459408][T13486] dump_stack_lvl+0x188/0x24e [ 783.464152][T13486] ? show_regs_print_info+0x12/0x12 [ 783.469406][T13486] ? load_image+0x410/0x410 [ 783.473972][T13486] ? __might_sleep+0xd0/0xd0 [ 783.478620][T13486] ? __lock_acquire+0x7c40/0x7c40 [ 783.483702][T13486] ? __lock_acquire+0x7c40/0x7c40 [ 783.488786][T13486] should_fail_ex+0x390/0x4c0 [ 783.493524][T13486] should_failslab+0x5/0x20 [ 783.498075][T13486] slab_pre_alloc_hook+0x59/0x300 [ 783.503151][T13486] ? trace_call_bpf+0x5d6/0x6b0 [ 783.508060][T13486] ? __get_vm_area_node+0x122/0x330 [ 783.513311][T13486] __kmem_cache_alloc_node+0x4f/0x270 [ 783.518726][T13486] ? __get_vm_area_node+0x122/0x330 [ 783.524000][T13486] kmalloc_node_trace+0x22/0xe0 [ 783.528911][T13486] __get_vm_area_node+0x122/0x330 [ 783.533985][T13486] __vmalloc_node_range+0x357/0x1380 [ 783.539311][T13486] ? netlink_sendmsg+0x5ec/0xbd0 [ 783.544373][T13486] ? perf_trace_preemptirq_template+0x268/0x320 [ 783.550735][T13486] ? free_vm_area+0x50/0x50 [ 783.555302][T13486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 783.561513][T13486] ? netlink_sendmsg+0x5ec/0xbd0 [ 783.566479][T13486] vmalloc+0x75/0x80 [ 783.570433][T13486] ? netlink_sendmsg+0x5ec/0xbd0 [ 783.575405][T13486] netlink_sendmsg+0x5ec/0xbd0 [ 783.580216][T13486] ? netlink_getsockopt+0x550/0x550 [ 783.585453][T13486] ? apparmor_socket_sendmsg+0x8a/0x330 [ 783.591055][T13486] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 783.596377][T13486] ? security_socket_sendmsg+0x7c/0xa0 [ 783.601888][T13486] ? netlink_getsockopt+0x550/0x550 [ 783.607148][T13486] ____sys_sendmsg+0x5ed/0x9a0 [ 783.611983][T13486] ? __sys_sendmsg_sock+0x30/0x30 [ 783.617060][T13486] ? __import_iovec+0x306/0x510 [ 783.621999][T13486] ? import_iovec+0x6f/0xa0 [ 783.626562][T13486] ___sys_sendmsg+0x2a2/0x360 [ 783.631305][T13486] ? migrate_enable+0x148/0x220 [ 783.636280][T13486] ? __sys_sendmsg+0x2a0/0x2a0 [ 783.641144][T13486] __se_sys_sendmsg+0x1c3/0x2b0 [ 783.646049][T13486] ? __x64_sys_sendmsg+0x80/0x80 [ 783.651058][T13486] ? syscall_enter_from_user_mode+0x2a/0x80 [ 783.657049][T13486] do_syscall_64+0x4c/0xa0 [ 783.661602][T13486] ? clear_bhb_loop+0x60/0xb0 [ 783.666350][T13486] ? clear_bhb_loop+0x60/0xb0 [ 783.671102][T13486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.677052][T13486] RIP: 0033:0x7f36c619e159 [ 783.681522][T13486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.701169][T13486] RSP: 002b:00007f36c7026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.709652][T13486] RAX: ffffffffffffffda RBX: 00007f36c6425fa0 RCX: 00007f36c619e159 [ 783.717663][T13486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 783.725665][T13486] RBP: 00007f36c7026090 R08: 0000000000000000 R09: 0000000000000000 [ 783.733685][T13486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.741693][T13486] R13: 00007f36c6426038 R14: 00007f36c6425fa0 R15: 00007fff7e033808 [ 783.749728][T13486] [ 783.946615][T13486] syz.3.2766: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 783.979480][T13491] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2768'. [ 783.983637][T13486] CPU: 0 PID: 13486 Comm: syz.3.2766 Not tainted syzkaller #0 [ 783.996058][T13486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 784.006167][T13486] Call Trace: [ 784.009481][T13486] [ 784.012449][T13486] dump_stack_lvl+0x188/0x24e [ 784.017273][T13486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 784.023500][T13486] ? show_regs_print_info+0x12/0x12 [ 784.028770][T13486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 784.034987][T13486] ? dump_stack+0x5/0x12 [ 784.039282][T13486] warn_alloc+0x242/0x330 [ 784.043659][T13486] ? __get_vm_area_node+0x122/0x330 [ 784.048914][T13486] ? zone_watermark_ok_safe+0x270/0x270 [ 784.051271][T13491] openvswitch: netlink: Message has 6 unknown bytes. [ 784.054496][T13486] ? rcu_is_watching+0x11/0xa0 [ 784.054649][T13486] ? __get_vm_area_node+0x318/0x330 [ 784.054688][T13486] __vmalloc_node_range+0x37c/0x1380 [ 784.054716][T13486] ? perf_trace_preemptirq_template+0x268/0x320 [ 784.054776][T13486] ? free_vm_area+0x50/0x50 [ 784.054804][T13486] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 784.054846][T13486] ? netlink_sendmsg+0x5ec/0xbd0 [ 784.054870][T13486] vmalloc+0x75/0x80 [ 784.054898][T13486] ? netlink_sendmsg+0x5ec/0xbd0 [ 784.054920][T13486] netlink_sendmsg+0x5ec/0xbd0 [ 784.054952][T13486] ? netlink_getsockopt+0x550/0x550 [ 784.054975][T13486] ? apparmor_socket_sendmsg+0x8a/0x330 [ 784.055009][T13486] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 784.055032][T13486] ? security_socket_sendmsg+0x7c/0xa0 [ 784.055063][T13486] ? netlink_getsockopt+0x550/0x550 [ 784.055088][T13486] ____sys_sendmsg+0x5ed/0x9a0 [ 784.055132][T13486] ? __sys_sendmsg_sock+0x30/0x30 [ 784.055165][T13486] ? __import_iovec+0x306/0x510 [ 784.055207][T13486] ? import_iovec+0x6f/0xa0 [ 784.055243][T13486] ___sys_sendmsg+0x2a2/0x360 [ 784.055278][T13486] ? migrate_enable+0x148/0x220 [ 784.055312][T13486] ? __sys_sendmsg+0x2a0/0x2a0 [ 784.055395][T13486] __se_sys_sendmsg+0x1c3/0x2b0 [ 784.055433][T13486] ? __x64_sys_sendmsg+0x80/0x80 [ 784.055483][T13486] ? syscall_enter_from_user_mode+0x2a/0x80 [ 784.055515][T13486] do_syscall_64+0x4c/0xa0 [ 784.055554][T13486] ? clear_bhb_loop+0x60/0xb0 [ 784.055586][T13486] ? clear_bhb_loop+0x60/0xb0 [ 784.055621][T13486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.055652][T13486] RIP: 0033:0x7f36c619e159 [ 784.055674][T13486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.055695][T13486] RSP: 002b:00007f36c7026028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.055721][T13486] RAX: ffffffffffffffda RBX: 00007f36c6425fa0 RCX: 00007f36c619e159 [ 784.055739][T13486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 784.055754][T13486] RBP: 00007f36c7026090 R08: 0000000000000000 R09: 0000000000000000 [ 784.055770][T13486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 784.055784][T13486] R13: 00007f36c6426038 R14: 00007f36c6425fa0 R15: 00007fff7e033808 [ 784.055818][T13486] [ 784.359472][T13486] Mem-Info: [ 784.363818][T13486] active_anon:8924 inactive_anon:0 isolated_anon:0 [ 784.363818][T13486] active_file:19161 inactive_file:40215 isolated_file:0 [ 784.363818][T13486] unevictable:768 dirty:121 writeback:0 [ 784.363818][T13486] slab_reclaimable:21541 slab_unreclaimable:107749 [ 784.363818][T13486] mapped:29626 shmem:1361 pagetables:619 [ 784.363818][T13486] sec_pagetables:0 bounce:0 [ 784.363818][T13486] kernel_misc_reclaimable:0 [ 784.363818][T13486] free:1308762 free_pcp:8630 free_cma:0 [ 784.480507][T13486] Node 0 active_anon:35496kB inactive_anon:0kB active_file:76644kB inactive_file:160664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118404kB dirty:480kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10776kB pagetables:2276kB sec_pagetables:0kB all_unreclaimable? no [ 784.604380][T13486] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 784.655615][T13498] netlink: 'syz.4.2771': attribute type 10 has an invalid length. [ 784.735063][T13486] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 784.815312][T13486] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 784.821252][T13486] Node 0 DMA32 free:1316836kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:35696kB inactive_anon:0kB active_file:76644kB inactive_file:160664kB unevictable:1536kB writepending:480kB present:3129332kB managed:2592908kB mlocked:0kB bounce:0kB free_pcp:22112kB local_pcp:5196kB free_cma:0kB [ 784.902708][T13498] team0 (unregistering): Port device team_slave_0 removed [ 784.950899][T13486] lowmem_reserve[]: 0 0 1 1 1 [ 784.958888][T13498] team0 (unregistering): Port device team_slave_1 removed [ 784.974181][T13486] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 785.016910][T13498] team0 (unregistering): Port device bridge0 removed [ 785.049618][T13486] lowmem_reserve[]: 0 0 0 0 0 [ 785.065695][T13486] Node 1 Normal free:3902592kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:13184kB local_pcp:4192kB free_cma:0kB [ 785.162462][T13486] lowmem_reserve[]: 0 0 0 0 0 [ 785.170536][T13498] team0 (unregistering): Port device bond0 removed [ 785.202542][T13486] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 785.242306][T13486] Node 0 DMA32: 2003*4kB (UM) 1713*8kB (UME) 2122*16kB (UM) 688*32kB (UM) 606*64kB (UME) 154*128kB (UME) 108*256kB (UME) 45*512kB (UME) 21*1024kB (UM) 17*2048kB (UME) 262*4096kB (UM) = 1316340kB [ 785.281314][T13512] netlink: 'syz.1.2774': attribute type 10 has an invalid length. [ 785.290672][T13486] Node 0 Normal: 3*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 785.313686][T13486] Node 1 Normal: 230*4kB (UME) 55*8kB (UME) 23*16kB (UE) 114*32kB (UME) 42*64kB (UME) 18*128kB (UME) 8*256kB (UM) 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3902592kB [ 785.383292][T13486] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.406532][T13486] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.440031][T13486] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 785.509220][T13486] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 785.522299][T13486] 60737 total pagecache pages [ 785.564438][T13486] 0 pages in swap cache [ 785.587034][T13486] Free swap = 124996kB [ 785.612668][T13486] Total swap = 124996kB [ 785.631766][T13486] 2097051 pages RAM [ 785.646873][T13486] 0 pages HighMem/MovableOnly [ 785.651669][T13486] 415223 pages reserved [ 785.671225][T13486] 0 pages cma reserved [ 786.052267][T13536] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2781'. [ 786.063834][T13536] openvswitch: netlink: Message has 6 unknown bytes. [ 787.833087][T13572] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2796'. [ 787.878061][T13572] openvswitch: netlink: Message has 6 unknown bytes. [ 789.380454][T10087] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 791.231245][T13593] netlink: 'syz.0.2799': attribute type 21 has an invalid length. [ 792.544686][T13603] netlink: 'syz.3.2803': attribute type 19 has an invalid length. [ 792.676504][T13603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2803'. [ 793.013105][T13609] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2804'. [ 793.215458][T13609] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 793.558206][T13619] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2807'. [ 793.696893][T13623] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2809'. [ 793.764114][T13623] openvswitch: netlink: Message has 6 unknown bytes. [ 794.042716][T13635] netlink: 'syz.1.2813': attribute type 21 has an invalid length. [ 797.541942][T13667] FAULT_INJECTION: forcing a failure. [ 797.541942][T13667] name failslab, interval 1, probability 0, space 0, times 0 [ 797.703501][T13667] CPU: 0 PID: 13667 Comm: syz.1.2820 Not tainted syzkaller #0 [ 797.711080][T13667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 797.721215][T13667] Call Trace: [ 797.724585][T13667] [ 797.727584][T13667] dump_stack_lvl+0x188/0x24e [ 797.732377][T13667] ? show_regs_print_info+0x12/0x12 [ 797.737661][T13667] ? load_image+0x410/0x410 [ 797.742305][T13667] should_fail_ex+0x390/0x4c0 [ 797.747082][T13667] should_failslab+0x5/0x20 [ 797.751673][T13667] slab_pre_alloc_hook+0x59/0x300 [ 797.756773][T13667] ? trace_call_bpf+0x5d6/0x6b0 [ 797.761715][T13667] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 797.767526][T13667] __kmem_cache_alloc_node+0x4f/0x270 [ 797.772993][T13667] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 797.778797][T13667] __kmalloc+0xa3/0x240 [ 797.783054][T13667] tomoyo_realpath_from_path+0xe2/0x5c0 [ 797.788690][T13667] ? tomoyo_domain+0xd2/0x120 [ 797.793483][T13667] ? tomoyo_path_number_perm+0x205/0x650 [ 797.799199][T13667] tomoyo_path_number_perm+0x22f/0x650 [ 797.804764][T13667] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 797.810305][T13667] ? hrtimer_interrupt+0x557/0x980 [ 797.815515][T13667] ? perf_trace_preemptirq_template+0xa8/0x320 [ 797.821789][T13667] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 797.827914][T13667] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 797.834212][T13667] security_file_ioctl+0x6c/0xa0 [ 797.839240][T13667] __se_sys_ioctl+0x48/0x170 [ 797.844007][T13667] do_syscall_64+0x4c/0xa0 [ 797.848505][T13667] ? clear_bhb_loop+0x60/0xb0 [ 797.853260][T13667] ? clear_bhb_loop+0x60/0xb0 [ 797.858023][T13667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.864003][T13667] RIP: 0033:0x7f9e4cf9e159 [ 797.868487][T13667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.888262][T13667] RSP: 002b:00007f9e4dde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.896852][T13667] RAX: ffffffffffffffda RBX: 00007f9e4d225fa0 RCX: 00007f9e4cf9e159 [ 797.904905][T13667] RDX: 0000200000001000 RSI: 0000000000008923 RDI: 000000000000000d [ 797.912949][T13667] RBP: 00007f9e4dde8090 R08: 0000000000000000 R09: 0000000000000000 [ 797.921000][T13667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.929044][T13667] R13: 00007f9e4d226038 R14: 00007f9e4d225fa0 R15: 00007ffed8c5f3c8 [ 797.937154][T13667] [ 798.035729][T13667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 799.638947][T10075] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 799.811654][T13664] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2819'. [ 799.850747][T13664] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2819'. [ 799.901502][T13695] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2819'. [ 800.024391][T13696] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2824'. [ 800.047343][T13696] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 800.550615][T13703] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2825'. [ 800.611654][T13703] openvswitch: netlink: Message has 6 unknown bytes. [ 800.761681][T13708] netlink: 'syz.2.2827': attribute type 21 has an invalid length. [ 800.872402][T13713] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2829'. [ 803.202833][T10081] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 804.505263][T13739] netlink: 'syz.4.2840': attribute type 29 has an invalid length. [ 804.628733][T13739] netlink: 'syz.4.2840': attribute type 29 has an invalid length. [ 804.762643][T13745] netlink: 'syz.1.2841': attribute type 6 has an invalid length. [ 804.783996][T13745] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.2841'. [ 804.798612][T13743] netlink: 'syz.4.2840': attribute type 29 has an invalid length. [ 805.882755][T13752] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2843'. [ 805.921807][T13749] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2842'. [ 805.971325][T13749] openvswitch: netlink: Message has 6 unknown bytes. [ 806.783633][T13756] device syzkaller0 entered promiscuous mode [ 808.719573][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.726083][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.243268][T13765] netlink: 'syz.4.2846': attribute type 10 has an invalid length. [ 811.251327][T13765] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2846'. [ 811.303865][T13768] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2847'. [ 812.629744][T13778] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2849'. [ 812.749004][T13778] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 812.901614][T13808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2857'. [ 813.145968][T13814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2859'. [ 813.215283][T13815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2859'. [ 813.224383][T13815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2859'. [ 813.311993][T13817] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2859'. [ 813.430289][T13814] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2859'. [ 813.630382][T13825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 813.640420][T13825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 813.654798][T13825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 813.658296][T13814] netlink: 'syz.0.2859': attribute type 16 has an invalid length. [ 813.672452][T13825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 813.674308][T13814] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2859'. [ 813.691503][T13825] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 813.699967][T13825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 815.755283][T13825] Bluetooth: hci5: command 0x0409 tx timeout [ 815.999923][T13823] chnl_net:caif_netlink_parms(): no params data found [ 817.471947][T10083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.663168][T10083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.835594][T13825] Bluetooth: hci5: command 0x041b tx timeout [ 817.882267][T10083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.043666][T10083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.095351][T13823] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.102763][T13823] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.122688][T13823] device bridge_slave_0 entered promiscuous mode [ 818.223990][T13823] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.231789][T13823] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.240761][T13823] device bridge_slave_1 entered promiscuous mode [ 818.303443][T13823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 818.322307][T13823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.364790][T13823] team0: Port device team_slave_0 added [ 818.389781][T13823] team0: Port device team_slave_1 added [ 818.514146][T13823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.551501][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.603157][T13823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.680548][T13823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.735110][T13823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.806875][T13823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.871340][T13887] netlink: 'syz.4.2877': attribute type 10 has an invalid length. [ 818.882765][T13887] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2877'. [ 818.908632][T13895] netlink: 'syz.0.2879': attribute type 39 has an invalid length. [ 819.101170][T13906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2881'. [ 819.133952][T10083] device .*! left promiscuous mode [ 819.388718][T13823] device hsr_slave_0 entered promiscuous mode [ 819.417367][T13823] device hsr_slave_1 entered promiscuous mode [ 819.437756][T13823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.462666][T13823] Cannot create hsr debugfs directory [ 819.915458][T13825] Bluetooth: hci5: command 0x040f tx timeout [ 821.328058][T10063] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 821.853424][T13973] netlink: 'syz.2.2897': attribute type 6 has an invalid length. [ 821.911637][T13973] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2897'. [ 821.995149][T13825] Bluetooth: hci5: command 0x0419 tx timeout [ 822.132688][T13823] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 822.153200][T13823] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 822.181095][T13823] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 822.260223][T13823] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 823.020033][T10083] device hsr_slave_0 left promiscuous mode [ 823.052290][T10083] device hsr_slave_1 left promiscuous mode [ 823.109402][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.135367][T10083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.158732][T10083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.180027][T10083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.222623][T10083] device bridge_slave_1 left promiscuous mode [ 823.230947][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.316327][T10083] device veth1_vlan left promiscuous mode [ 823.328045][T10083] device veth0_vlan left promiscuous mode [ 824.297083][T10083] device geneve1 left promiscuous mode [ 824.316281][T10083] team0 (unregistering): Port device geneve1 removed [ 826.129275][T10083] device team_slave_1 left promiscuous mode [ 826.137273][T10083] team0 (unregistering): Port device team_slave_1 removed [ 826.208113][T10083] device team_slave_0 left promiscuous mode [ 826.216373][T10083] team0 (unregistering): Port device team_slave_0 removed [ 826.681377][T10083] device bridge0 left promiscuous mode [ 826.688967][T10083] team0 (unregistering): Port device bridge0 removed [ 826.834568][T14029] device sit0 left promiscuous mode [ 826.919927][T14030] device sit0 entered promiscuous mode [ 827.148581][T14039] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2913'. [ 827.208275][T14039] openvswitch: netlink: Message has 6 unknown bytes. [ 827.226650][T13823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.300151][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 827.313460][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 827.327023][T13823] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.359897][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 827.376477][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 827.386740][T10072] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.393951][T10072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.413849][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 827.422679][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 827.444612][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 827.453812][T10072] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.461045][T10072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.474251][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 827.484531][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 827.523599][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 827.559579][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 827.620958][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 827.659283][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 827.705489][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 827.730729][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 827.740655][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 827.806736][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 827.847595][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 827.908221][T13823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 829.981004][T14083] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2926'. [ 830.016946][T14083] openvswitch: netlink: Message has 6 unknown bytes. [ 830.182948][T10077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 830.199578][T10077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 830.334400][T13823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.594576][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 830.636527][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 831.273451][T14092] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2929'. [ 831.465919][T10063] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 831.805638][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 831.838231][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 831.867413][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 831.879306][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 831.932963][T13823] device veth0_vlan entered promiscuous mode [ 832.060155][T14098] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2930'. [ 832.135410][T14098] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 832.302742][T14095] netlink: 'syz.0.2930': attribute type 2 has an invalid length. [ 832.330951][T14095] netlink: 'syz.0.2930': attribute type 8 has an invalid length. [ 832.391353][T14095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2930'. [ 832.658100][T13823] device veth1_vlan entered promiscuous mode [ 832.855907][T10075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 832.866952][T10075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 832.967517][T14118] netlink: 'syz.4.2932': attribute type 10 has an invalid length. [ 833.051693][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 833.066839][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 833.111921][T13823] device veth0_macvtap entered promiscuous mode [ 833.178325][T13823] device veth1_macvtap entered promiscuous mode [ 833.356036][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 833.415072][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.460914][T13823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 833.501527][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 833.523068][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 833.563904][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 833.623325][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 833.692079][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.755025][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.815185][T13823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 833.857097][T13823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 833.885263][T13823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 833.935362][T13823] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.944310][T13823] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.998569][T13823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.018102][T13823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.374654][T10089] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 834.454547][T10075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 834.475991][T10075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 834.807585][T10087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.826291][T10087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.871045][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 835.051127][T10087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.060862][T10087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.117022][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 835.213114][T14130] netlink: 'syz.4.2941': attribute type 6 has an invalid length. [ 835.232488][T14130] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2941'. [ 835.931093][T14141] netlink: 'syz.1.2867': attribute type 10 has an invalid length. [ 836.025996][T14141] device syz_tun entered promiscuous mode [ 836.347911][T14144] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2944'. [ 836.428453][T14141] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 839.133166][T14169] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2954'. [ 839.237783][T14169] openvswitch: netlink: Message has 6 unknown bytes. [ 844.263336][T10087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.677721][T14187] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2960'. [ 844.885084][T10087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.110787][T10087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.135445][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.145247][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.153434][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 845.164719][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 845.177418][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 845.187889][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.463998][T10087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.384045][T10087] tipc: Left network mode [ 846.843318][T14215] netlink: 'syz.0.2966': attribute type 3 has an invalid length. [ 847.075955][T14215] netlink: 'syz.0.2966': attribute type 1 has an invalid length. [ 847.083847][T14215] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2966'. [ 847.285693][T13825] Bluetooth: hci0: command 0x0409 tx timeout [ 847.590980][T14193] chnl_net:caif_netlink_parms(): no params data found [ 848.142905][T14229] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2969'. [ 848.313687][T14229] openvswitch: netlink: Message has 6 unknown bytes. [ 849.538757][T13825] Bluetooth: hci0: command 0x041b tx timeout [ 850.833611][T14256] netlink: 'syz.2.2975': attribute type 6 has an invalid length. [ 850.842986][T14256] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2975'. [ 851.386785][T14193] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.394025][T14193] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.449801][T14193] device bridge_slave_0 entered promiscuous mode [ 851.606944][T13825] Bluetooth: hci0: command 0x040f tx timeout [ 851.953547][T14193] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.965357][T14193] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.994756][T14193] device bridge_slave_1 entered promiscuous mode [ 852.356067][T10079] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 852.572304][T14193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.739489][T14193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.954616][T14193] team0: Port device team_slave_0 added [ 853.009639][T14193] team0: Port device team_slave_1 added [ 853.142311][T14193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.205602][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.315087][T14193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.364611][T14277] netlink: 'syz.2.2980': attribute type 10 has an invalid length. [ 853.425258][T14277] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2980'. [ 853.460763][T14277] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 853.686062][T13825] Bluetooth: hci0: command 0x0419 tx timeout [ 853.763839][T14193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.786111][T14193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 853.883626][T14193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.930189][T14285] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2981'. [ 855.015264][T14298] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2983'. [ 855.098674][T14298] openvswitch: netlink: Message has 6 unknown bytes. [ 855.160983][T14282] device sit0 entered promiscuous mode [ 856.401976][T14193] device hsr_slave_0 entered promiscuous mode [ 856.473431][T14193] device hsr_slave_1 entered promiscuous mode [ 856.527935][T14193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 856.585088][T14193] Cannot create hsr debugfs directory [ 856.873003][T14306] device syzkaller0 entered promiscuous mode [ 857.143534][T14310] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2985'. [ 861.873635][T14310] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 861.884496][T14310] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 861.894497][T14310] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 862.697499][T10083] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 862.813602][T14344] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2993'. [ 862.856206][T10087] device hsr_slave_0 left promiscuous mode [ 862.863969][T14344] openvswitch: netlink: Message has 6 unknown bytes. [ 862.908085][T10087] device hsr_slave_1 left promiscuous mode [ 862.936877][T10087] device bridge_slave_1 left promiscuous mode [ 862.943178][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.452383][T10087] team0 (unregistering): Port device team_slave_1 removed [ 864.497489][T10087] team0 (unregistering): Port device team_slave_0 removed [ 864.786597][T10087] team0 (unregistering): Port device bridge0 removed [ 865.462625][T10075] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 867.005298][T14407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3003'. [ 867.265446][T14409] netlink: 'syz.2.3004': attribute type 12 has an invalid length. [ 867.291595][T14409] netlink: 'syz.2.3004': attribute type 15 has an invalid length. [ 867.860142][T14193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 867.917455][T14193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 867.990754][T14193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 868.076213][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 868.085747][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 868.103956][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 868.112178][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 868.120449][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 868.128714][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 868.136914][T14193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 868.749485][T14193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.804260][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 868.843054][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 869.260883][T14193] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.271365][T14447] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3022'. [ 869.319868][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 869.372369][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 869.394369][T10063] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.401615][T10063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.410453][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 869.517551][T10075] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.611154][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 869.630614][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 869.655898][T10063] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.664033][T10063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.694547][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 869.709986][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 869.720891][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 869.737689][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 869.750824][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 869.764773][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 869.781777][T10063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.812325][T14193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 869.884052][T14193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 869.939363][T10075] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.977618][T14436] chnl_net:caif_netlink_parms(): no params data found [ 870.026079][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 870.053654][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 870.076788][T14479] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3019'. [ 870.094424][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 870.108203][T14479] netlink: zone id is out of range [ 870.114142][T14479] netlink: zone id is out of range [ 870.130665][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 870.169199][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 870.183390][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.189813][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.235602][T13825] Bluetooth: hci4: command 0x0409 tx timeout [ 870.281870][T10075] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.322006][T14479] netlink: del zone limit has 4 unknown bytes [ 870.498904][T14487] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3020'. [ 870.520753][T10075] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.570968][T14487] openvswitch: netlink: Message has 6 unknown bytes. [ 870.761260][T14436] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.853866][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.885642][T14436] device bridge_slave_0 entered promiscuous mode [ 870.950262][T14436] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.961006][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.976736][T14436] device bridge_slave_1 entered promiscuous mode [ 871.283274][T14436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.317958][T10075] tipc: Left network mode [ 871.340864][T14436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.562601][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 871.574309][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 871.594828][T14436] team0: Port device team_slave_0 added [ 871.678175][T14193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.730036][T14436] team0: Port device team_slave_1 added [ 871.877407][T14436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 871.901428][T14436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.939669][T14436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 871.958781][T14436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 871.970046][T14436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 872.007339][T14436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.089544][T14527] netlink: 'syz.4.3030': attribute type 21 has an invalid length. [ 872.125585][T14527] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3030'. [ 872.284049][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 872.295877][T10079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 872.316258][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 872.421343][T14436] device hsr_slave_0 entered promiscuous mode [ 872.453780][T14541] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3033'. [ 872.469904][T14541] openvswitch: netlink: Message has 6 unknown bytes. [ 872.618676][T14436] device hsr_slave_1 entered promiscuous mode [ 872.640084][T14545] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3034'. [ 872.652729][T14545] openvswitch: netlink: Message has 6 unknown bytes. [ 872.660477][T14436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 872.695098][T14436] Cannot create hsr debugfs directory [ 872.799555][T14193] device veth0_vlan entered promiscuous mode [ 872.862323][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 872.922514][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 872.956667][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 872.991938][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 873.148413][T14193] device veth1_vlan entered promiscuous mode [ 873.251423][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 873.409715][T14193] device veth0_macvtap entered promiscuous mode [ 873.443850][T10083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 873.464405][T10083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 873.500219][T10083] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 873.526029][T14193] device veth1_macvtap entered promiscuous mode [ 873.623715][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.644724][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.665433][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.696430][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.745248][T14193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.790730][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 873.865585][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 873.976540][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 874.138918][T14600] netlink: 'syz.4.3042': attribute type 10 has an invalid length. [ 874.149682][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.264975][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.405683][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 874.524973][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.684836][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.765053][T14193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 874.864996][T14193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.926501][T14193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.053498][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 875.073242][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 875.103622][T14193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.135136][T14193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.143941][T14193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.195095][T14193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.296682][T14436] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 875.372668][T14660] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3043'. [ 875.405335][T14660] openvswitch: netlink: Message has 6 unknown bytes. [ 875.547014][T10075] team0: Port device wlan1 removed [ 875.642303][T14436] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 875.707177][T14436] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 875.808252][T14669] netlink: 'syz.2.3049': attribute type 6 has an invalid length. [ 875.825479][T14669] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3049'. [ 875.834727][T14436] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 875.931983][T14670] netlink: 'syz.1.3048': attribute type 2 has an invalid length. [ 875.949011][T10075] device hsr_slave_0 left promiscuous mode [ 876.005583][T14670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3048'. [ 876.055763][T10075] device hsr_slave_1 left promiscuous mode [ 876.247853][T10075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.274515][T10075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.326887][T10075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.334427][T10075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.527210][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 876.534409][T10075] device batadv0 left promiscuous mode [ 876.541601][T10075] bridge0: port 1(batadv0) entered disabled state [ 876.618598][T10075] device bridge_slave_1 left promiscuous mode [ 876.633459][T10075] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.716494][T10075] device veth1_macvtap left promiscuous mode [ 876.742971][T10075] device veth0_macvtap left promiscuous mode [ 876.764073][T14686] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3052'. [ 876.789140][T14686] openvswitch: netlink: Message has 6 unknown bytes. [ 877.014564][T10075] team0 (unregistering): Port device geneve1 removed [ 877.454752][T10075] team0 (unregistering): Port device team_slave_1 removed [ 877.502286][T10075] team0 (unregistering): Port device team_slave_0 removed [ 877.789857][T10075] team0 (unregistering): Port device bridge0 removed [ 877.898596][T14688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3053'. [ 877.926481][T14633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.947556][T14633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.977775][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 878.091604][T14646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.116112][T14646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.184699][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 878.223694][T14436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.330429][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 878.343423][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 878.377551][T14712] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3056'. [ 878.389806][T14436] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.448405][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 878.462178][T14712] openvswitch: netlink: Message has 6 unknown bytes. [ 878.483163][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 878.514167][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.521435][T14629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.576401][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 878.595405][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 878.642572][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 878.699473][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.706696][T14629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.755679][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 878.862823][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 878.878960][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 878.910251][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 878.941648][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 878.982262][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 879.035753][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 879.073142][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 879.134676][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 879.173816][T14639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 879.217603][T14639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 879.236623][T14736] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3062'. [ 879.254376][T14436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 879.274465][T14736] openvswitch: netlink: Message has 6 unknown bytes. [ 880.441472][T14769] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3070'. [ 880.484518][T14769] openvswitch: netlink: Message has 6 unknown bytes. [ 880.528153][T14639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 880.545156][T14639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 880.575181][T14436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.109515][T14791] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3076'. [ 881.139256][T14791] openvswitch: netlink: Message has 6 unknown bytes. [ 881.729697][T14790] device syzkaller0 entered promiscuous mode [ 882.598181][T14828] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3085'. [ 882.642927][T14828] openvswitch: netlink: Message has 6 unknown bytes. [ 882.825847][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 882.894056][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 883.019303][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 883.039919][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 883.082024][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 883.146776][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 883.178083][T14436] device veth0_vlan entered promiscuous mode [ 883.189228][T14840] netlink: 'syz.4.3089': attribute type 10 has an invalid length. [ 883.238970][T14840] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3089'. [ 883.255567][T14840] bridge0: port 1(ipvlan1) entered blocking state [ 883.278793][T14840] bridge0: port 1(ipvlan1) entered disabled state [ 883.289225][T14639] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 883.307487][T14840] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 883.345885][T14436] device veth1_vlan entered promiscuous mode [ 883.371521][T14842] device bond0 entered promiscuous mode [ 883.387747][T14842] device bond_slave_0 entered promiscuous mode [ 883.409034][T14842] device bond_slave_1 entered promiscuous mode [ 883.477278][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 883.501359][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 883.548282][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 883.634354][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 883.678529][T14436] device veth0_macvtap entered promiscuous mode [ 883.742789][T14436] device veth1_macvtap entered promiscuous mode [ 883.850238][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 883.864048][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 883.903805][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.931642][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.962125][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 884.004203][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.068134][T14436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.134495][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 884.173215][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 884.195925][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.213441][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.244303][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.286671][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.302308][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.314741][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.360889][T14436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.370436][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 884.422919][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 884.463652][T14436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.494580][T14436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.548952][T14436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.590858][T14436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.753983][T14878] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3099'. [ 884.863886][T14629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.881106][T14878] openvswitch: netlink: Message has 6 unknown bytes. [ 884.907643][T14629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.949605][T10075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 884.985204][T14641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.997983][T14641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.043026][T10075] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 886.722597][ T4275] Bluetooth: hci4: ISO packet for unknown connection handle 20 [ 886.833116][T13825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 886.844509][T13825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 886.860362][T13825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 886.871586][T13825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 886.880386][T13825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 886.887912][T13825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 886.896465][T14928] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3113'. [ 886.907703][T14928] openvswitch: netlink: Message has 6 unknown bytes. [ 887.368616][T14633] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.663406][T14633] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.819602][T14633] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.942249][T14964] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3122'. [ 887.975832][T14633] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.023334][T14960] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 888.259313][T14969] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3123'. [ 888.309809][T14925] chnl_net:caif_netlink_parms(): no params data found [ 888.683812][T14984] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3126'. [ 888.703821][T14979] netlink: 'syz.5.3127': attribute type 29 has an invalid length. [ 888.719986][T14994] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3128'. [ 888.729806][T14984] openvswitch: netlink: Message has 6 unknown bytes. [ 888.737449][T14994] openvswitch: netlink: Message has 6 unknown bytes. [ 888.833573][T14979] netlink: 'syz.5.3127': attribute type 29 has an invalid length. [ 888.868197][T14981] netlink: 'syz.5.3127': attribute type 29 has an invalid length. [ 888.877216][T14925] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.885161][T14925] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.917852][T14925] device bridge_slave_0 entered promiscuous mode [ 888.955356][T13825] Bluetooth: hci1: command 0x0409 tx timeout [ 889.250851][T14925] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.276176][T14925] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.345099][T14925] device bridge_slave_1 entered promiscuous mode [ 889.640217][T14925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.794378][T14925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.142537][T14925] team0: Port device team_slave_0 added [ 890.216935][T14925] team0: Port device team_slave_1 added [ 890.252359][T15033] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3139'. [ 890.270519][T15033] openvswitch: netlink: Message has 6 unknown bytes. [ 891.036092][T13825] Bluetooth: hci1: command 0x041b tx timeout [ 893.088302][T14925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.110840][T14925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.137574][T13825] Bluetooth: hci1: command 0x040f tx timeout [ 893.281316][T14925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.357123][T14925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.440940][T14925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.492440][T14925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.731200][T15076] Dead loop on virtual device ip6_vti0, fix it urgently! [ 894.274465][T14925] device hsr_slave_0 entered promiscuous mode [ 894.288738][T14925] device hsr_slave_1 entered promiscuous mode [ 894.370393][T15078] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 894.425356][T15078] syzkaller1: linktype set to 825 [ 895.195341][T13825] Bluetooth: hci1: command 0x0419 tx timeout [ 895.629596][T15116] netlink: 'syz.2.3161': attribute type 10 has an invalid length. [ 895.649701][T15116] team0: Device gre0 is up. Set it down before adding it as a team port [ 896.072203][T15127] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3163'. [ 896.182595][T14633] device hsr_slave_0 left promiscuous mode [ 896.260175][T14633] device hsr_slave_1 left promiscuous mode [ 896.321671][T14633] device bridge_slave_1 left promiscuous mode [ 896.351397][T14633] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.477957][T14633] device veth1_macvtap left promiscuous mode [ 896.484090][T14633] device veth0_macvtap left promiscuous mode [ 896.538268][T14633] device veth1_vlan left promiscuous mode [ 896.556646][T14633] device veth0_vlan left promiscuous mode [ 899.129107][T14633] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.202420][T14633] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.579780][T14633] bond0 (unregistering): Released all slaves [ 899.771017][T15158] netlink: 11006 bytes leftover after parsing attributes in process `syz.3.3169'. [ 899.974647][T14925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 900.001739][T14925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 900.058441][T14925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 900.079582][T14925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 900.269535][T15189] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 900.300154][T15189] dvmrp1: ignored: set checksum disabled [ 900.584085][T14925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.628998][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 900.678540][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 900.724616][T14925] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.771664][T14602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 900.806479][T14602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 900.842364][T14602] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.849595][T14602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.896198][T14602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 901.074038][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 901.127988][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 901.160196][T14633] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.167578][T14633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.312450][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 901.334188][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 901.410002][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 901.454423][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 901.488845][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 901.512210][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 901.572544][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 901.613697][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 901.665488][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 901.707700][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 901.779544][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 902.521055][T15239] netlink: 'syz.1.3194': attribute type 10 has an invalid length. [ 902.582285][T15239] device veth0_macvtap left promiscuous mode [ 902.987498][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 903.015282][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 903.045237][T14925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.835595][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 904.885958][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 904.998321][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 905.046127][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 905.087962][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 905.127702][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 905.186951][T14925] device veth0_vlan entered promiscuous mode [ 905.249498][T14925] device veth1_vlan entered promiscuous mode [ 905.731909][T14925] device veth0_macvtap entered promiscuous mode [ 905.883162][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 905.906113][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 905.929396][T14925] device veth1_macvtap entered promiscuous mode [ 906.062935][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 906.079733][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 906.151613][T14925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.177521][T14925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.205095][T14925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.225121][T14925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.245031][T14925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 906.260010][T14925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.287640][T14925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.401028][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 906.421924][T14633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 906.483401][T14925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.503719][T14925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.524600][T14925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.553853][T14925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.590856][T14925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.601953][T14925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.644213][T14925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 906.671217][T14925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 906.700329][T14925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 906.714756][T14925] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.739771][T14925] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.751899][T14925] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.769520][T14925] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.912813][T15341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3223'. [ 906.934589][T15342] netlink: 'syz.5.3220': attribute type 10 has an invalid length. [ 906.980455][T15342] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3220'. [ 907.216424][T15342] bridge0: port 3(veth0_vlan) entered blocking state [ 907.223264][T15342] bridge0: port 3(veth0_vlan) entered disabled state [ 907.232377][T15342] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 907.261948][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 907.282311][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 907.849965][T14646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.872762][T14646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.937419][T14646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 908.012642][T14602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.057308][T14602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.095864][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 908.463048][T15373] FAULT_INJECTION: forcing a failure. [ 908.463048][T15373] name failslab, interval 1, probability 0, space 0, times 0 [ 908.515324][T15373] CPU: 0 PID: 15373 Comm: syz.4.3106 Not tainted syzkaller #0 [ 908.522871][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 908.532969][T15373] Call Trace: [ 908.536286][T15373] [ 908.539254][T15373] dump_stack_lvl+0x188/0x24e [ 908.543990][T15373] ? show_regs_print_info+0x12/0x12 [ 908.549237][T15373] ? load_image+0x410/0x410 [ 908.553784][T15373] ? __might_sleep+0xd0/0xd0 [ 908.558422][T15373] ? __lock_acquire+0x7c40/0x7c40 [ 908.563499][T15373] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 908.569527][T15373] should_fail_ex+0x390/0x4c0 [ 908.574255][T15373] should_failslab+0x5/0x20 [ 908.578803][T15373] slab_pre_alloc_hook+0x59/0x300 [ 908.583880][T15373] ? lockdep_hardirqs_on+0x94/0x140 [ 908.589152][T15373] ? tomoyo_encode+0x28a/0x550 [ 908.593987][T15373] __kmem_cache_alloc_node+0x4f/0x270 [ 908.599424][T15373] ? tomoyo_encode+0x28a/0x550 [ 908.604237][T15373] __kmalloc+0xa3/0x240 [ 908.608449][T15373] tomoyo_encode+0x28a/0x550 [ 908.613101][T15373] tomoyo_realpath_from_path+0x578/0x5c0 [ 908.618811][T15373] ? tomoyo_domain+0xd2/0x120 [ 908.623540][T15373] ? tomoyo_path_number_perm+0x205/0x650 [ 908.629216][T15373] tomoyo_path_number_perm+0x22f/0x650 [ 908.634734][T15373] ? __lock_acquire+0x7c40/0x7c40 [ 908.639809][T15373] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 908.645319][T15373] ? hrtimer_interrupt+0x557/0x980 [ 908.650491][T15373] ? ktime_get+0x7b/0x270 [ 908.654904][T15373] ? __fget_files+0x28/0x460 [ 908.659562][T15373] security_file_ioctl+0x6c/0xa0 [ 908.664559][T15373] __se_sys_ioctl+0x48/0x170 [ 908.669214][T15373] do_syscall_64+0x4c/0xa0 [ 908.673776][T15373] ? clear_bhb_loop+0x60/0xb0 [ 908.678495][T15373] ? clear_bhb_loop+0x60/0xb0 [ 908.683215][T15373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.689179][T15373] RIP: 0033:0x7f72e6f9e159 [ 908.693633][T15373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.713293][T15373] RSP: 002b:00007f72e7dff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 908.721756][T15373] RAX: ffffffffffffffda RBX: 00007f72e7225fa0 RCX: 00007f72e6f9e159 [ 908.729782][T15373] RDX: 0000200000000340 RSI: 00000000000089e1 RDI: 0000000000000006 [ 908.737801][T15373] RBP: 00007f72e7dff090 R08: 0000000000000000 R09: 0000000000000000 [ 908.745820][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.753825][T15373] R13: 00007f72e7226038 R14: 00007f72e7225fa0 R15: 00007ffdbc0700a8 [ 908.761849][T15373] [ 908.826808][T15373] ERROR: Out of memory at tomoyo_realpath_from_path. [ 909.641064][T15395] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3241'. [ 909.680913][T15395] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 909.884307][T13825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 909.924264][T13825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 909.939195][T13825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 909.948244][T13825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 909.957897][T13825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 909.966241][T13825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 910.449190][T14629] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.667143][T14629] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.712303][T15421] netlink: 'syz.5.3248': attribute type 10 has an invalid length. [ 910.751234][T15421] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3248'. [ 910.775561][T15421] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 910.850739][T14629] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.074951][T14629] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.408469][T15398] chnl_net:caif_netlink_parms(): no params data found [ 911.942128][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.959401][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.005079][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 912.016084][T15398] device bridge_slave_0 entered promiscuous mode [ 912.196651][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.203850][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.242435][T15398] device bridge_slave_1 entered promiscuous mode [ 912.304723][T14629] device 0 left promiscuous mode [ 912.385444][T14629] device 1 left promiscuous mode [ 912.406315][T15458] sctp: [Deprecated]: syz.1.3259 (pid 15458) Use of int in maxseg socket option. [ 912.406315][T15458] Use struct sctp_assoc_value instead [ 912.440917][T15457] delete_channel: no stack [ 912.465160][T15398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 912.538222][T15398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 913.100078][T15466] Dead loop on virtual device ip6_vti0, fix it urgently! [ 913.495458][T15472] netlink: 'syz.1.3261': attribute type 13 has an invalid length. [ 913.515164][T15472] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3261'. [ 913.557884][T15472] erspan0: refused to change device tx_queue_len [ 913.596514][T15473] netlink: 'syz.1.3261': attribute type 1 has an invalid length. [ 913.659683][T15473] netlink: 'syz.1.3261': attribute type 4 has an invalid length. [ 913.676084][T15473] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3261'. [ 913.717661][T15398] team0: Port device team_slave_0 added [ 913.861419][T15398] team0: Port device team_slave_1 added [ 913.935866][T15398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.953160][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.986861][T15398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.053378][T15398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.064072][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 914.095356][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 914.109950][T15398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.145370][T15494] netlink: 'syz.1.3264': attribute type 3 has an invalid length. [ 914.153204][T15494] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3264'. [ 914.208738][T15488] netlink: 'syz.1.3264': attribute type 3 has an invalid length. [ 914.244772][T15496] netlink: 'syz.1.3264': attribute type 3 has an invalid length. [ 914.248435][T15488] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3264'. [ 914.276047][T15490] netlink: 'syz.1.3264': attribute type 3 has an invalid length. [ 914.284277][T15490] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3264'. [ 914.335041][T15496] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3264'. [ 914.372390][T15398] device hsr_slave_0 entered promiscuous mode [ 914.388858][T15398] device hsr_slave_1 entered promiscuous mode [ 914.403677][T15398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 914.411330][T14646] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 914.430860][T15398] Cannot create hsr debugfs directory [ 915.303889][T15517] sctp: [Deprecated]: syz.5.3280 (pid 15517) Use of int in maxseg socket option. [ 915.303889][T15517] Use struct sctp_assoc_value instead [ 915.345339][T15513] delete_channel: no stack [ 915.638574][T15527] netlink: 'syz.4.3271': attribute type 10 has an invalid length. [ 915.669865][T15527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3271'. [ 915.832624][T15527] bridge0: port 3(veth0_vlan) entered blocking state [ 915.863607][T15527] bridge0: port 3(veth0_vlan) entered disabled state [ 916.117003][T15527] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 916.155010][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 916.409418][T15543] FAULT_INJECTION: forcing a failure. [ 916.409418][T15543] name failslab, interval 1, probability 0, space 0, times 0 [ 916.462899][T15543] CPU: 1 PID: 15543 Comm: syz.1.3276 Not tainted syzkaller #0 [ 916.470447][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 916.480535][T15543] Call Trace: [ 916.483861][T15543] [ 916.486839][T15543] dump_stack_lvl+0x188/0x24e [ 916.491565][T15543] ? show_regs_print_info+0x12/0x12 [ 916.497324][T15543] ? load_image+0x410/0x410 [ 916.501863][T15543] ? __lock_acquire+0x7c40/0x7c40 [ 916.506924][T15543] should_fail_ex+0x390/0x4c0 [ 916.511633][T15543] should_failslab+0x5/0x20 [ 916.516177][T15543] slab_pre_alloc_hook+0x59/0x300 [ 916.521252][T15543] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 916.526841][T15543] __kmem_cache_alloc_node+0x4f/0x270 [ 916.532260][T15543] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 916.537841][T15543] __kmalloc+0xa3/0x240 [ 916.542049][T15543] bpf_prog_test_run_skb+0x23e/0x18e0 [ 916.547460][T15543] ? __fget_files+0x28/0x460 [ 916.552084][T15543] ? __fget_files+0x3fc/0x460 [ 916.556801][T15543] ? cpu_online+0xa0/0xa0 [ 916.561156][T15543] bpf_prog_test_run+0x31c/0x390 [ 916.566149][T15543] __sys_bpf+0x62b/0x780 [ 916.570426][T15543] ? bpf_link_show_fdinfo+0x380/0x380 [ 916.575839][T15543] ? lock_chain_count+0x20/0x20 [ 916.580723][T15543] __x64_sys_bpf+0x78/0x90 [ 916.585172][T15543] do_syscall_64+0x4c/0xa0 [ 916.589618][T15543] ? clear_bhb_loop+0x60/0xb0 [ 916.594351][T15543] ? clear_bhb_loop+0x60/0xb0 [ 916.599064][T15543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.604985][T15543] RIP: 0033:0x7f31eab9e159 [ 916.609427][T15543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.629152][T15543] RSP: 002b:00007f31ebb4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.637589][T15543] RAX: ffffffffffffffda RBX: 00007f31eae25fa0 RCX: 00007f31eab9e159 [ 916.645670][T15543] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 916.653682][T15543] RBP: 00007f31ebb4c090 R08: 0000000000000000 R09: 0000000000000000 [ 916.661689][T15543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.669694][T15543] R13: 00007f31eae26038 R14: 00007f31eae25fa0 R15: 00007ffdf60ddca8 [ 916.677708][T15543] [ 917.138700][T14629] device hsr_slave_1 left promiscuous mode [ 917.166284][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.174029][T14629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.236423][T14629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.243959][T14629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 917.293569][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.397228][T14629] device veth0_macvtap left promiscuous mode [ 917.403717][T14629] device veth1_vlan left promiscuous mode [ 917.445941][T14629] device veth0_vlan left promiscuous mode [ 918.084399][T14629] team0 (unregistering): Port device geneve1 removed [ 918.235145][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 918.512670][T14629] team0 (unregistering): Port device team_slave_1 removed [ 918.556142][T14629] team0 (unregistering): Port device team_slave_0 removed [ 918.600871][T14629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.911331][T14629] team0 (unregistering): Port device bridge0 removed [ 918.944699][T14629] bond0 (unregistering): Released all slaves [ 919.048201][T15555] netlink: 'syz.4.3281': attribute type 46 has an invalid length. [ 919.101340][T15564] device syzkaller0 entered promiscuous mode [ 919.138531][T15398] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 921.806622][T15398] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 921.837386][T15578] netlink: 'syz.3.3287': attribute type 21 has an invalid length. [ 921.850215][T15578] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3287'. [ 921.871293][T15588] netlink: 'syz.5.3289': attribute type 10 has an invalid length. [ 921.909560][T15588] 8021q: adding VLAN 0 to HW filter on device team0 [ 921.954677][T15588] bond0: (slave team0): Enslaving as an active interface with an up link [ 921.983104][T15398] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 922.024724][T15398] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 922.762652][T15398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.815479][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 922.857379][T15609] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3296'. [ 922.874120][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 922.901060][T15398] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.941772][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 922.946751][T15609] openvswitch: netlink: Message has 6 unknown bytes. [ 922.977116][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 923.007456][T10072] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.014756][T10072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.043858][T10072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 923.110537][T14648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 923.180633][T14648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 923.205937][T14648] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.213114][T14648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.258946][T14648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 923.389591][T14631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 923.436313][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 923.484062][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 923.542422][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 923.590206][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 923.645702][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 923.693992][T14648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 923.722612][T14648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 923.778073][T15398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.822911][T15398] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 923.843370][T14648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 923.875671][T14648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 924.239171][T15647] netlink: 'syz.1.3308': attribute type 10 has an invalid length. [ 924.305729][T15647] team0: Device gre0 is up. Set it down before adding it as a team port [ 924.984185][T15666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3314'. [ 925.100424][T15669] netlink: 'syz.5.3315': attribute type 21 has an invalid length. [ 925.121852][T15669] IPv6: NLM_F_CREATE should be specified when creating new route [ 925.370224][T15670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3315'. [ 925.420431][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 925.438624][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 925.500297][T15398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.621583][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 925.657830][T14629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 925.773905][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 925.794692][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 925.860435][T15398] device veth0_vlan entered promiscuous mode [ 925.878416][T14626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 925.896459][T14626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 925.931666][T15398] device veth1_vlan entered promiscuous mode [ 926.061785][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 926.075932][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 926.104787][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 926.151941][T14611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 926.191457][T15398] device veth0_macvtap entered promiscuous mode [ 926.210773][T15398] device veth1_macvtap entered promiscuous mode [ 926.318847][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.362773][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.394068][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.480808][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.561974][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.581792][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.622341][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 926.681397][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.700034][T15398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.748592][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 926.775374][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 926.802912][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 926.861347][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 926.902720][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.971778][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.000834][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.026782][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.046258][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.060734][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.085500][T15398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.116094][T15398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.142984][T15398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.168770][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 927.197492][T14624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 927.214721][T15719] netlink: 'syz.1.3329': attribute type 3 has an invalid length. [ 927.231695][T15398] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.281048][T15398] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.297552][T15719] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3329'. [ 927.335012][T15398] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.343791][T15398] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.614234][T14629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.640070][T14629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.680524][T14631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 927.770971][T14648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.785736][T14648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.821462][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 927.857950][T15736] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3333'. [ 927.903929][T15736] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3333'. [ 927.934061][T15736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3333'. [ 929.373369][T15768] bond0: (slave team0): Error: Slave device does not support XDP [ 931.563969][T15803] netlink: 'syz.5.3354': attribute type 10 has an invalid length. [ 931.580760][T15803] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3354'. [ 931.598748][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.605169][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.625951][T15804] FAULT_INJECTION: forcing a failure. [ 931.625951][T15804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.650365][T15803] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 931.678638][T15804] CPU: 1 PID: 15804 Comm: syz.2.3353 Not tainted syzkaller #0 [ 931.686212][T15804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 931.696400][T15804] Call Trace: [ 931.699714][T15804] [ 931.702679][T15804] dump_stack_lvl+0x188/0x24e [ 931.707427][T15804] ? show_regs_print_info+0x12/0x12 [ 931.712684][T15804] ? load_image+0x410/0x410 [ 931.717248][T15804] ? __lock_acquire+0x7c40/0x7c40 [ 931.722343][T15804] should_fail_ex+0x390/0x4c0 [ 931.727081][T15804] _copy_from_user+0x2c/0x170 [ 931.731862][T15804] iovec_from_user+0x143/0x360 [ 931.736690][T15804] __import_iovec+0x6c/0x510 [ 931.741339][T15804] import_iovec+0x6f/0xa0 [ 931.745839][T15804] ___sys_sendmsg+0x252/0x360 [ 931.750571][T15804] ? __sys_sendmsg+0x2a0/0x2a0 [ 931.755409][T15804] __se_sys_sendmsg+0x1c3/0x2b0 [ 931.760387][T15804] ? __x64_sys_sendmsg+0x80/0x80 [ 931.765374][T15804] do_syscall_64+0x4c/0xa0 [ 931.769824][T15804] ? clear_bhb_loop+0x60/0xb0 [ 931.774531][T15804] ? clear_bhb_loop+0x60/0xb0 [ 931.779266][T15804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 931.785203][T15804] RIP: 0033:0x7fa8b6d9e159 [ 931.789757][T15804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 931.809473][T15804] RSP: 002b:00007fa8b7cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 931.817917][T15804] RAX: ffffffffffffffda RBX: 00007fa8b7025fa0 RCX: 00007fa8b6d9e159 [ 931.825914][T15804] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 931.833919][T15804] RBP: 00007fa8b7cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 931.841915][T15804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.850001][T15804] R13: 00007fa8b7026038 R14: 00007fa8b7025fa0 R15: 00007ffff607da48 [ 931.858026][T15804] [ 932.933549][T15828] device sit0 entered promiscuous mode [ 934.118748][T15875] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3372'. [ 934.145420][T15875] openvswitch: netlink: Message has 6 unknown bytes. [ 934.422193][T15882] netlink: 'syz.1.3373': attribute type 10 has an invalid length. [ 934.536340][T15882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3373'. [ 934.612482][T15882] bridge0: port 3(ipvlan1) entered blocking state [ 934.723281][T15882] bridge0: port 3(ipvlan1) entered disabled state [ 934.862039][T15882] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 935.796134][T15899] netlink: 'syz.3.3380': attribute type 21 has an invalid length. [ 936.662504][T15931] netlink: 'syz.2.3388': attribute type 29 has an invalid length. [ 936.706948][T15931] netlink: 'syz.2.3388': attribute type 29 has an invalid length. [ 936.775231][T15934] netlink: 'syz.2.3388': attribute type 29 has an invalid length. [ 937.596444][T15951] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3394'. [ 938.797035][ T4275] Bluetooth: hci5: command 0x0406 tx timeout [ 941.056315][T16024] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3411'. [ 943.896148][T16044] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3418'. [ 944.104080][T16044] openvswitch: netlink: Message has 6 unknown bytes. [ 944.875403][T16039] netlink: 'syz.2.3417': attribute type 10 has an invalid length. [ 944.883423][T16039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3417'. [ 944.978492][T16039] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 945.353652][T16050] FAULT_INJECTION: forcing a failure. [ 945.353652][T16050] name failslab, interval 1, probability 0, space 0, times 0 [ 945.456539][T16050] CPU: 0 PID: 16050 Comm: syz.4.3421 Not tainted syzkaller #0 [ 945.464090][T16050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 945.474264][T16050] Call Trace: [ 945.477681][T16050] [ 945.480653][T16050] dump_stack_lvl+0x188/0x24e [ 945.485396][T16050] ? show_regs_print_info+0x12/0x12 [ 945.490658][T16050] ? load_image+0x410/0x410 [ 945.495216][T16050] ? __might_sleep+0xd0/0xd0 [ 945.499881][T16050] ? __lock_acquire+0x7c40/0x7c40 [ 945.505002][T16050] should_fail_ex+0x390/0x4c0 [ 945.509764][T16050] should_failslab+0x5/0x20 [ 945.514315][T16050] slab_pre_alloc_hook+0x59/0x300 [ 945.519404][T16050] kmem_cache_alloc_node+0x5a/0x310 [ 945.524675][T16050] ? __alloc_skb+0xf9/0x7d0 [ 945.529279][T16050] __alloc_skb+0xf9/0x7d0 [ 945.533677][T16050] netlink_sendmsg+0x654/0xbd0 [ 945.538533][T16050] ? netlink_getsockopt+0x550/0x550 [ 945.543783][T16050] ? apparmor_socket_sendmsg+0x8a/0x330 [ 945.549397][T16050] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 945.554739][T16050] ? security_socket_sendmsg+0x7c/0xa0 [ 945.560261][T16050] ? netlink_getsockopt+0x550/0x550 [ 945.565514][T16050] ____sys_sendmsg+0x5ed/0x9a0 [ 945.570351][T16050] ? __sys_sendmsg_sock+0x30/0x30 [ 945.575435][T16050] ? __import_iovec+0x306/0x510 [ 945.580359][T16050] ? import_iovec+0x6f/0xa0 [ 945.584912][T16050] ___sys_sendmsg+0x2a2/0x360 [ 945.589650][T16050] ? __sys_sendmsg+0x2a0/0x2a0 [ 945.594474][T16050] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 945.600257][T16050] __se_sys_sendmsg+0x1c3/0x2b0 [ 945.605246][T16050] ? __x64_sys_sendmsg+0x80/0x80 [ 945.610238][T16050] ? syscall_enter_from_user_mode+0x2a/0x80 [ 945.616170][T16050] do_syscall_64+0x4c/0xa0 [ 945.620731][T16050] ? clear_bhb_loop+0x60/0xb0 [ 945.625442][T16050] ? clear_bhb_loop+0x60/0xb0 [ 945.630159][T16050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 945.636087][T16050] RIP: 0033:0x7f72e6f9e159 [ 945.640528][T16050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.660178][T16050] RSP: 002b:00007f72e7dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 945.668626][T16050] RAX: ffffffffffffffda RBX: 00007f72e7225fa0 RCX: 00007f72e6f9e159 [ 945.676629][T16050] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 945.684636][T16050] RBP: 00007f72e7dff090 R08: 0000000000000000 R09: 0000000000000000 [ 945.692631][T16050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.700646][T16050] R13: 00007f72e7226038 R14: 00007f72e7225fa0 R15: 00007ffdbc0700a8 [ 945.708687][T16050] [ 946.286258][T16071] netlink: 'syz.2.3428': attribute type 10 has an invalid length. [ 949.790063][T16134] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3445'. [ 950.330041][T16146] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3448'. [ 950.379128][T16146] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 952.005915][T16177] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3460'. [ 953.538532][T16190] delete_channel: no stack [ 955.068541][T16221] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3465'. [ 955.123913][T16221] openvswitch: netlink: Message has 6 unknown bytes. [ 957.141954][T16281] netlink: 'syz.4.3483': attribute type 11 has an invalid length. [ 957.178696][T16281] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3483'. [ 957.624285][T16279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 957.961018][T16305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3490'. [ 958.351077][T16323] netlink: 'syz.1.3494': attribute type 10 has an invalid length. [ 958.385107][T16323] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3494'. [ 958.416318][T16323] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 959.200892][T16342] netlink: 'syz.4.3499': attribute type 10 has an invalid length. [ 960.763913][T16360] netlink: 'syz.1.3505': attribute type 10 has an invalid length. [ 960.789719][T16360] team0: Device gre0 is up. Set it down before adding it as a team port [ 960.912463][T16353] device syzkaller0 entered promiscuous mode [ 961.512230][T16380] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3512'. [ 962.297948][T16393] Dead loop on virtual device ip6_vti0, fix it urgently! [ 965.325291][T16380] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 965.334776][T16380] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 965.350167][T16380] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 965.882510][T16421] netlink: 'syz.5.3518': attribute type 10 has an invalid length. [ 966.684326][T16424] netlink: 'syz.4.3521': attribute type 10 has an invalid length. [ 966.698296][T16424] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3521'. [ 967.464010][T16456] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3533'. [ 967.502954][T16458] FAULT_INJECTION: forcing a failure. [ 967.502954][T16458] name failslab, interval 1, probability 0, space 0, times 0 [ 967.587654][T16458] CPU: 0 PID: 16458 Comm: syz.2.3534 Not tainted syzkaller #0 [ 967.595212][T16458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 967.605329][T16458] Call Trace: [ 967.608657][T16458] [ 967.611674][T16458] dump_stack_lvl+0x188/0x24e [ 967.616474][T16458] ? show_regs_print_info+0x12/0x12 [ 967.621753][T16458] ? load_image+0x410/0x410 [ 967.626319][T16458] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 967.632371][T16458] ? __lock_acquire+0x7c40/0x7c40 [ 967.637467][T16458] should_fail_ex+0x390/0x4c0 [ 967.642235][T16458] should_failslab+0x5/0x20 [ 967.646795][T16458] slab_pre_alloc_hook+0x59/0x300 [ 967.652066][T16458] kmem_cache_alloc+0x56/0x2f0 [ 967.657419][T16458] ? __build_skb+0x27/0x3b0 [ 967.662022][T16458] __build_skb+0x27/0x3b0 [ 967.666435][T16458] ? build_skb+0x14/0x230 [ 967.670829][T16458] build_skb+0x1e/0x230 [ 967.675044][T16458] bpf_prog_test_run_skb+0x38d/0x18e0 [ 967.680490][T16458] ? __fget_files+0x28/0x460 [ 967.685227][T16458] ? __fget_files+0x3fc/0x460 [ 967.691260][T16458] ? cpu_online+0xa0/0xa0 [ 967.695655][T16458] bpf_prog_test_run+0x31c/0x390 [ 967.700644][T16458] __sys_bpf+0x62b/0x780 [ 967.704955][T16458] ? bpf_link_show_fdinfo+0x380/0x380 [ 967.710435][T16458] ? lock_chain_count+0x20/0x20 [ 967.715343][T16458] __x64_sys_bpf+0x78/0x90 [ 967.719802][T16458] do_syscall_64+0x4c/0xa0 [ 967.724285][T16458] ? clear_bhb_loop+0x60/0xb0 [ 967.729003][T16458] ? clear_bhb_loop+0x60/0xb0 [ 967.733721][T16458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 967.739659][T16458] RIP: 0033:0x7fa8b6d9e159 [ 967.744099][T16458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.763745][T16458] RSP: 002b:00007fa8b7cbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.772197][T16458] RAX: ffffffffffffffda RBX: 00007fa8b7025fa0 RCX: 00007fa8b6d9e159 [ 967.780201][T16458] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 967.788201][T16458] RBP: 00007fa8b7cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 967.796199][T16458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.804196][T16458] R13: 00007fa8b7026038 R14: 00007fa8b7025fa0 R15: 00007ffff607da48 [ 967.812298][T16458] [ 968.214756][T16468] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3538'. [ 968.245547][T16468] openvswitch: netlink: Message has 6 unknown bytes. [ 968.580151][T16476] netlink: 'syz.1.3541': attribute type 3 has an invalid length. [ 968.636982][T16476] netlink: 163968 bytes leftover after parsing attributes in process `syz.1.3541'. [ 969.106866][T16483] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3543'. [ 969.454755][T16485] Q6\bY4: renamed from lo [ 969.519369][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 970.167360][T16506] netlink: 'syz.4.3551': attribute type 1 has an invalid length. [ 970.176829][T16505] netlink: 'syz.2.3552': attribute type 1 has an invalid length. [ 970.184630][T16505] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3552'. [ 970.235969][T16506] netlink: 'syz.4.3551': attribute type 4 has an invalid length. [ 970.305978][T16506] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3551'. [ 970.686872][T16519] netlink: 'syz.3.3555': attribute type 10 has an invalid length. [ 970.724471][T16519] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3555'. [ 970.767447][T16519] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 973.028406][T16533] netlink: 'syz.2.3559': attribute type 2 has an invalid length. [ 973.113592][T16533] netlink: 'syz.2.3559': attribute type 2 has an invalid length. [ 974.042275][T16550] device syzkaller0 entered promiscuous mode [ 974.532125][T16566] netlink: 'syz.5.3569': attribute type 10 has an invalid length. [ 974.555263][T16566] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3569'. [ 974.564418][T16566] bridge0: port 3(ipvlan1) entered blocking state [ 974.587610][T16566] bridge0: port 3(ipvlan1) entered disabled state [ 974.597226][T16566] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 974.758231][T16569] Q6\bY4: renamed from lo [ 975.430288][T16583] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3576'. [ 975.457434][T16583] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 977.145008][T16609] netlink: 'syz.3.3586': attribute type 21 has an invalid length. [ 977.178139][T16609] netlink: 'syz.3.3586': attribute type 6 has an invalid length. [ 977.562279][T16616] ================================================================== [ 977.570517][T16616] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 977.578394][T16616] Write of size 56 at addr ffff888065edeb90 by task syz.1.3587/16616 [ 977.586514][T16616] [ 977.588889][T16616] CPU: 1 PID: 16616 Comm: syz.1.3587 Not tainted syzkaller #0 [ 977.596427][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.601985][T16626] netlink: 'syz.4.3592': attribute type 1 has an invalid length. [ 977.606515][T16616] Call Trace: [ 977.606526][T16616] [ 977.606536][T16616] dump_stack_lvl+0x188/0x24e [ 977.606581][T16616] ? __lock_acquire+0x7c40/0x7c40 [ 977.606618][T16616] ? show_regs_print_info+0x12/0x12 [ 977.606655][T16616] ? load_image+0x410/0x410 [ 977.606692][T16616] ? __virt_addr_valid+0x467/0x540 [ 977.606818][T16616] ? __bpf_get_stackid+0x6c9/0x920 [ 977.606846][T16616] print_report+0xa8/0x210 [ 977.641723][T16626] netlink: 'syz.4.3592': attribute type 3 has an invalid length. [ 977.645617][T16616] kasan_report+0x10b/0x140 [ 977.645664][T16616] ? __bpf_get_stackid+0x6c9/0x920 [ 977.645704][T16616] kasan_check_range+0x235/0x290 [ 977.677782][T16616] ? __bpf_get_stackid+0x6c9/0x920 [ 977.682995][T16616] memcpy+0x3c/0x60 [ 977.684585][T16626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3592'. [ 977.686847][T16616] __bpf_get_stackid+0x6c9/0x920 [ 977.686890][T16616] bpf_get_stackid_pe+0x33f/0x400 [ 977.686928][T16616] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 977.711538][T16616] bpf_overflow_handler+0x6d1/0x790 [ 977.716926][T16616] ? bpf_overflow_handler+0xd9/0x790 [ 977.722358][T16616] ? perf_swevent_overflow+0x230/0x230 [ 977.727888][T16616] ? ct_irq_exit_irqson+0x113/0x170 [ 977.733187][T16616] ? __perf_event_account_interrupt+0x187/0x280 [ 977.739501][T16616] __perf_event_overflow+0x457/0x630 [ 977.744863][T16616] perf_swevent_event+0x315/0x570 [ 977.749956][T16616] ? perf_tp_event+0xc10/0xc10 [ 977.754796][T16616] ___perf_sw_event+0x498/0x6d0 [ 977.759740][T16616] ? ___perf_sw_event+0x184/0x6d0 [ 977.764831][T16616] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 977.771342][T16616] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 977.777481][T16616] ? lock_chain_count+0x20/0x20 [ 977.782397][T16616] __perf_sw_event+0x135/0x260 [ 977.787227][T16616] do_user_addr_fault+0x497/0xb20 [ 977.792327][T16616] ? trace_hardirqs_off_finish+0x86/0x180 [ 977.798130][T16616] exc_page_fault+0x60/0x100 [ 977.802766][T16616] asm_exc_page_fault+0x22/0x30 [ 977.807661][T16616] RIP: 0010:strncpy_from_user+0x148/0x340 [ 977.813927][T16616] Code: 00 00 00 4c 89 e6 e8 47 02 45 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 977.833560][T16616] RSP: 0018:ffffc9000c4efb50 EFLAGS: 00050246 [ 977.839675][T16616] RAX: ffffffff843d4329 RBX: ffffc9000c4efc70 RCX: ffff88801a378000 [ 977.847698][T16616] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 977.855705][T16616] RBP: 0000000000000000 R08: ffff88801a378000 R09: 0000000000000003 [ 977.863706][T16616] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 977.871704][T16616] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 977.879716][T16616] ? strncpy_from_user+0x129/0x340 [ 977.884898][T16616] bpf_prog_load+0x200/0x1530 [ 977.889641][T16616] ? map_freeze+0x390/0x390 [ 977.894281][T16616] ? __might_fault+0xa6/0x120 [ 977.899007][T16616] ? __might_fault+0xa6/0x120 [ 977.903716][T16616] ? __might_fault+0xc2/0x120 [ 977.908420][T16616] ? __might_fault+0xa6/0x120 [ 977.913214][T16616] ? bpf_lsm_bpf+0x5/0x10 [ 977.917569][T16616] ? security_bpf+0x7a/0xa0 [ 977.922114][T16616] __sys_bpf+0x5b8/0x780 [ 977.926389][T16616] ? bpf_link_show_fdinfo+0x380/0x380 [ 977.931808][T16616] ? lock_chain_count+0x20/0x20 [ 977.936703][T16616] __x64_sys_bpf+0x78/0x90 [ 977.941153][T16616] do_syscall_64+0x4c/0xa0 [ 977.945615][T16616] ? clear_bhb_loop+0x60/0xb0 [ 977.950334][T16616] ? clear_bhb_loop+0x60/0xb0 [ 977.955049][T16616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 977.960975][T16616] RIP: 0033:0x7f31eab9e159 [ 977.965416][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.985066][T16616] RSP: 002b:00007f31ebb4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 977.993552][T16616] RAX: ffffffffffffffda RBX: 00007f31eae25fa0 RCX: 00007f31eab9e159 [ 978.001583][T16616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 978.009585][T16616] RBP: 00007f31eac35024 R08: 0000000000000000 R09: 0000000000000000 [ 978.017591][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.025609][T16616] R13: 00007f31eae26038 R14: 00007f31eae25fa0 R15: 00007ffdf60ddca8 [ 978.033648][T16616] [ 978.036694][T16616] [ 978.039036][T16616] Allocated by task 16616: [ 978.043471][T16616] kasan_set_track+0x4b/0x70 [ 978.048098][T16616] __kasan_kmalloc+0x8e/0xa0 [ 978.052726][T16616] __kmalloc_node+0xb2/0x240 [ 978.057361][T16616] bpf_map_area_alloc+0x47/0xe0 [ 978.062250][T16616] prealloc_elems_and_freelist+0x86/0x1c0 [ 978.067999][T16616] stack_map_alloc+0x386/0x510 [ 978.072788][T16616] map_create+0x524/0xff0 [ 978.077150][T16616] __sys_bpf+0x38b/0x780 [ 978.081425][T16616] __x64_sys_bpf+0x78/0x90 [ 978.085870][T16616] do_syscall_64+0x4c/0xa0 [ 978.090316][T16616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.096253][T16616] [ 978.098597][T16616] The buggy address belongs to the object at ffff888065edeb80 [ 978.098597][T16616] which belongs to the cache kmalloc-cg-64 of size 64 [ 978.112778][T16616] The buggy address is located 16 bytes inside of [ 978.112778][T16616] 64-byte region [ffff888065edeb80, ffff888065edebc0) [ 978.125919][T16616] [ 978.128269][T16616] The buggy address belongs to the physical page: [ 978.134778][T16616] page:ffffea000197b780 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888065ede900 pfn:0x65ede [ 978.146256][T16616] memcg:ffff888026ae7001 [ 978.150514][T16616] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 978.158085][T16616] raw: 00fff00000000200 ffffea0001d35ac0 dead000000000005 ffff888017442780 [ 978.166704][T16616] raw: ffff888065ede900 000000008020001a 00000001ffffffff ffff888026ae7001 [ 978.175305][T16616] page dumped because: kasan: bad access detected [ 978.181745][T16616] page_owner tracks the page as allocated [ 978.187478][T16616] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 15398, tgid 15398 (syz-executor), ts 927929594774, free_ts 927929101270 [ 978.206088][T16616] post_alloc_hook+0x173/0x1a0 [ 978.210982][T16616] get_page_from_freelist+0x206b/0x2180 [ 978.216564][T16616] __alloc_pages+0x1ec/0x4f0 [ 978.221200][T16616] alloc_slab_page+0x5d/0x180 [ 978.225996][T16616] new_slab+0x87/0x2d0 [ 978.230113][T16616] ___slab_alloc+0xbc5/0x1240 [ 978.234827][T16616] __kmem_cache_alloc_node+0x126/0x270 [ 978.240323][T16616] __kmalloc_node+0xa2/0x240 [ 978.245037][T16616] kvmalloc_node+0x6c/0x180 [ 978.249650][T16616] nf_hook_entries_grow+0x31a/0x760 [ 978.254929][T16616] nf_hook_entries_insert_raw+0x47/0x300 [ 978.260599][T16616] nf_nat_register_fn+0x1d9/0x540 [ 978.265721][T16616] ip6table_nat_table_init+0x1f1/0x2c0 [ 978.271260][T16616] xt_find_table_lock+0x220/0x360 [ 978.276360][T16616] xt_request_find_table_lock+0x22/0x100 [ 978.282024][T16616] do_ip6t_get_ctl+0x5e8/0x11c0 [ 978.286905][T16616] page last free stack trace: [ 978.291608][T16616] free_unref_page_prepare+0x8e5/0x9e0 [ 978.297105][T16616] free_unref_page+0x2e/0x3f0 [ 978.301808][T16616] __vunmap+0x874/0xa40 [ 978.305989][T16616] do_ip6t_get_ctl+0xea2/0x11c0 [ 978.310868][T16616] nf_getsockopt+0x25e/0x280 [ 978.315486][T16616] ipv6_getsockopt+0x22f/0x2e0 [ 978.320356][T16616] __sys_getsockopt+0x1b0/0x230 [ 978.325256][T16616] __x64_sys_getsockopt+0xb1/0xc0 [ 978.330320][T16616] do_syscall_64+0x4c/0xa0 [ 978.334767][T16616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.340695][T16616] [ 978.343055][T16616] Memory state around the buggy address: [ 978.348703][T16616] ffff888065edea80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 978.356786][T16616] ffff888065edeb00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 978.364871][T16616] >ffff888065edeb80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 978.373046][T16616] ^ [ 978.378434][T16616] ffff888065edec00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 978.386527][T16616] ffff888065edec80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 978.394606][T16616] ================================================================== [ 978.402706][T16616] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 978.409919][T16616] CPU: 1 PID: 16616 Comm: syz.1.3587 Not tainted syzkaller #0 [ 978.417398][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.427491][T16616] Call Trace: [ 978.430790][T16616] [ 978.433740][T16616] dump_stack_lvl+0x188/0x24e [ 978.438461][T16616] ? memcpy+0x3c/0x60 [ 978.442469][T16616] ? show_regs_print_info+0x12/0x12 [ 978.447702][T16616] ? load_image+0x410/0x410 [ 978.452243][T16616] panic+0x2d3/0x710 [ 978.456166][T16616] ? bpf_jit_dump+0xd0/0xd0 [ 978.460704][T16616] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 978.466630][T16616] ? _raw_spin_unlock+0x40/0x40 [ 978.471530][T16616] ? print_memory_metadata+0x314/0x400 [ 978.477039][T16616] check_panic_on_warn+0x80/0xa0 [ 978.482073][T16616] ? __bpf_get_stackid+0x6c9/0x920 [ 978.487212][T16616] end_report+0x66/0x110 [ 978.491487][T16616] kasan_report+0x118/0x140 [ 978.496023][T16616] ? __bpf_get_stackid+0x6c9/0x920 [ 978.501179][T16616] kasan_check_range+0x235/0x290 [ 978.506149][T16616] ? __bpf_get_stackid+0x6c9/0x920 [ 978.511293][T16616] memcpy+0x3c/0x60 [ 978.515130][T16616] __bpf_get_stackid+0x6c9/0x920 [ 978.520096][T16616] bpf_get_stackid_pe+0x33f/0x400 [ 978.525162][T16616] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 978.530674][T16616] bpf_overflow_handler+0x6d1/0x790 [ 978.535898][T16616] ? bpf_overflow_handler+0xd9/0x790 [ 978.541214][T16616] ? perf_swevent_overflow+0x230/0x230 [ 978.546790][T16616] ? ct_irq_exit_irqson+0x113/0x170 [ 978.552017][T16616] ? __perf_event_account_interrupt+0x187/0x280 [ 978.558292][T16616] __perf_event_overflow+0x457/0x630 [ 978.563613][T16616] perf_swevent_event+0x315/0x570 [ 978.568683][T16616] ? perf_tp_event+0xc10/0xc10 [ 978.573487][T16616] ___perf_sw_event+0x498/0x6d0 [ 978.578369][T16616] ? ___perf_sw_event+0x184/0x6d0 [ 978.583425][T16616] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 978.589898][T16616] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 978.595907][T16616] ? lock_chain_count+0x20/0x20 [ 978.600788][T16616] __perf_sw_event+0x135/0x260 [ 978.605700][T16616] do_user_addr_fault+0x497/0xb20 [ 978.610760][T16616] ? trace_hardirqs_off_finish+0x86/0x180 [ 978.616507][T16616] exc_page_fault+0x60/0x100 [ 978.621125][T16616] asm_exc_page_fault+0x22/0x30 [ 978.626008][T16616] RIP: 0010:strncpy_from_user+0x148/0x340 [ 978.631758][T16616] Code: 00 00 00 4c 89 e6 e8 47 02 45 fd 49 83 fc 07 0f 86 9a 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 2c 07 4d 89 fe 49 [ 978.651391][T16616] RSP: 0018:ffffc9000c4efb50 EFLAGS: 00050246 [ 978.657482][T16616] RAX: ffffffff843d4329 RBX: ffffc9000c4efc70 RCX: ffff88801a378000 [ 978.665494][T16616] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 978.673498][T16616] RBP: 0000000000000000 R08: ffff88801a378000 R09: 0000000000000003 [ 978.681495][T16616] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 978.689490][T16616] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 978.697494][T16616] ? strncpy_from_user+0x129/0x340 [ 978.702647][T16616] bpf_prog_load+0x200/0x1530 [ 978.707366][T16616] ? map_freeze+0x390/0x390 [ 978.711913][T16616] ? __might_fault+0xa6/0x120 [ 978.716709][T16616] ? __might_fault+0xa6/0x120 [ 978.721421][T16616] ? __might_fault+0xc2/0x120 [ 978.726124][T16616] ? __might_fault+0xa6/0x120 [ 978.730828][T16616] ? bpf_lsm_bpf+0x5/0x10 [ 978.735205][T16616] ? security_bpf+0x7a/0xa0 [ 978.739746][T16616] __sys_bpf+0x5b8/0x780 [ 978.744022][T16616] ? bpf_link_show_fdinfo+0x380/0x380 [ 978.749433][T16616] ? lock_chain_count+0x20/0x20 [ 978.754317][T16616] __x64_sys_bpf+0x78/0x90 [ 978.758775][T16616] do_syscall_64+0x4c/0xa0 [ 978.763222][T16616] ? clear_bhb_loop+0x60/0xb0 [ 978.767930][T16616] ? clear_bhb_loop+0x60/0xb0 [ 978.772641][T16616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 978.778578][T16616] RIP: 0033:0x7f31eab9e159 [ 978.783028][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.802660][T16616] RSP: 002b:00007f31ebb4c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.811101][T16616] RAX: ffffffffffffffda RBX: 00007f31eae25fa0 RCX: 00007f31eab9e159 [ 978.819109][T16616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 978.827107][T16616] RBP: 00007f31eac35024 R08: 0000000000000000 R09: 0000000000000000 [ 978.835100][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 978.843183][T16616] R13: 00007f31eae26038 R14: 00007f31eae25fa0 R15: 00007ffdf60ddca8 [ 978.851193][T16616] [ 978.854838][T16616] Kernel Offset: disabled [ 978.859217][T16616] Rebooting in 86400 seconds..