last executing test programs: 9.852629754s ago: executing program 1 (id=2690): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x3, 0xab1d}, 0x81, 0x3, 0x2, 0x0, 0x2, 0x200, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="a0005bf8f1b75e24", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) recvmsg(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x40000000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x6495) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x547241, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='%#$\x00') ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000080)=0xb) 8.984476117s ago: executing program 1 (id=2693): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000300)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r0}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x2, &(0x7f0000000000)=r5, 0x8) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) socket$kcm(0xa, 0x1, 0x106) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x4) r7 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x6, 0xff, 0x4, 0x7f, 0x0, 0x1, 0x40002, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x4}, 0x8000, 0x5, 0x80000001, 0x7, 0x5, 0x4, 0xe35, 0x0, 0x7, 0x0, 0x1}, r5, 0x10, r5, 0x639947bb41f4c49d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r7, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="00000100000000000000", @ANYRES32], 0x50) close(0x3) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 8.506875621s ago: executing program 0 (id=2701): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c855) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x20, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x10c002, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x541b, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4102) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x1}, @datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x89, 0x3}], '\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "0eeb31"}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000000c0)=""/136, 0x50, 0x88, 0x1}, 0x28) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="1c0000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8150001", 0x1f}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='%/[\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8.040642804s ago: executing program 1 (id=2703): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}, 0x2, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c25000000ca8a800b4f255b5d21426c6edf607464237b1fb967fdfc5e2c16d2c3718d2020207b1af8ff00000000bfa1000000000000321be15edea7a092214d527eae2f9a0701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe2}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000400)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000000)=""/7, 0x7}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 7.70980209s ago: executing program 4 (id=2705): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r0, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="060003076844babeb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x27, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 7.090103061s ago: executing program 1 (id=2706): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) perf_event_open(0x0, 0x0, 0x7, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000040), 0x3b) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x33, 0x9, 0x400, 0x40001, r2, 0x200, '\x00', 0x0, r0, 0x1, 0x3, 0x0, 0x9}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000800), &(0x7f00000006c0)=""/194}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f00000000c0)={'wlan1\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000480), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xb111}}, @union={0x1, 0x4, 0x0, 0x5, 0x1, 0x82, [{0x3, 0x0, 0x54}, {0x7, 0x5, 0x3}, {0x6, 0x4, 0x3387}, {0xb, 0x1, 0x9}]}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e]}}, &(0x7f0000001100)=""/4096, 0x87, 0x1000, 0x1, 0x6f9, 0x10000}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000b705000008000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x5a) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000f20000fcffffff63014a000000000095000000be00000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r12, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7050000080000007a000000a50004009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x22) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1e, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x8}, [@exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @jmp={0x5, 0x1, 0x3, 0xe, 0x0, 0x8, 0x1}, @jmp={0x5, 0x1, 0x5, 0x1, 0xb, 0x20, 0x8}, @call={0x85, 0x0, 0x0, 0x52}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}]}, &(0x7f00000005c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000002100)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000008c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x10a5c, 0xffffffffffffffff, 0x8, &(0x7f0000000900)=[r5, r13, r0], &(0x7f0000000940)=[{0x3, 0x1, 0xc, 0xc}, {0x4, 0x1, 0x7}, {0x0, 0x2, 0x7, 0x7}, {0x1, 0x1, 0x4, 0x7}, {0x4, 0x3, 0xb, 0xa}, {0x4, 0x1, 0x5, 0x7}, {0x4, 0x3, 0xe, 0xb}, {0x3, 0x3, 0x9, 0xc}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.079489891s ago: executing program 0 (id=2708): socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2d63707520866393e705a639e4c1321d644c1791dd22f6da95b08cc857492f314279e23de371786679b02f20be8ff3f0020418d7945f4f05c00a0a34f7f6c2645b0ab8dba06f6bcbfac333b40cba165be0317e5f1c28f8b4c90a2a8ac628a8a8a19a31789a74eb32cc6f33dbc4ebed39f3c411f79352c8a0138038f0c0dc8e4e09e6ddc0d651222f39074151be464d3ad4099ff05a95d5bd513f09e603908082c9101836cb6a9d8f2aeba4ab00000000000039e8dd88fe9937ed0329"], 0x5) write$cgroup_int(r3, &(0x7f0000000540)=0x34, 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) 6.909941809s ago: executing program 0 (id=2710): perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000078850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000001f7910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 6.731406418s ago: executing program 0 (id=2712): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x7, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095", @ANYRES64=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011", 0x5}], 0x1}, 0x20008040) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) 5.522150598s ago: executing program 2 (id=2716): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c855) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x20, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x10c002, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x541b, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4102) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x1}, @datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x89, 0x3}], '\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "0eeb31"}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000000c0)=""/136, 0x50, 0x88, 0x1}, 0x28) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="1c0000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8150001", 0x1f}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='%/[\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 5.058500841s ago: executing program 2 (id=2717): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x7, 0x0, 0x1, 0x0, 0x0, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_bp={&(0x7f0000000b00), 0x8}, 0x406, 0x20000000f117, 0x40, 0x4, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa15}, 0x0, 0x0, r3, 0x0) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb0100180000000004000058000000580000000a000000090000000000000e040000000200000005000000050000850300000010000000020000af080000000200000005000000ff0700000300000000000000ffff0000050000000400000040000000070000000200000004000000006f5f5f5f005f5f5f00"], &(0x7f0000000e80)=""/177, 0x7a, 0xb1, 0x1, 0x2, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0700000008820000"], &(0x7f0000000c00)='syzkaller\x00', 0x2c89, 0xc6, &(0x7f0000000c40)=""/198, 0x41000, 0x2, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0x6, 0x3}, {0x0, 0x2, 0x3, 0xb}], 0x10, 0xffff}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80460, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0xbb68c6b7e07d1536, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, r8, 0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x4}}, 0x3a, 0x0}, 0x4800) 4.46828137s ago: executing program 1 (id=2718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0xc0189436, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b904020208a606007c09e8fe08a10a0015c00200142603600e120d000d0024000000a800", 0x32}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e12080018", 0x2b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782d7acc56d27d1333000007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xb9, &(0x7f000000cf3d)=""/185, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x11, 0x20000000000000a, 0x300) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a181003100000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b35d25a806f8c6394f91424", 0x12}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c000100000c0c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000040)="83ac6f4b9a2ffa25922fee4db5d86075d7965b13", 0x14}, {&(0x7f0000000580)="1210366768003b6a3115e205ad12f6795f1aded97d2c32d1", 0x18}], 0x2}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f00000004000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004c04) 4.389719484s ago: executing program 4 (id=2719): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c45630002008d"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8864, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={&(0x7f0000000400)="d0d926e17cd389438e24830189b268c4e2ef5a36fddc52736805fc96ae428d310fef346b2f0cae0b879cae7c8bc66e9cccb4a013916139", &(0x7f00000007c0)=""/218, &(0x7f00000008c0)="96c4bc61ced44e59e2bf974895805885913796a0b2882cb47dc1652fb24ed08ce2062b4b5d2ed5ba3f15194349cc09f8f5265ea47aa416de660734da432af9379895810591757cbf2645ada089da0405ef557407d4c6a56e43b5f78ac1be6343ceffcec517bb704f947a886216d2587555a8f96c4989fdc54db05a49db22abfdc2f46c27f9af7602f6ed965239b568602f9e325649aa558199f61e2c3f83383e590eb590122b6bff9d2aadcc7df373a5cc6dfa410010a8c014f57bd121091ca0df50c3c9c9009f405239ff6f00c7f493e3bf9fb5a8399cef19200a", &(0x7f00000009c0)="9844da71076fb065cc1436f03bda9a41a6c5209c768f81e6f8c130cfba99a3466f6fea18ddd4a141b6f3381e168796201d72d5c33ad71ebf241720bb333683bebffb2ad6064aeadfe6ebb4e7cbc831307cc9f4096805019efb59149b4454d8090d2c972533c6a84ef107bd4f3f6b500ac58cad5f758aeb02f28b75fd5aa41cde8b17f6bd0f24278d5d09ed48096f1a3208bf9e795415afcf016b4b36d022d968878c7f59241b83b5e1ea140a1e8c17112a4e67e7", 0x1d34, r2}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000100)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f0000000280)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x8000, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x2, 0x266}, 0x104080, 0x0, 0x0, 0x1, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x25, 0x5, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001870611fc557146834c1c5730b028dcbfa000000000000004c0000004c000000020000000000dfffffffff0803000300000000000000000000000000080000000000009f9da8a737c1125193c83282a75dbd0000e3ff030000000002000000000000006546bb2a6a62a5d3403cdf0edb3460c76cc3aae7a1130399596aa9f9a9480394c447633c058307640c0b"], 0x0, 0x66}, 0x20) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) r7 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) 3.750482115s ago: executing program 3 (id=2722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x8, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xb6, &(0x7f000000cf3d)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000080)=@sco={0x1f, @none}, 0x80, 0x0}, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) (async) r4 = socket$kcm(0xa, 0x922000000003, 0x11) (async, rerun: 64) socket$kcm(0x21, 0x2, 0xa) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (rerun: 32) close(r5) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0xc0189436, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x10000009, @mcast1, 0x9, 0x3}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)="f4000900062b2c05fe80000000000000dc8b850f693c66ccfe808100000000000000613a2eb0094401e0728f1dcb09b7", 0x30}], 0x1}, 0x20000884) (async) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0xe, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0x691}], 0x1}, 0x4000080) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) 1.996124302s ago: executing program 1 (id=2723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0xa, 0x0) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000200)=@ieee802154={0x24, @long={0xa}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f21df33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) 1.995151302s ago: executing program 4 (id=2724): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) r1 = socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x405d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8920, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1d, @local}, 0x10, 0x0}, 0x8850) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffff0d, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1fff8}], 0x1}, 0x80d1) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff0000"], 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, 0x0, 0x600) recvmsg(r1, 0x0, 0x40013d62) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, &(0x7f0000000240)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.994608542s ago: executing program 0 (id=2725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x28, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0xfffffffd}, 0x48) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb}, [@ldst={0x3, 0x1, 0x0, 0x7, 0x9, 0x4, 0xfffffffffffffff0}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1850000000000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8a4, 0x8000}, 0x10000, 0xc8, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x18d, &(0x7f00000009c0)='UG\x9b(\x90\xff\xb9\r\xca\x19/\x00\xf3\xaf\t\xe2\xba\xffJ\xf9\xb3Z\xc2K\xa5\x00~\xcdq$\x1en\xa2\xfcA\xae\xafv\x89\xcd\x97!&\xd2\xb4\xd9\x1c\x868kq\x9a7\xae\xa7\xa3RX\xaej\xed\x1e\xf0\xdd0{s?\xd0\xc1\x9e\xf5\xfe\xdf\xd0{\xd6^\xcc/w\xc8Wl\x98\x04zP\x82\xf2\xf4\x0e\xb0\xea}\xa2\x8cc\xbf\xd3\xc2\xeb\xcejB\xf7\x16\vZ\xeb\b\xb1\xce\x93u\x9d\xf7\xac\xc6\xeeO\xe4\'\x1a\xcc\x9c\x02nfM\x9f\xfaP\x99.\xa9\xcda\t\x90\xa7O\xcaaQ\xb6n\x1ea\x92^\xdd\xf1s\x1e\xea\x93\xc7\xb0T\xf3\xa3\xfe\x1d\xce\xc3\xef\xd8]=\x14\xc3[M\x1bR?Fg\xec\xed{%u\x92e\x1edO\xd7\x8c\xc8\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9d\xc5f\x8cw\xf1&l\xc4y\x9d\xf6\xe1\xbe\xe1\x98\x17\x00\xe8\xeb;t\x043{\x18{\xfb\x91:<1\x12^[\xaf0\x1f\x8f#\xa1[\xc3p\x80,BH\x82\x0eYf\xb3s\x9f\xcf\ngT\ad\x82T\xddi\xc4\'\xa2\xac\xa2\xcb\xac\xd4\xfb\xb4\xcb\x9b\xa5\xb87\x9b\x17\xc9`o\xc8]\x8b\xddL\x8d\x8e9P\x97\xef\x99\xffhZl\x91\xa9\xd3\x1f\xa48\xd1\xef?x\xfe\xf5^\xed\xde\xce\xdc\x7f\xb5\xfe$\xef\xf8O\xac\xd4\xdc\xb6[\x96\xff\v\xc9\xe0\xa7\xaaf\xcee9\x82\xeb\xd7\xc7%G\xf39\xfb\xbeA\t\x84\xbb`M\xbe\x96\x94B-\xe3\xab3\xd06\xf9\x92\x8b\xa8\xec\xf0\x857u\xaeb\x97\x9f>\x05&v\xb8\xa7A8\x1f\xc9}j\x8e\xd2'}, 0x30) socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0), 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000380), 0x4) gettid() syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) 1.905663577s ago: executing program 3 (id=2726): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x3, 0xab1d}, 0x81, 0x3, 0x2, 0x0, 0x2, 0x200, 0x0, 0x0, 0x24}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="a0005bf8f1b75e24", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) recvmsg(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x40000000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x6495) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x547241, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000200)='%#$\x00') ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000080)=0xb) 1.869017298s ago: executing program 2 (id=2727): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async, rerun: 64) r1 = socket$kcm(0x18, 0x0, 0x2) (rerun: 64) recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r3 = socket$kcm(0x10, 0x2, 0x0) close(r0) (async) sendmsg$inet(r3, 0x0, 0x4040044) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x5, 0xffffffffffffffff, 0x8) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 32) socket$kcm(0x2, 0x3, 0x2) (async) close(r5) (async, rerun: 64) r6 = socket$kcm(0x2, 0x2, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x2, 0x922000000001, 0x106) (async) recvmsg$kcm(r6, 0x0, 0x40) (async) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000180), &(0x7f0000000080)=r8}, 0x20) (async) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000000)={'veth1_to_batadv\x00'}) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) 1.590556062s ago: executing program 4 (id=2728): socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c855) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000001940)=ANY=[@ANYBLOB="c805000000000000290000000400000043b6"], 0x5c8}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x20, 0x0, 0x0, 0x0, 0x82000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x10c002, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x6, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x541b, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4102) recvmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x1}, @datasec={0x2, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x89, 0x3}], '\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "0eeb31"}]}, {0x0, [0x61, 0x2e]}}, &(0x7f00000000c0)=""/136, 0x50, 0x88, 0x1}, 0x28) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="1c0000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8150001", 0x1f}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='%/[\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.588270752s ago: executing program 2 (id=2738): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0x5e, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000680), 0x8, 0x24, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x19, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x74, &(0x7f0000000080)=""/116, 0x41000, 0x1, '\x00', r1, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x1, 0x4, 0x3, 0x77b}, 0x10, 0x21853, r0, 0x2, &(0x7f0000000900)=[r0, r0, r0, r0, r2], &(0x7f0000000940)=[{0x2, 0x3, 0x9, 0x6}, {0x5, 0x3, 0x2, 0x4}], 0x10, 0xfffff4e4}, 0x94) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="06000000040000007c0500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r5, 0x0, 0x1ba8847c99}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.498235377s ago: executing program 0 (id=2729): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x5}, 0x118e6c, 0xc78, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006118"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000006118"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1818}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1818}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) (async) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) close(r5) (async) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e0301003c05000128876b60864668f82ffdeefa000000000000ffd2acb165fe580cd568020031b87b548cb74136f366da0abe"], 0xffdd) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe88f5d9965ff4a44, @perf_bp={0x0, 0x7}, 0x10000, 0xca, 0x0, 0x0, 0x4000000, 0x8, 0x6, 0x0, 0x0, 0x0, 0x400100}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x10) close(r3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) (async) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffbe}, 0x0) 1.194001992s ago: executing program 2 (id=2730): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x4, 0x20, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1001, 0x0, 0x0, 0x9, 0x0, 0x20000, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x9, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xe, &(0x7f0000000000), 0x4) sendmsg$inet(r0, 0x0, 0xc54) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x95, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9365, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x0, "9442cbb5fc27b55ac2c1e58ad078d137"}, 0x80, 0x0}, 0x40080d0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 965.290963ms ago: executing program 3 (id=2731): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) perf_event_open(0x0, 0x0, 0x7, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, &(0x7f0000000040), 0x3b) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0x2, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000480), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x3, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xb111}}, @union={0x1, 0x4, 0x0, 0x5, 0x1, 0x82, [{0x3, 0x0, 0x54}, {0x7, 0x5, 0x3}, {0x6, 0x4, 0x3387}, {0xb, 0x1, 0x9}]}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000001100)=""/4096, 0x87, 0x1000, 0x1, 0x6f9, 0x10000}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x5a) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xb, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x4a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000018", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 607.231431ms ago: executing program 4 (id=2732): socket$kcm(0xa, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="2d63707520866393e705a639e4c1321d644c1791dd22f6da95b08cc857492f314279e23de371786679b02f20be8ff3f0020418d7945f4f05c00a0a34f7f6c2645b0ab8dba06f6bcbfac333b40cba165be0317e5f1c28f8b4c90a2a8ac628a8a8a19a31789a74eb32cc6f33dbc4ebed39f3c411f79352c8a0138038f0c0dc8e4e09e6ddc0d651222f39074151be464d3ad4099ff05a95d5bd513f09e603908082c9101836cb6a9d8f2aeba4ab00000000000039e8dd88fe9937ed0329"], 0x5) write$cgroup_int(r3, &(0x7f0000000540)=0x34, 0x12) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) 477.622327ms ago: executing program 2 (id=2733): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0xac5d, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@struct={0xd, 0x1, 0x0, 0x4, 0x1, 0xe73f, [{0xb, 0x2, 0x80}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x30, 0x4}]}, {0x0, [0x30, 0x30, 0x5f, 0x30]}}, &(0x7f0000000300)=""/190, 0x46, 0xbe, 0x1, 0xd500, 0x10000, @value=r4}, 0x28) r5 = getpid() sendmsg$unix(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}], 0x20, 0x114}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, 0x0, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x85, 0xd, 0x7, 0x0, 0x7fffffff, 0x8f4240950ea798e7, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x104, 0x2, @perf_bp={0x0, 0x11}, 0x2, 0xfffffffffffffffb, 0x200a, 0x8, 0xc6, 0x4, 0x1003, 0x0, 0xffdffff9, 0x0, 0x8}, 0x0, 0x100000000000000b, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r9, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x6, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) 398.224401ms ago: executing program 4 (id=2734): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x29, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x18000000000002a0, 0xe, 0xffffffab, &(0x7f0000000240)="d2ff03066003008cb89e08d988a8", 0x0, 0xa653, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca010000871611faba526a3501f1753258c767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d8201e8c4c3fda81599b7c4bf635910dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac454e1127e9c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c38937"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd2e}, 0x3d) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 389.973151ms ago: executing program 3 (id=2735): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1b, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffff38a}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x3a, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x5, 0x2, 0x1, 0xa15a}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000100)=[0x1, 0x1, 0xffffffffffffffff, 0x1]}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x80, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0xb6, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x95, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r2 = perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x8, 0xa5, 0x7f, 0x9, 0x0, 0x9, 0x1240, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000840), 0xa}, 0x110c22, 0x3, 0x4, 0x4, 0xa24, 0x8000, 0x2, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000900)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x0, 0xd, 0x9b, &(0x7f0000000940)="9cab9de0a2fb5a1e49a2c8c09d", &(0x7f0000000980)=""/155, 0xdd6, 0x0, 0x4a, 0x7d, &(0x7f0000000a40)="07b0760e8bee452e9e7a90fbccc64e929b3618162e0035af06eed7deb4b5a5517935c3bc23ab398bc8150e58a466f3a38eb452c8f2c1bf16eb13b9807d108aa7b9fe3bed67930947f48a", &(0x7f0000000ac0)="8c99e77fa9e56a5ce393a11a982ba4b7bdbf08cbe44bbf8b6a6f9339bb7eebceb74336cd4dd9aff5d7a227517242bc1b856633dc2f669cf82a55b7fccb023b1f9d26a1aaa99e9e311d680ec1be626512410c0a77995f99841219f261091472a50fe321556572494253a3913e45e9b6f9b021fd9625c0b3d9c8dd797e9e", 0x5, 0x0, 0x3}, 0x50) (async) perf_event_open$cgroup(&(0x7f0000000c00)={0x2, 0x80, 0x2, 0x9, 0xa, 0x2, 0x0, 0x8001, 0x2000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000bc0), 0x1}, 0x3110, 0x1, 0x7ff, 0x7, 0x1, 0x6, 0x4e9a, 0x0, 0x4, 0x0, 0x8d6e}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000e40)={r3, &(0x7f0000000d40)="4c2b9636924cce11757ea43a0a1782574c0b52e484993e3c926677fb6822ef0418479e1c938d3ae983bb", &(0x7f0000000d80)=""/148}, 0x20) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000e80)={[{0x2d, 'net_prio'}]}, 0xa) (async) r4 = socket$kcm(0x29, 0x5, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000f00)={r5, r0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r0, 0x0, 0x13, 0x43, &(0x7f0000000f40)="8499607cd3966e3dd1b70ad7d98623b9ac91d4", &(0x7f0000000f80)=""/67, 0x2, 0x0, 0x1000, 0xf4, &(0x7f0000001000)="809f742673d0976c07141a9a7814a35189ad847f81cb7ab8696557a7fe7c689e522999f93a60bd88a3946e8b69fefdaa49a458222be014400f6bab8b5d6d2b5170a93d9a0a7fa5ed9170439bb652641a408851331bfd471f04bbd2464b79586e322904c17c5023e2e2e0729e41f0afceb1140646d81a43664426a2b73b7fcfda57e126b12d327ce33afb084111ca3ac892c86836bfa31082a9675bb57305a90856902f5321bdf6d6449c64e236830abc515b1b117a9484bc6f3faf540b3394433b4e9aee7e6d33a439220e91e0433db4982d9c30fd202cef70b7b2fd563d39a5a8cdb7dff43067939b9a40fbd7bed31747f4b35435f790e65d10ed628b514d77e6a761d550362730f01075e64e77c4e5cdd0c60c19d345439036cb5daa4598aec2ee372c6957f042fd98bef73fc1b48e837127014ab83f2ffa721058c41ce276b95797fa7a4c159f2518a85f246ae3542c37838a1f5c9458fe1777b22f24babb394dc0da5a31d66e31c10254fec8ceebe26bb18ab6277b39b2bd1d1f9d91450827cab0ebb7d80d542151c1b46491d12001a414c101a8fb3de501085842b207d208af5f6bc5a2611094bfdc590e482f33c9def2837577fb90476dc6b10eccb99c09206c908f1fcf8ed3f196fb605d1819dd7a8b2c54f6699bc7292626d97f60d141d21620ec0a93c1492674d8bf66cc0412f6325ff36ae74850d1a2e7bd4df193cc65b952fc795e084572908b04d08677969daf084fd86f1d05ef0743e1ef0acbbb656cac3177a24e286fe36e6e72545187812e71c92bd03c5bb409d4b15cea1f9097f6c061c68bd69e3744c7639cf5699a730328cef0d659ebc8834b25ff8463f3a15ef65ab7c99b6d19b1f0c7d2754469becd42a5d4e93fd4896900d1666721147c65eceb73b01fcd2049861e9b3c8eac7feddccbcc191dbfcddc1e2290e342ca3f3f1e41a7958dae299cbfaba6cc475b59e27b690dc265cc660628d266b7615dcea06fd4995ade70b90b07a1bd9b6bb10f6645abd38513b575a9d17a2f386ffa032bb95fd0d9a496cf6a37f11348f299aa08d6c4fd8c3d28a5dbe8de696f23954249531cea412ce4b5b3d86bc70a43efe77633e78036ce48f4c69bbf9914c1c6308b2e76827ca83f1481e8871ea3a3f9589669cd5e671206da6c3aaca717fd1e3f6122a130bf6bd79cafe1938574321444eb2cb8f2ade8e68b99cf19b113dc10fb49535ff620c66961aed1c2eae55134b9ae78caa0fb59d239775c355f813833a1ea36999516e6d89381a8c285f5eb923b7eafa52ba3aa91de790ea30112f5e6437a6828e16b3e36672d018905e40f794ec95f7bd50094a525dbcce3666206941b333dac3f7bf427cfbb04f0a0529acd0f5956964fd20d9c8dd9a999e7c6c33562fb1e1db928a76476290d634b503a140fc52d615b0dbfa59f27ade9f8e650a1f916ce79250e20fc05fee9300e9d390288c5bfcb187a8899aa67c2a5246413635b780652b60e09c0deef27f8d7b2f23c515de024e01d43d2663b5a68e7efe5750f788273611fb0397ab32ca179ac2af4519e548d8978103d79846c2e84194098cd97e7a616faf25b76179ea09f28a97abf04982cce1326b571a48fc0cdb6a0b7a066dff06def23c8b5a7e5ce8ab108ba6112b3626ad2729ae2673204ada5858289fce076300141e2d6a6ddaa996aac69e96c4858ff3a5706b9b352010d69d8b1d845241744706dad5715a39e59aaccc4615dd911967f507d90d08c6b58c1661732fb44ca476ea02ee514f844d5757242233ec7ea37d7e77441954c9e468e1b79532d06d4f7e9bce8415fd254b64041aa84757fdb3b8ada87022dd050e870fb07a3f7995826f6ea42a5b2087f408f1523caa124dad8c9c37e69b069563047adf5670abdb0fd84b4133c9e2d6eb0d989907ee63d80ff9e485514629295109c426c3da5bb3eceb55cc6f051ef3438c808280e017e68dce542e62211d638b561efda05ed7a1aa877533a37592cad6470aff84d09333d5780f5fe35f0538de688d0481b83b4e321d6a90e49c3fab879dfb9ca6db5b4d22319e7cc7ca5c08ebe757ba8b23dcb3e78c6a3b9b58b753de65f9e925f500fc5129d43a624b34b022092dd6eae98f76e277c57e3ff389212604354a295e2a06f6df1007ea8f3b8fa56cb5bb6bc8b67a856750d4fa2431e528256076943b2a9dbd48b8ee1c40d4239b7bcd45ddec121bf562fb1a943071e71a2833d0a60f98ee92a3393781c4e4cef4504c5781ee8bede027f2e3aa87713b5a76a5bbcba956b18bebc29543aea882654007b82a74c5f628e209a4d54fd93a133499fcb32fd71d4b9564f072db2f614984c2b64a015533477e5a521d5490aaeeba79e4038e6125b38ec49ba7691c1139d4ae5bf71cf7c945c07b970b26192cd3a107c22e770103e5b31132292b6f27fd2b9788761555bcbcd16755ee31a465fb768ef3bad4a6999529f7c145e444b43f386163ef83e407cb43566f84e0a81d5b4294c3e8061fa62409917394b323d3fb8e6c6dd9f7559d170aed4d624859e51640335452205e367e2ae7cc703f4442cbc5a07e0af67caed4c4239e5f767ac9ce3838036bbb7d2b83ea7ad427acf727632099a7006a4c4d557ca62788d14932265b846e9b7e5d3f6b5e9f470cff5155a43c3e4aeeac06962027aa46bb30d3e3e6696abfff827279aed69a89d7a244e7c112e5142c2cc5597cba398f5b9363237a4ae6ff605c5ef2cfe3a640ed23fa03bf5989d064bf5960fdfecff8658a4ff71ed26db64a5ae4f7c33a45dcdd345f7a2697c7dbac7a2afdef4b8f8047481ea2a48dbe18688dfbe38b010fc9770ba53fbc1a742f52928641211a6dab36e8af2b0b3a37f63472c7b98fca9349ce9a298675e847168c135451c39eaa860fc46eab61f72b0339353487deb587b507ce4145cc6e0ace783ed445c2d8567315279322a8b5aec6630be2cdc8b8fe85e99426acd2ec0f22eceb326fa34958aac7a0ce2d3ba87ac3053a71431c757490a6b450ee9eec16e03741f8e296bc33996b3ee4798b04b2d2761939b3eee915b6979f646f6fa3bf389c11ae67ec99f13eba59996f1ff4e39b13c51b57fcb5e1cb4430626783b6a268ddfc4a3f1ab2c750d86e5f547a65155579bb70e54cc09413a70e0ca537268a982b00411de9ccdf2b1cb66e62bec0947afb73877683543bf25b76a968276733f829bdc13351e5531d2e07a693ea360e77adb3b839dff5a605044309d8ffa9962f133c4c1d8a0b61ae6fe7b6fd278daa658d8d273a14d4d0d3a17eec6bd7097f91289ee1f159360b75f6bc344ccc4b61c5931ed8797fba99ac5759ebc25b1a198e5a5713be012f28837691a181ef67aff7290c91567944bcfd5deb84c9aba80644ba6ad7985e09b2e6d900a9673ed23079108578670d8e88b3c8bf71b03f3b82bdc8e2c81e880277753d026922a7a7b71ae4194d2242577e18dbb1810c8fa9abf405600270c4a2dd7a9c9d6288b308253de73b2ba59dba09d45029c40390b8a003f18041911cf7174f448af1f31e91e68a2a9d79fff47446b6dd61ae3f7593d4b0a7b0cd0430cce39795be9a23a30e66a45478b0812708364031280b55ed640663370724b6289fee1b9f544a18bb6d6fd08a08240f47dfd83ed2bf51ed94ff5946efb87b16759465181bc01190e98521e82f24727cf2590f7271abebe067307ac458196ff983dd65d084f684f6fc93104e0112009388a468e71d9018276a367e2c1a8d5e54e513caccb1cc96e6c0d6bb4f79eee2a64dd5bebaa52a4665d54990a8a7e4db4b3f63f19deb5bd22a75ee01e5c9bbb080d77698510963bf3c0eb6caa4061688f06bab0235c999debca50a6ca13e86a31ee64933843eed8c0164d9f85c7fd02dc261c153650344a34f18538b262d3b44308a22adaeeea8ea51a6cdda82abc9056699f5a3010066c0be34693ef875c308c9ba128837c7f8262dda457734909eb7cb33fe590eae907c85cb02c9801ea7fc7176ccb38519abf9714f36058ad0db261ddc16faf4f5411200be297a54ca672efe6ab186b08ec53849082d8d4ba5e067d45255762d7a283fc62665b8288810533fef39e27a238edf84a082b2337a5d2f9a9eea42c8ced49d4fb5149c0bb931c76339b5e77c3bae286de04067d3ee6bd03bec595ba566d96712a1470f33c7706e4b05d91058f7d72e3d448f7c5c3ced79c1bffffa0ef2bae5aea3beadf3a0977cf235289850114e638a64bb4f171c061ef11899201c84d854cae3a54308e1f8372b40ea851c2484f4e28a9b115418e549cc32f197eab147db91f95de8ce9be8eb57be081e7eb291635057d05d34588833dd7c978d24c53a80d9260f835e7fbc4445854dc2b93872940d3e6b06bb00604909689e0c08001b9f181325c020285acb2a8222ddd856937087a492da2215977b5fcb4e491c7f28e8db576ec1d1c466618edc8895b745758e1d3a2cc8ef2facc67bdfdd4571ce6da78ae200634c3bae6c676a7729157820c2223f0e6b7bb424583d079eddf34c5d4f01e3123886f860e8d294fbcbcd4152c9ce431c0b575d3779f2186bb9954f7cce1ac064dd7d7e4d70f26618e717af0ad25fd511eab8710eec62160fe55a2ca8353451100ac905febc6cd6d753d536cb3e3a04845dfafdbd43769f42786077f6bf6ac08c80db0fc9661142cb52914e6083da48b3f1fee524d946f2b04dd818815e185ac4819bbb0b971a16a01bbc12514bf5b31e6bf32e9d8eb616d8a2c5fdebc1ac60b98123e64490c32c163cfab0fa7d35d5fda86be92db165102523ee3f2741a4e0e38b5fe52e51257243761114a546c320cea352707c21a57d35974457c1fb492003bcd7972c1e4d3893526f1dc7eef6c0f79b441761bc488e656c2e569a31704bb96325e2e322b2fe8e5f6cb87496472f605dde7750353b280b1945e58128f023fb348377a067692bfad5dd242ef17ead829857da9dd81fecb8e1a5fc3c4a8764711d93fa38621617fd7c210845162574c8f3e934e63aa8b6228ccabe9ddddf8113b8156b5c08495faf9b70479633f3fa4cd8cdc8898b26114cca454c241f2788e6a7928652171e7f9b106f268c1bb2c3a9eb9d91d9fcbfb346bc9084771c2f9af6274dfb65c8df909bf4c74ae2ce4c47720daa093010c3c4c3f0fe428c8c7683cebc4444d4757f7d2ea3e67fa277a9854e17e3d818fbcdcd0f784b5b957e7cc2a42d231eb4c1b6e33feecfc6ebdf39a426bebd47d02576db449b627aacd0022c8127b39ee28c4e6b6c3dc2b1d721d60325db78bd5e42ee0147aade85a15ffdb5f1422234d8ef11b3cdc26ebb73ae632cfcea64303e1c4736717ca43adbb9e37f00ced4063705429715de69d6be5e8995cffcd1b8427569b4f5f0b87e4746f937ad5ffc4a1db8df9471ffde1d886c20fb9c6b055ce55e10b50944eaed15b0f468d7ca470b497bf13ef86469502e83e44963af28a172b42d1e54e53d175bb06cd2ce62e19c5e36d397171bf36bc2a120a3e8f1150b3edc6812190c7ccdfa5d9ec8c85d1d637f41539f27553f6ed656d53a85bda1692e2b783fbb06bc67cdbac27e16d9d2ef7f33127dd8bb8a9ca78b319b2ea75bc09d6ad88f9605dcbb88983fe3354aa501d8a3519d184f4c6cf7e2b5ffd4fd00e150479c639f4a6cea038c12b99e85b0971e83b5317768bf73dc6470cc6943b2ae668e5c474b121a20b6bcce66d9d481804e8b54da98d09a6c19c28adb0a44e645c27f93a8033424f4082eaa32f8e5efb4eb0573f80452b93d148e7669958bc", &(0x7f0000002000)="8e0dabdb7e55f4678902c302fe2a5c44e8a1b9ad67919ee845e87012f94e4e35968aa20ae5095aaa5e86566f7a9510398dc2a8a85ed722d812535c6b7a7c7d6f6ecf613d1da8149a232346c0e5c7103782c07ad895412f1fe57dba1861596ee956290696c91637dfdefcbd22843f3803c9b03501a2d3883808e7c59b47bbcec3ef6593a794ff1b8d71637b27c92b1896d0b74846d40cf79c4efa1f0df53d512ac78158e1681c8e96e7674bc1941d566dfb4cb1775ca0f61bd0150d1725dd982ec40b4a9c2c454f2593724e98c6277602d619c361ad9060fe060e515871c51b5c566a965fb5b473c1bff0c02cde3c8c200eb0fd5c", 0x7, 0x0, 0x100}, 0x50) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000002180), 0x8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000021c0)={'ip_vti0\x00', 0x10}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000002200)='\x00') (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002240)={0x1b, 0x0, 0x0, 0x1, 0x0, r3, 0x5, '\x00', 0x0, r6, 0x2, 0x5}, 0x50) r8 = perf_event_open$cgroup(&(0x7f0000002300)={0x0, 0x80, 0x81, 0x8, 0x1, 0x9, 0x0, 0x352, 0x22000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000022c0), 0x3}, 0x100428, 0xea09, 0x7, 0x0, 0x5, 0x91d, 0x9, 0x0, 0x5, 0x0, 0x145}, r6, 0xf, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x5) (async) write$cgroup_pressure(r6, &(0x7f0000002380)={'full', 0x20, 0x6}, 0x2f) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000023c0)=r6, 0x4) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002400)={0x0, 0xffffff96, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x18, 0x11, &(0x7f0000002440)=@raw=[@alu={0x7, 0x1, 0xc, 0x9, 0x0, 0xfffffffffffffff4, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0xa, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @ldst={0x2, 0x1, 0x3, 0xb, 0x2, 0x4, 0x4}], &(0x7f0000002500)='GPL\x00', 0x10000, 0xd0, &(0x7f0000002540)=""/208, 0x40f00, 0x2, '\x00', r1, 0x0, r6, 0x8, &(0x7f0000002640)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002680)={0x4, 0xe, 0x80, 0xfe0}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000026c0)=[r6, r7, r3, r3], &(0x7f0000002700)=[{0x4, 0x5, 0x1, 0x5}, {0x0, 0x4, 0x5, 0x5}, {0x0, 0x4, 0xf, 0xc}], 0x10, 0x800}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002900)={@fallback=r4, 0x0, 0x0, 0x4, &(0x7f0000002800)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000028c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$TUNGETVNETLE(r10, 0x800454dd, &(0x7f0000002940)) (async) close(r7) (async) r11 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x89e1, &(0x7f0000002980)={r4}) 149.765513ms ago: executing program 3 (id=2736): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=2737): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x1}], 0x1}, 0xc8d4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x5, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a1040011800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x40400) (async, rerun: 32) r4 = socket$kcm(0x10, 0x5, 0x0) (rerun: 32) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)="5c00000012006bab073fe3d86e17aae69ee517d34460bc06000000a70125", 0x1e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000500)=""/237, 0xed}, {&(0x7f00000038c0)=""/4027, 0xfbb}, {&(0x7f00000020c0)=""/4129, 0x1021}, {&(0x7f0000000680)=""/131, 0x83}, {&(0x7f0000000200)=""/46, 0x2e}], 0x6}, 0x40012020) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000bc0)={&(0x7f0000000fc0), &(0x7f0000001080)=""/145, &(0x7f0000001140)="a7be0723d69dc094e3d44914195b05c4def4d5853febb342e8792a64ac22afbce5eca8c44b", &(0x7f0000004880)="2e7d79792ec290605f671433f5f5b6b0188ddb861f05510019109362de25a443809f45e90dd3f78f28981c0f1182691c3672980d36c6f8c28309783d65539d3df5412828bd387ce9eea556e5a5e6ed3902e1aea4fb85243943c7e6388cffc448829fecb36d25528160c27fd3313fab3fe723ea680c2d80c11f9dd8c451740d658c28f2910ff99a5d965970824a8526a40fc92790e66750deeeaa6487dcaccfd98db4aa6539edccd890bbc1307109ef72ebb5c7ec3b565a78c70f07175eec424073f434128f34b5ed3424890209ae91fa0cb8ef1a9380fcdd972e911b4f0dadbb7eb9ca23a0682b56c35b80f971b755b528cfc921cc02d42f643c575956eae1884a2d8f5b41363dc4d3ccbbb2f8eaec3e2719ad768eb49a064e744a94da8d0645b344c30c485e00667a72c4151f96f26bc56493a54ca2f6ef032e432078e0fe4e9cf7bb2f15ed9f39c824a338d259f35903bcc659279af9551f03c436d289bd6041030befeac412dc83a0adbfedee15da101976ab065797e9af125f24c1890e639d81460322cabb9fe6558461d07ece40a6dc287fa86311de5a27bb0f7bdc25250d6be8606408f307443d479add10eb3d157fdbbb1a1edf13b6d889f1a7a972169aa7801c66b7f1369a6e0167147769bdb9c43797694ca6051ec83292d1cee2f88f20fb6c15c21fa3af730d0ff38ab177b321b6da977084acd592fc78fb189ba1de90a3a118cdffee72c260bba4e85094d3f2ec967f18d3fd59b6a104c61146f103060e82fbcda04d4837ee75f987b0b50298316cd194ca2a3c7b25010d08ae108e1e9d1f5d1f9641b1f0461a2740469f289fd2d3a8236794f7c9de36380fa322d77d35f51bb7fb59bd3436b92b893ad6ee1d8a2bf53cc42ced17028ce5923296795602837efde7bf81cc2170a62ba544d5358f7dc91b8c3fa85f93eab56dbbc381cf04e5b8244cff83b00d60f669162806bc0fe4e5894236cf2b76d39aa1596ddc013349e16c9f40d536acbb3053e95a3a85108d49e77810d4723352db22ddf6e6ab55469103aa3c5e8f4b7c17f773f1c2b7b1e2d365a10e4e13faeabcc3633f2b5d87f0c76448156897c26e81eb8b8656a67ddff87346c7fe79dabea8e728c48908047bcb34060722e3b9aab3580c52aaf321a202f7ab377cd9533d82a6422e6fccbcd1d4fceb8e86bd7497b862bdd7df583f6922324efa7e08499d0508c890cdb8fb1409e6e73a60b37bd621244ecb3c84f4c4a9b6bd49ce07c9114731cfed1ab229d389f5a23f9eb22c2222d7fdf7fa0dfb4f2674edeaeec5ec9a51a579423c9165a46a695555644c986543a8c6bf7f48282c80b27a6c0348e7dfeab4ca572c12acfaa8f765c5d77deb63c1b07c698753ad3aa179554f52345a6e443fb786db8188335705865e6658d303d0a96384d20e2bfda9a2e104631a9ec6583d1c815daa1715eac66de64b95aed8faa70179be0719a10fa777ffeef1896a17f402252ed7c2e496e9a9e036ffe0ef3512a4e188c0a06ec7713a24d055758a7996519b73a55f3664229b5baa8ae947c8341ef64f25a6534259a9c120823570af53049c6883f958372220c0bddec4ee85559d9c83b94f7a2cdde440f102b842e8671651d14b07ef924a040681bc7cc298f7e7d1864b1efa685320dfbac4b33a2bd0e88c16972d596ebcb69fdb34df14da9745a1e10e640ec7d1fd4d1e4283d075e6cb9e3cb53e44e47b0c37a039021368258ab974b63da1366d2353dcda09d1f6f446f6bf89d62b388839d71b74a50199ea848dbc6bfe524ee4442fbef94389708c6de553d7f4e422f6a265b5717b95306f65233d6d8ffc9f2cfd3c11c26849795314de7af251fa0daee74c359aadb9bd014e3cab3e640ccb0ffa7e526951bc1112088b8dde07317171ae99b31bd18c82ec8813532487339c0530e96ea574a50a2c734953d7156eb88b6e1158e3f1b75c3ad95b42e563f2cb7de91f3a989d6dd5ae1a26a588341aaf32e50624aaac6b9bf4bac045f3ed09e73d8180dfd4f9ff69db25569d421df3f653e2a69c2f5b6b9de9a8c7e456004f8bbdb735a825d2e41da3281359dc226ef4ae0c5e009918a4f5c3b208223079e7faa1c5da3f6a4a49453813a46b9d8ac697d9acc20509fd2ba8f4ec4103bbd9fca02673279d080ef6a7122cc01e220f69bba439a87c565e8632374bec2d7c0375969c62a5ae9d506649fbc69135e96738f405f2d4b9fd262af9f6bc9b31282df37363fe39819009f1f974882abe3371bc11526e60d7266c22667496da9ab9dcb0d4537612b352e22aca9f6de5be6a3a72fa09eb7c7f1d7d6e4d0ca532516c7824152f8b5c03e14d09ac5e60073205caf9db755d1f1e1b87d37f7a90a2e745f6fc8ce956b65b99352601ec902d66a429512b83982c0ac91bc23387d1757c44965f4c9f140229d2a00bbea186104bddae3871ac7e74136d13573aba40abcca9574e4cd8effe60b8dc000c0b15835329200b31fea84696bb2ce3412d0999f08a97f21ab7b86786b84328fc918002d8301448b957c54f5c7d1ce88eecb40ecf8330d63bb8f157ebff27d46dfdd587a16bc0e7f0a3d403dfb1b1b98bd4b43b48728a9ea51758ceafc2ce1c1e40ec7c250854657cac3b19ad2791a2dc7e014595bc85c0a056822c591aafdcaed359eab28e9dfea776b92c832fe7139930c2aa524d67d99ff745fd3ee866f7c262ea2025a36786d3fc7cc1f7b09b0b0afa9b0b4697129609d5f4b0896fd799e687061d81ee77686e3a820ad12d26b7128a00e352eed7c6575c6d07d17e6f26eea7d024", 0x5, r5}, 0x38) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmsg$inet(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000dc0)="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", 0xfb}], 0x1, &(0x7f0000000ec0)=[@ip_retopts={{0x84, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x3a, 0x3, 0xa, [{@multicast1, 0xa132}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0xe, [{@loopback, 0x9}, {@loopback, 0x1}, {@loopback, 0xff}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x582}]}, @timestamp_addr={0x44, 0x2c, 0x80, 0x1, 0x0, [{@loopback, 0xfffff3b4}, {@local, 0x3}, {@loopback}, {@broadcast, 0x4}, {@remote, 0x6ad0}]}, @lsrr={0x83, 0xf, 0xd1, [@empty, @local, @private=0xa010100]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9a}}], 0xb8}, 0x20004890) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) (async) openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): k: 132 bytes leftover after parsing attributes in process `syz.3.664'. [ 257.812457][ T6650] : port 1(ip6gretap0) entered blocking state [ 257.819210][ T6650] : port 1(ip6gretap0) entered disabled state [ 257.836918][ T6650] device ip6gretap0 entered promiscuous mode [ 257.963953][ T6647] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 258.058573][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.665'. [ 258.074334][ T6647] syzkaller0: owner set to 0 [ 258.130368][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.665'. [ 258.150265][ T6647] netlink: 60 bytes leftover after parsing attributes in process `syz.2.665'. [ 258.184349][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.665'. [ 258.217097][ T6660] netlink: 'syz.1.670': attribute type 21 has an invalid length. [ 258.238363][ T6647] netlink: 'syz.2.665': attribute type 21 has an invalid length. [ 258.259340][ T6647] IPv6: NLM_F_CREATE should be specified when creating new route [ 258.606584][ T6667] netlink: 64519 bytes leftover after parsing attributes in process `syz.1.674'. [ 258.655080][ T6676] netlink: 'syz.3.676': attribute type 1 has an invalid length. [ 258.673810][ T6676] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.676'. [ 259.588081][ T6688] delete_channel: no stack [ 260.019779][ T6708] netlink: 'syz.4.686': attribute type 10 has an invalid length. [ 260.097213][ T6708] bond0: (slave bond_slave_0): Releasing backup interface [ 260.649325][ T6716] netlink: 132 bytes leftover after parsing attributes in process `syz.0.688'. [ 260.852364][ T6721] netlink: 'syz.3.690': attribute type 10 has an invalid length. [ 260.942372][ T6723] syz.3.690[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.942524][ T6723] syz.3.690[6723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.959814][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.979238][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.215034][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.222528][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.231704][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.239088][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.411353][ T6721] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.581334][ T6727] netlink: 'syz.4.691': attribute type 10 has an invalid length. [ 262.822220][ T6738] netlink: 144 bytes leftover after parsing attributes in process `syz.3.697'. [ 263.360548][ T6743] device syzkaller0 entered promiscuous mode [ 263.439790][ T6745] netlink: 180 bytes leftover after parsing attributes in process `syz.0.699'. [ 263.481378][ T6747] netlink: 'syz.2.695': attribute type 10 has an invalid length. [ 263.580536][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.615385][ T6747] bond0: (slave team0): Enslaving as an active interface with an up link [ 270.015185][ T6759] netlink: 'syz.3.702': attribute type 21 has an invalid length. [ 270.023176][ T6759] netlink: 'syz.3.702': attribute type 1 has an invalid length. [ 270.030887][ T6759] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.702'. [ 270.563799][ T6801] netlink: 'syz.3.715': attribute type 2 has an invalid length. [ 270.579217][ T6801] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 271.841638][ T6808] netlink: 'syz.2.713': attribute type 10 has an invalid length. [ 271.850180][ T6808] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.713'. [ 271.864080][ T6813] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.713'. [ 271.879721][ T6813] bridge_slave_1: default FDB implementation only supports local addresses [ 271.919343][ T6811] netlink: 'syz.4.717': attribute type 17 has an invalid length. [ 271.938881][ T6811] netlink: 148 bytes leftover after parsing attributes in process `syz.4.717'. [ 272.409719][ T4283] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 273.055336][ T6839] device syzkaller0 entered promiscuous mode [ 275.576782][ T6880] device syzkaller0 entered promiscuous mode [ 278.216969][ T6919] netlink: 'syz.1.744': attribute type 2 has an invalid length. [ 278.251186][ T6919] netlink: 'syz.1.744': attribute type 8 has an invalid length. [ 278.287396][ T6919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.744'. [ 278.315242][ T6913] netlink: 'syz.2.742': attribute type 3 has an invalid length. [ 278.332607][ T6913] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.742'. [ 278.739025][ T6928] device syzkaller0 entered promiscuous mode [ 278.971750][ T6940] device veth1_macvtap entered promiscuous mode [ 279.017534][ T6940] device macsec0 entered promiscuous mode [ 283.479066][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 283.488577][ T6954] netlink: 'syz.4.753': attribute type 10 has an invalid length. [ 283.498732][ T6954] nr0: port 1(hsr0) entered disabled state [ 283.512411][ T6954] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 284.121905][ T6979] device syzkaller0 entered promiscuous mode [ 284.468970][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.2 [ 284.772748][ T6997] netlink: 'syz.0.764': attribute type 16 has an invalid length. [ 287.532541][ T7003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.539904][ T7003] IPv6: NLM_F_CREATE should be set when creating new route [ 287.887073][ T4283] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 290.905014][ T7091] netlink: 'syz.4.794': attribute type 21 has an invalid length. [ 290.923196][ T7091] netlink: 132 bytes leftover after parsing attributes in process `syz.4.794'. [ 292.102798][ T7119] netlink: 144 bytes leftover after parsing attributes in process `syz.4.802'. [ 293.742217][ T7158] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.814'. [ 293.771468][ T7158] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 293.962386][ T7165] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 293.991383][ T7165] netlink: 'syz.0.816': attribute type 1 has an invalid length. [ 294.012754][ T7165] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.816'. [ 294.171112][ T7170] netlink: 'syz.2.818': attribute type 29 has an invalid length. [ 294.235604][ T7170] netlink: 'syz.2.818': attribute type 29 has an invalid length. [ 294.253027][ T7171] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.818'. [ 294.376282][ T7170] netlink: 'syz.2.818': attribute type 10 has an invalid length. [ 294.406854][ T7170] device hsr0 entered promiscuous mode [ 294.515853][ T7170] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 294.559586][ T7170] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 294.583276][ T7170] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 294.635890][ T7170] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 295.173186][ T7177] netlink: 'syz.1.819': attribute type 10 has an invalid length. [ 295.189123][ T7177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.819'. [ 295.219265][ T7177] device ipvlan1 entered promiscuous mode [ 295.249624][ T7177] bridge0: port 3(ipvlan1) entered blocking state [ 295.378517][ T7177] bridge0: port 3(ipvlan1) entered disabled state [ 295.444004][ T7177] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 295.619994][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.819'. [ 295.654346][ T7189] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 295.799580][ T7185] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 295.836875][ T7185] syzkaller0: persist disabled [ 296.599682][ T7185] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 296.659590][ T7185] syzkaller0: ignored: set checksum disabled [ 297.414484][ T7209] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 297.452470][ T7209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.669475][ T7218] device lo entered promiscuous mode [ 298.741049][ T7218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.001203][ T7229] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.832'. [ 300.059792][ T7229] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.832'. [ 300.462779][ T7245] -1: renamed from syzkaller0 [ 305.014489][ T7293] netlink: 14 bytes leftover after parsing attributes in process `syz.3.850'. [ 305.215630][ T7294] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 305.253710][ T7294] netlink: 55 bytes leftover after parsing attributes in process `syz.3.850'. [ 306.024763][ T7306] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.851'. [ 307.610826][ T7314] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.854'. [ 309.680715][ T7347] device syzkaller0 entered promiscuous mode [ 316.866578][ T7401] netlink: 'syz.4.880': attribute type 3 has an invalid length. [ 316.889727][ T7401] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.880'. [ 317.195587][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.201987][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.122728][ T7414] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 318.134015][ T7412] netlink: 132 bytes leftover after parsing attributes in process `syz.4.884'. [ 321.282999][ T7407] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 321.299387][ T7407] syzkaller0: persist disabled [ 321.339784][ T7414] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 321.346082][ T7414] syzkaller0: ignored: set checksum disabled [ 322.096654][ T7448] device syzkaller0 entered promiscuous mode [ 322.258432][ T7458] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.896'. [ 330.944792][ T7509] netlink: 'syz.2.912': attribute type 40 has an invalid length. [ 331.154552][ T7512] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 331.462682][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.914'. [ 331.525500][ T7512] bridge0: port 3(ipvlan1) entered blocking state [ 331.533095][ T7512] bridge0: port 3(ipvlan1) entered disabled state [ 331.549123][ T7512] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 332.956790][ T7540] device syzkaller0 entered promiscuous mode [ 333.961125][ T7566] netlink: 'syz.4.928': attribute type 3 has an invalid length. [ 333.987797][ T7566] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.928'. [ 338.673074][ T7591] netlink: 830 bytes leftover after parsing attributes in process `syz.3.936'. [ 338.688915][ T7591] device veth0_to_bond entered promiscuous mode [ 338.699400][ T7592] netlink: 144 bytes leftover after parsing attributes in process `syz.3.936'. [ 339.059243][ T7606] netlink: 'syz.4.937': attribute type 1 has an invalid length. [ 339.109429][ T7606] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.937'. [ 342.469832][ T7634] netlink: 'syz.1.947': attribute type 11 has an invalid length. [ 342.484712][ T7634] netlink: 168 bytes leftover after parsing attributes in process `syz.1.947'. [ 342.512597][ T7641] netlink: 'syz.0.951': attribute type 16 has an invalid length. [ 342.521430][ T7641] netlink: 48 bytes leftover after parsing attributes in process `syz.0.951'. [ 343.774001][ T7680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'. [ 347.536768][ T7716] netlink: 'syz.0.977': attribute type 21 has an invalid length. [ 347.566539][ T7716] netlink: 128 bytes leftover after parsing attributes in process `syz.0.977'. [ 347.586316][ T7716] netlink: 'syz.0.977': attribute type 4 has an invalid length. [ 347.595001][ T7716] netlink: 'syz.0.977': attribute type 3 has an invalid length. [ 347.611029][ T7716] netlink: 3 bytes leftover after parsing attributes in process `syz.0.977'. [ 352.081507][ T7763] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.991'. [ 352.617087][ T7779] syz.0.998[7779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.617224][ T7779] syz.0.998[7779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.069914][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 0.0.0.32 [ 356.369565][ T7811] team0: Port device team_slave_0 removed [ 356.397276][ T7811] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 356.827334][ T7821] netlink: 'syz.1.1011': attribute type 40 has an invalid length. [ 359.014916][ T7834] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1017'. [ 359.227758][ T7852] netlink: 'syz.1.1021': attribute type 10 has an invalid length. [ 360.808391][ T7868] cgroup: fork rejected by pids controller in /syz0 [ 361.403661][ T7888] netlink: 'syz.3.1034': attribute type 16 has an invalid length. [ 361.432705][ T7888] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1034'. [ 361.759896][ T7892] device syzkaller0 entered promiscuous mode [ 365.959989][ T7920] netlink: 'syz.3.1043': attribute type 9 has an invalid length. [ 365.968273][ T7920] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1043'. [ 369.071163][ T4279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.081399][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.099107][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.108145][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.116292][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 369.123769][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.193583][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.391631][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.500904][ T7938] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1052'. [ 369.723850][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.883670][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.180716][ T7945] device syzkaller0 entered promiscuous mode [ 371.189114][ T4274] Bluetooth: hci2: command 0x0409 tx timeout [ 373.045553][ T7935] chnl_net:caif_netlink_parms(): no params data found [ 373.269024][ T4274] Bluetooth: hci2: command 0x041b tx timeout [ 373.333279][ T7978] tap0: tun_chr_ioctl cmd 1074025675 [ 373.353174][ T7978] tap0: persist enabled [ 375.348886][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 376.431076][ T46] device ip6gretap0 left promiscuous mode [ 376.439349][ T46] : port 1(ip6gretap0) entered disabled state [ 376.461934][ T7978] tap0: tun_chr_ioctl cmd 1074025675 [ 376.467396][ T7978] tap0: persist disabled [ 376.473069][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.481008][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.490769][ T7935] device bridge_slave_0 entered promiscuous mode [ 376.514805][ T8003] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1064'. [ 376.672256][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.689310][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.709871][ T7935] device bridge_slave_1 entered promiscuous mode [ 376.895352][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.096880][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.285973][ T8034] netlink: 'syz.3.1069': attribute type 21 has an invalid length. [ 377.309773][ T8034] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 377.352115][ T8031] netlink: 'syz.3.1069': attribute type 21 has an invalid length. [ 377.371616][ T8031] netlink: 'syz.3.1069': attribute type 1 has an invalid length. [ 377.429010][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 377.507981][ T7935] team0: Port device team_slave_0 added [ 377.521674][ T8046] netlink: 'syz.4.1071': attribute type 21 has an invalid length. [ 377.533424][ T8046] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1071'. [ 377.601681][ T7935] team0: Port device team_slave_1 added [ 377.764660][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.779363][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.829041][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.938535][ T8044] device syzkaller0 entered promiscuous mode [ 378.007903][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.021268][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.077692][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.633560][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.644284][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.776698][ T7935] device hsr_slave_0 entered promiscuous mode [ 380.814994][ T7935] device hsr_slave_1 entered promiscuous mode [ 380.860291][ T7935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.868099][ T7935] Cannot create hsr debugfs directory [ 381.442099][ T8086] device bridge_slave_1 left promiscuous mode [ 381.448565][ T8086] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.502691][ T8086] device bridge_slave_0 left promiscuous mode [ 381.520555][ T8086] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.691664][ T8086] bond0: (slave bridge0): Releasing backup interface [ 381.843580][ T46] device hsr_slave_0 left promiscuous mode [ 381.909157][ T46] device hsr_slave_1 left promiscuous mode [ 381.918357][ T46] device bridge_slave_1 left promiscuous mode [ 381.960520][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.977578][ T46] device bridge_slave_0 left promiscuous mode [ 382.002480][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.137775][ T46] device veth1_vlan left promiscuous mode [ 382.169059][ T46] device veth0_vlan left promiscuous mode [ 382.244092][ T8109] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1083'. [ 382.553735][ T8122] FAULT_INJECTION: forcing a failure. [ 382.553735][ T8122] name failslab, interval 1, probability 0, space 0, times 1 [ 382.608983][ T8122] CPU: 1 PID: 8122 Comm: syz.2.1084 Not tainted syzkaller #0 [ 382.616442][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.626653][ T8122] Call Trace: [ 382.629996][ T8122] [ 382.632970][ T8122] dump_stack_lvl+0x188/0x24e [ 382.637733][ T8122] ? show_regs_print_info+0x12/0x12 [ 382.643084][ T8122] ? load_image+0x400/0x400 [ 382.647646][ T8122] ? __might_sleep+0xd0/0xd0 [ 382.652290][ T8122] ? __lock_acquire+0x7d10/0x7d10 [ 382.657385][ T8122] should_fail_ex+0x399/0x4d0 [ 382.662131][ T8122] should_failslab+0x5/0x20 [ 382.666875][ T8122] slab_pre_alloc_hook+0x59/0x310 [ 382.671965][ T8122] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 382.677740][ T8122] __kmem_cache_alloc_node+0x4f/0x260 [ 382.683164][ T8122] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 382.688952][ T8122] __kmalloc+0xa0/0x240 [ 382.693158][ T8122] tomoyo_realpath_from_path+0xdf/0x5d0 [ 382.698756][ T8122] ? tomoyo_path_number_perm+0x205/0x650 [ 382.704424][ T8122] tomoyo_path_number_perm+0x22f/0x650 [ 382.709935][ T8122] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 382.715423][ T8122] ? ksys_write+0x1c0/0x250 [ 382.719977][ T8122] ? common_file_perm+0x171/0x1c0 [ 382.725053][ T8122] ? __fget_files+0x28/0x4b0 [ 382.729685][ T8122] ? __fget_files+0x28/0x4b0 [ 382.734315][ T8122] security_file_ioctl+0x6c/0xa0 [ 382.739291][ T8122] __se_sys_ioctl+0x48/0x170 [ 382.743949][ T8122] do_syscall_64+0x4c/0xa0 [ 382.748405][ T8122] ? clear_bhb_loop+0x60/0xb0 [ 382.753114][ T8122] ? clear_bhb_loop+0x60/0xb0 [ 382.757820][ T8122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 382.763742][ T8122] RIP: 0033:0x7fa447f9c799 [ 382.768709][ T8122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.788351][ T8122] RSP: 002b:00007fa448df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.796797][ T8122] RAX: ffffffffffffffda RBX: 00007fa448216090 RCX: 00007fa447f9c799 [ 382.804800][ T8122] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000004 [ 382.812801][ T8122] RBP: 00007fa448df6090 R08: 0000000000000000 R09: 0000000000000000 [ 382.820807][ T8122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.828814][ T8122] R13: 00007fa448216128 R14: 00007fa448216090 R15: 00007ffceda00a08 [ 382.836847][ T8122] [ 382.892324][ T8122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.683287][ T46] team0 (unregistering): Port device team_slave_1 removed [ 383.748482][ T46] team0 (unregistering): Port device team_slave_0 removed [ 383.808350][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.874435][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.211833][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 384.257532][ T46] bond0 (unregistering): Released all slaves [ 384.381873][ T8131] netlink: 'syz.3.1085': attribute type 21 has an invalid length. [ 384.398490][ T8131] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1085'. [ 384.502360][ T8129] device syzkaller0 entered promiscuous mode [ 386.694308][ T8139] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 386.722262][ T8139] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 386.744543][ T8139] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 387.004556][ T8154] netlink: 'syz.4.1094': attribute type 10 has an invalid length. [ 387.032775][ T8154] team0: Device ipvlan1 failed to register rx_handler [ 388.286952][ T8160] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 388.293067][ T8160] syzkaller0: linktype set to 820 [ 388.303429][ T8169] device bridge_slave_0 entered promiscuous mode [ 388.579180][ T8190] tipc: Started in network mode [ 388.584542][ T8190] tipc: Node identity 9215a268, cluster identity 4711 [ 388.622612][ T8190] tipc: Node number set to 2450891368 [ 388.689246][ T8190] netlink: 'syz.2.1099': attribute type 10 has an invalid length. [ 388.764891][ T8190] team0: Device hsr_slave_0 failed to register rx_handler [ 388.937790][ T7935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.960820][ T7935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.994243][ T7935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.033890][ T7935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.283713][ T8208] device syzkaller0 entered promiscuous mode [ 389.461689][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.811732][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 392.821130][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 392.831760][ T7935] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.842187][ T8245] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 392.852141][ T8245] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1111'. [ 393.191737][ T8246] netlink: 'syz.4.1111': attribute type 10 has an invalid length. [ 393.207781][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 393.241053][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 393.250104][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.257274][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.311881][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 393.329113][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 393.368263][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 393.387515][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.394772][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.437375][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 393.528639][ T8265] netlink: 'syz.1.1115': attribute type 3 has an invalid length. [ 393.537078][ T8265] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1115'. [ 393.553927][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 393.566974][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 393.597717][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 393.783633][ T8270] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 393.812194][ T8270] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1115'. [ 394.329038][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 394.350897][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.386707][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.414444][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 394.443964][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 394.493594][ T8271] netlink: 'syz.2.1117': attribute type 13 has an invalid length. [ 394.539318][ T8271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1117'. [ 394.573121][ T8271] erspan0: refused to change device tx_queue_len [ 394.599351][ T8271] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 394.837956][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 394.851342][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 394.861934][ T8294] netlink: 'syz.3.1121': attribute type 3 has an invalid length. [ 394.882422][ T7935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 394.909729][ T8294] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1121'. [ 394.923087][ T8291] netlink: 'syz.1.1120': attribute type 21 has an invalid length. [ 394.950281][ T8291] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1120'. [ 394.976498][ T8297] syz.3.1121[8297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 394.981172][ T8297] syz.3.1121[8297] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 395.098402][ T8296] tap0: tun_chr_ioctl cmd 1074025677 [ 395.159620][ T8296] tap0: linktype set to 805 [ 395.863970][ T8311] device syzkaller0 entered promiscuous mode [ 396.220344][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.228506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.252877][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.386417][ T8328] netlink: 'syz.3.1127': attribute type 10 has an invalid length. [ 398.411805][ T8328] team0: Port device dummy0 added [ 398.555404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 398.569854][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 398.665167][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 398.679879][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 398.707185][ T7935] device veth0_vlan entered promiscuous mode [ 398.720697][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 398.740238][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 398.767068][ T7935] device veth1_vlan entered promiscuous mode [ 398.854020][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 398.876596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 398.899907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 398.961509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 398.992452][ T7935] device veth0_macvtap entered promiscuous mode [ 399.024261][ T7935] device veth1_macvtap entered promiscuous mode [ 399.101731][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.126609][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 399.145573][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 399.165033][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 399.187744][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 399.258649][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.283445][ T7935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.349240][ T7935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.386142][ T7935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.422616][ T7935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.453016][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 399.463297][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 399.852986][ T5060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.872836][ T5060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.923471][ T5060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.985087][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.008844][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.033154][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 400.046812][ T8387] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1134'. [ 400.153313][ T8387] netlink: 2759 bytes leftover after parsing attributes in process `syz.4.1134'. [ 401.496536][ T8408] device syzkaller0 entered promiscuous mode [ 404.208099][ T8432] netlink: 'syz.1.1144': attribute type 21 has an invalid length. [ 404.216132][ T8432] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 404.228456][ T8432] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1144'. [ 404.238488][ T8433] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1144'. [ 406.751744][ T8474] netlink: 'syz.4.1155': attribute type 27 has an invalid length. [ 406.785177][ T8474] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1155'. [ 408.172689][ T8501] device syzkaller0 entered promiscuous mode [ 411.891915][ T8594] netlink: 'syz.3.1171': attribute type 27 has an invalid length. [ 411.979681][ T8594] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1171'. [ 412.497470][ T8617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1178'. [ 413.919841][ T8611] netlink: 'syz.3.1176': attribute type 6 has an invalid length. [ 413.927619][ T8611] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1176'. [ 413.952958][ T8617] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1178'. [ 417.925294][ T8659] device syzkaller0 entered promiscuous mode [ 418.311879][ T8678] netlink: 'syz.3.1193': attribute type 2 has an invalid length. [ 418.352969][ T8678] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1193'. [ 420.279878][ T8695] netlink: 'syz.1.1197': attribute type 10 has an invalid length. [ 420.343387][ T8695] team0: Port device wlan1 added [ 420.559466][ T8703] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1200'. [ 423.424917][ T8707] netlink: 'syz.3.1199': attribute type 10 has an invalid length. [ 423.439684][ T8707] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 423.481387][ T8707] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 423.505817][ T8707] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 423.519918][ T8707] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 424.602100][ T8740] netlink: 'syz.2.1212': attribute type 3 has an invalid length. [ 424.620416][ T8740] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1212'. [ 424.690054][ T8735] device syzkaller0 entered promiscuous mode [ 425.384963][ T8764] FAULT_INJECTION: forcing a failure. [ 425.384963][ T8764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.398831][ T8764] CPU: 0 PID: 8764 Comm: syz.3.1218 Not tainted syzkaller #0 [ 425.406259][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.417040][ T8764] Call Trace: [ 425.420344][ T8764] [ 425.423312][ T8764] dump_stack_lvl+0x188/0x24e [ 425.428054][ T8764] ? show_regs_print_info+0x12/0x12 [ 425.433307][ T8764] ? load_image+0x400/0x400 [ 425.437889][ T8764] ? __lock_acquire+0x7d10/0x7d10 [ 425.442964][ T8764] should_fail_ex+0x399/0x4d0 [ 425.447679][ T8764] _copy_from_user+0x2c/0x170 [ 425.452391][ T8764] iovec_from_user+0x143/0x360 [ 425.457217][ T8764] __import_iovec+0x6d/0x500 [ 425.461861][ T8764] import_iovec+0x6f/0xa0 [ 425.466276][ T8764] ___sys_sendmsg+0x252/0x360 [ 425.471009][ T8764] ? __sys_sendmsg+0x290/0x290 [ 425.475924][ T8764] ? __lock_acquire+0x7d10/0x7d10 [ 425.481007][ T8764] __se_sys_sendmsg+0x1bb/0x2a0 [ 425.485911][ T8764] ? __x64_sys_sendmsg+0x80/0x80 [ 425.490901][ T8764] ? lockdep_hardirqs_on+0x94/0x140 [ 425.496144][ T8764] do_syscall_64+0x4c/0xa0 [ 425.500601][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 425.505310][ T8764] ? clear_bhb_loop+0x60/0xb0 [ 425.510027][ T8764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.515950][ T8764] RIP: 0033:0x7fbd7ff9c799 [ 425.520393][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.540021][ T8764] RSP: 002b:00007fbd80e85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.548474][ T8764] RAX: ffffffffffffffda RBX: 00007fbd80215fa0 RCX: 00007fbd7ff9c799 [ 425.556472][ T8764] RDX: 0000000020000040 RSI: 0000200000000140 RDI: 0000000000000007 [ 425.564465][ T8764] RBP: 00007fbd80e85090 R08: 0000000000000000 R09: 0000000000000000 [ 425.572462][ T8764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.580572][ T8764] R13: 00007fbd80216038 R14: 00007fbd80215fa0 R15: 00007ffd1983f8a8 [ 425.588588][ T8764] [ 425.824582][ T8767] netlink: 'syz.3.1219': attribute type 12 has an invalid length. [ 425.840372][ T8767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1219'. [ 425.926930][ T8768] netlink: 'syz.3.1219': attribute type 29 has an invalid length. [ 425.943191][ T8768] netlink: 'syz.3.1219': attribute type 29 has an invalid length. [ 431.868969][ T8777] netlink: 'syz.1.1222': attribute type 21 has an invalid length. [ 432.750160][ T8850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1235'. [ 435.834593][ T8896] device syzkaller0 entered promiscuous mode [ 439.806921][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1245'. [ 439.969159][ T8944] sctp: [Deprecated]: syz.4.1249 (pid 8944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.969159][ T8944] Use struct sctp_sack_info instead [ 440.071400][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.077775][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.401650][ T8947] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1252'. [ 440.593171][ T8962] netlink: 'syz.3.1253': attribute type 3 has an invalid length. [ 440.633765][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1253'. [ 440.989557][ T8966] syz.0.1256[8966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.989680][ T8966] syz.0.1256[8966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.423268][ T9005] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1267'. [ 447.083626][ T9042] netlink: 'syz.1.1275': attribute type 2 has an invalid length. [ 447.095317][ T9042] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1275'. [ 448.403721][ T9054] netlink: 'syz.0.1278': attribute type 10 has an invalid length. [ 450.237874][ T9054] team0: Port device macvlan0 added [ 451.745020][ T9097] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1295'. [ 451.759146][ T9097] bridge_slave_1: default FDB implementation only supports local addresses [ 454.601791][ T9101] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1296'. [ 454.732691][ T9111] netlink: 'syz.2.1296': attribute type 11 has an invalid length. [ 454.828901][ T9111] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1296'. [ 454.900008][ T9114] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1300'. [ 454.955259][ T9119] netlink: 'syz.3.1300': attribute type 16 has an invalid length. [ 454.978207][ T9119] netlink: 'syz.3.1300': attribute type 17 has an invalid length. [ 454.996882][ T9119] netlink: 'syz.3.1300': attribute type 19 has an invalid length. [ 455.027465][ T9119] netlink: 'syz.3.1300': attribute type 27 has an invalid length. [ 455.062855][ T9119] netlink: 'syz.3.1300': attribute type 28 has an invalid length. [ 455.089115][ T9119] netlink: 'syz.3.1300': attribute type 29 has an invalid length. [ 455.107081][ T9119] netlink: 3783 bytes leftover after parsing attributes in process `syz.3.1300'. [ 455.406903][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.097327][ T9125] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1302'. [ 459.414923][ T9101] netlink: 'syz.2.1296': attribute type 10 has an invalid length. [ 459.442824][ T9101] team0: Device wg1 is of different type [ 459.474463][ T9119] netlink: 'syz.3.1300': attribute type 16 has an invalid length. [ 459.499103][ T9119] netlink: 'syz.3.1300': attribute type 17 has an invalid length. [ 459.506992][ T9119] netlink: 'syz.3.1300': attribute type 19 has an invalid length. [ 459.538786][ T9119] netlink: 3783 bytes leftover after parsing attributes in process `syz.3.1300'. [ 459.551313][ T9125] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 459.582391][ T9125] CPU: 1 PID: 9125 Comm: syz.1.1302 Not tainted syzkaller #0 [ 459.589863][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.600006][ T9125] Call Trace: [ 459.603327][ T9125] [ 459.606298][ T9125] dump_stack_lvl+0x188/0x24e [ 459.611152][ T9125] ? show_regs_print_info+0x12/0x12 [ 459.616416][ T9125] ? load_image+0x400/0x400 [ 459.620982][ T9125] sysfs_warn_dup+0x8a/0xa0 [ 459.625549][ T9125] sysfs_do_create_link_sd+0xc0/0x110 [ 459.630984][ T9125] device_add+0x7ed/0xfb0 [ 459.635395][ T9125] wiphy_register+0x1d9f/0x2ac0 [ 459.640330][ T9125] ? cfg80211_event_work+0x40/0x40 [ 459.645524][ T9125] ? minstrel_ht_alloc+0x894/0xa20 [ 459.650707][ T9125] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 459.656858][ T9125] ieee80211_register_hw+0x2d00/0x39f0 [ 459.662393][ T9125] ? ieee80211_register_hw+0xee1/0x39f0 [ 459.668028][ T9125] ? ieee80211_register_hw+0xee1/0x39f0 [ 459.673676][ T9125] ? ieee80211_tasklet_handler+0x20/0x20 [ 459.679380][ T9125] ? memset+0x1e/0x40 [ 459.683419][ T9125] ? __hrtimer_init+0x186/0x270 [ 459.688325][ T9125] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 459.694136][ T9125] hwsim_new_radio_nl+0xafa/0xce0 [ 459.699244][ T9125] genl_family_rcv_msg_doit+0x22a/0x330 [ 459.704856][ T9125] ? end_current_label_crit_section+0x170/0x170 [ 459.711156][ T9125] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 459.717212][ T9125] ? bpf_lsm_capable+0x5/0x10 [ 459.721956][ T9125] ? security_capable+0x85/0xb0 [ 459.726870][ T9125] genl_rcv_msg+0x604/0x790 [ 459.731434][ T9125] ? genl_bind+0x360/0x360 [ 459.735983][ T9125] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 459.742482][ T9125] netlink_rcv_skb+0x1fb/0x450 [ 459.747316][ T9125] ? genl_bind+0x360/0x360 [ 459.751795][ T9125] ? netlink_ack+0x1170/0x1170 [ 459.756630][ T9125] ? down_read+0x1a8/0x2d0 [ 459.761111][ T9125] genl_rcv+0x24/0x40 [ 459.765147][ T9125] netlink_unicast+0x74d/0x8d0 [ 459.769986][ T9125] netlink_sendmsg+0x8ad/0xbd0 [ 459.774820][ T9125] ? netlink_getsockopt+0x550/0x550 [ 459.780083][ T9125] ? aa_sock_msg_perm+0x94/0x150 [ 459.785082][ T9125] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 459.790424][ T9125] ? security_socket_sendmsg+0x7c/0xa0 [ 459.796013][ T9125] ? netlink_getsockopt+0x550/0x550 [ 459.801273][ T9125] ____sys_sendmsg+0x5be/0x970 [ 459.806103][ T9125] ? __sys_sendmsg_sock+0x30/0x30 [ 459.811187][ T9125] ? __import_iovec+0x315/0x500 [ 459.816098][ T9125] ? import_iovec+0x6f/0xa0 [ 459.820664][ T9125] ___sys_sendmsg+0x2a2/0x360 [ 459.825410][ T9125] ? __sys_sendmsg+0x290/0x290 [ 459.830259][ T9125] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 459.836069][ T9125] __se_sys_sendmsg+0x1bb/0x2a0 [ 459.840989][ T9125] ? __x64_sys_sendmsg+0x80/0x80 [ 459.846009][ T9125] ? syscall_enter_from_user_mode+0x2a/0x80 [ 459.851962][ T9125] do_syscall_64+0x4c/0xa0 [ 459.856443][ T9125] ? clear_bhb_loop+0x60/0xb0 [ 459.861182][ T9125] ? clear_bhb_loop+0x60/0xb0 [ 459.865908][ T9125] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.871833][ T9125] RIP: 0033:0x7f2018d9c799 [ 459.876299][ T9125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.896046][ T9125] RSP: 002b:00007f2016ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.904555][ T9125] RAX: ffffffffffffffda RBX: 00007f2019015fa0 RCX: 00007f2018d9c799 [ 459.912593][ T9125] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 459.920659][ T9125] RBP: 00007f2018e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 459.928708][ T9125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.936738][ T9125] R13: 00007f2019016038 R14: 00007f2019015fa0 R15: 00007ffec0d96718 [ 459.944804][ T9125] [ 460.250456][ T9143] validate_nla: 3 callbacks suppressed [ 460.250476][ T9143] netlink: 'syz.1.1308': attribute type 10 has an invalid length. [ 460.596592][ T9156] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1312'. [ 463.717834][ T4274] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 463.997859][ T9186] netlink: 'syz.3.1323': attribute type 6 has an invalid length. [ 464.107863][ T9189] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1324'. [ 464.474796][ T9203] device syzkaller0 entered promiscuous mode [ 464.609203][ T9208] team0: Port device team_slave_0 removed [ 464.622722][ T9208] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 464.692240][ T9216] netlink: 'syz.0.1332': attribute type 27 has an invalid length. [ 464.704189][ T9216] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1332'. [ 464.930990][ T9232] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1335'. [ 464.958382][ T9229] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1335'. [ 465.004717][ T9229] netlink: 'syz.3.1335': attribute type 1 has an invalid length. [ 465.018829][ T9232] netlink: 'syz.3.1335': attribute type 1 has an invalid length. [ 473.340820][ T9272] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1346'. [ 473.954667][ T9287] netlink: 'syz.0.1348': attribute type 21 has an invalid length. [ 474.440711][ T9296] netlink: 'syz.1.1354': attribute type 21 has an invalid length. [ 474.462788][ T9296] netlink: 'syz.1.1354': attribute type 4 has an invalid length. [ 474.493941][ T9296] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1354'. [ 475.010125][ T9294] device syzkaller0 entered promiscuous mode [ 475.064471][ T9313] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1359'. [ 478.112236][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.120253][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.913099][ T9365] netlink: 'syz.1.1374': attribute type 21 has an invalid length. [ 479.707537][ T9397] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1379'. [ 479.723885][ T9396] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 479.953046][ T9408] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 480.005630][ T9408] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 482.643498][ T9435] netlink: 'syz.3.1390': attribute type 21 has an invalid length. [ 483.593449][ T9461] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1397'. [ 484.156497][ T9473] netlink: 'syz.0.1402': attribute type 21 has an invalid length. [ 484.204525][ T9473] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1402'. [ 484.302697][ T9479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1404'. [ 484.461162][ T9483] device syzkaller0 entered promiscuous mode [ 484.467843][ T9483] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 484.538133][ T9484] netlink: 'syz.1.1405': attribute type 12 has an invalid length. [ 484.547750][ T9484] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1405'. [ 485.205895][ T9488] netlink: 'syz.0.1406': attribute type 21 has an invalid length. [ 487.784416][ T9527] netlink: 'syz.4.1417': attribute type 39 has an invalid length. [ 488.665799][ T9548] netlink: 'syz.3.1423': attribute type 11 has an invalid length. [ 488.712305][ T9548] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1423'. [ 490.697765][ T9586] netlink: 'syz.0.1431': attribute type 29 has an invalid length. [ 490.706694][ T9586] netlink: 'syz.0.1431': attribute type 29 has an invalid length. [ 490.911829][ T9592] syzkaller: port 1(erspan0) entered blocking state [ 490.923710][ T9592] syzkaller: port 1(erspan0) entered disabled state [ 490.945100][ T9592] device erspan0 entered promiscuous mode [ 490.959867][ T9592] syzkaller: port 1(erspan0) entered blocking state [ 490.966783][ T9592] syzkaller: port 1(erspan0) entered forwarding state [ 490.980150][ T9592] netlink: 'syz.0.1434': attribute type 2 has an invalid length. [ 490.988182][ T9592] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 491.449234][ T9605] sock: sock_set_timeout: `syz.4.1438' (pid 9605) tries to set negative timeout [ 491.703157][ T9615] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1440'. [ 491.967717][ T9623] netlink: 149292 bytes leftover after parsing attributes in process `syz.1.1442'. [ 492.557845][ T9636] netlink: 'syz.3.1444': attribute type 21 has an invalid length. [ 493.369083][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 499.257534][ T9712] netlink: 'syz.2.1462': attribute type 10 has an invalid length. [ 500.006234][ T9752] netlink: 'syz.4.1471': attribute type 2 has an invalid length. [ 500.040173][ T9752] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 500.985573][ T9712] team0: Port device dummy0 added [ 501.041140][ T9749] syzkaller: port 1(erspan0) entered blocking state [ 501.047924][ T9749] syzkaller: port 1(erspan0) entered disabled state [ 501.089979][ T9749] device erspan0 entered promiscuous mode [ 501.107565][ T9749] syzkaller: port 1(erspan0) entered blocking state [ 501.114843][ T9749] syzkaller: port 1(erspan0) entered forwarding state [ 501.424497][ T9773] netlink: 'syz.3.1476': attribute type 10 has an invalid length. [ 501.444465][ T9773] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1476'. [ 501.463717][ T9773] netlink: 'syz.3.1476': attribute type 21 has an invalid length. [ 501.473810][ T9773] netlink: 'syz.3.1476': attribute type 20 has an invalid length. [ 501.550716][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.557175][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.782763][ T9783] netlink: 'syz.3.1476': attribute type 10 has an invalid length. [ 504.067052][ T9783] device veth0_macvtap left promiscuous mode [ 504.494649][ T9800] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 504.523341][ T9800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.081100][ T9822] netlink: 149292 bytes leftover after parsing attributes in process `syz.4.1488'. [ 505.359295][ T9829] sock: sock_set_timeout: `syz.3.1491' (pid 9829) tries to set negative timeout [ 505.531544][ T9833] netlink: 'syz.3.1491': attribute type 3 has an invalid length. [ 505.632216][ T9833] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1491'. [ 505.827826][ T9829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.361067][ T9848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1495'. [ 508.582386][ T9857] netlink: 'syz.3.1497': attribute type 29 has an invalid length. [ 508.700401][ T9857] netlink: 'syz.3.1497': attribute type 29 has an invalid length. [ 511.247902][ T9873] netlink: 'syz.3.1502': attribute type 21 has an invalid length. [ 512.005777][ T9879] can: request_module (can-proto-0) failed. [ 512.493551][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1511'. [ 512.853645][ T9908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1511'. [ 512.891633][ T9915] netlink: 'syz.1.1512': attribute type 11 has an invalid length. [ 512.919775][ T9915] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1512'. [ 513.240195][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.366272][ T9927] FAULT_INJECTION: forcing a failure. [ 513.366272][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 513.409054][ T9927] CPU: 0 PID: 9927 Comm: syz.3.1518 Not tainted syzkaller #0 [ 513.416540][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 513.426668][ T9927] Call Trace: [ 513.430025][ T9927] [ 513.433043][ T9927] dump_stack_lvl+0x188/0x24e [ 513.437825][ T9927] ? show_regs_print_info+0x12/0x12 [ 513.443245][ T9927] ? load_image+0x400/0x400 [ 513.447840][ T9927] ? __might_sleep+0xd0/0xd0 [ 513.452552][ T9927] ? __lock_acquire+0x7d10/0x7d10 [ 513.457677][ T9927] should_fail_ex+0x399/0x4d0 [ 513.462448][ T9927] should_failslab+0x5/0x20 [ 513.467040][ T9927] slab_pre_alloc_hook+0x59/0x310 [ 513.472137][ T9927] ? trace_call_bpf+0x5d6/0x6b0 [ 513.477075][ T9927] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 513.482886][ T9927] __kmem_cache_alloc_node+0x4f/0x260 [ 513.488352][ T9927] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 513.494149][ T9927] __kmalloc+0xa0/0x240 [ 513.498408][ T9927] tomoyo_realpath_from_path+0xdf/0x5d0 [ 513.504080][ T9927] ? tomoyo_path_number_perm+0x205/0x650 [ 513.509882][ T9927] tomoyo_path_number_perm+0x22f/0x650 [ 513.515454][ T9927] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 513.520996][ T9927] ? ksys_write+0x1c0/0x250 [ 513.525594][ T9927] ? common_file_perm+0x171/0x1c0 [ 513.530818][ T9927] ? __fget_files+0x28/0x4b0 [ 513.535476][ T9927] ? __fget_files+0x28/0x4b0 [ 513.540283][ T9927] security_file_ioctl+0x6c/0xa0 [ 513.545318][ T9927] __se_sys_ioctl+0x48/0x170 [ 513.550003][ T9927] do_syscall_64+0x4c/0xa0 [ 513.554509][ T9927] ? clear_bhb_loop+0x60/0xb0 [ 513.559350][ T9927] ? clear_bhb_loop+0x60/0xb0 [ 513.564114][ T9927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.570096][ T9927] RIP: 0033:0x7fbd7ff9c799 [ 513.574581][ T9927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.594354][ T9927] RSP: 002b:00007fbd80e64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.602850][ T9927] RAX: ffffffffffffffda RBX: 00007fbd80216090 RCX: 00007fbd7ff9c799 [ 513.610887][ T9927] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000005 [ 513.618938][ T9927] RBP: 00007fbd80e64090 R08: 0000000000000000 R09: 0000000000000000 [ 513.626978][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.635469][ T9927] R13: 00007fbd80216128 R14: 00007fbd80216090 R15: 00007ffd1983f8a8 [ 513.643568][ T9927] [ 513.719211][ T9927] ERROR: Out of memory at tomoyo_realpath_from_path. [ 513.875913][ T9924] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1517'. [ 515.234696][ T9953] netlink: 'syz.1.1527': attribute type 2 has an invalid length. [ 515.273425][ T9953] netlink: 193088 bytes leftover after parsing attributes in process `syz.1.1527'. [ 516.406144][ T9979] FAULT_INJECTION: forcing a failure. [ 516.406144][ T9979] name failslab, interval 1, probability 0, space 0, times 0 [ 516.430478][ T9979] CPU: 1 PID: 9979 Comm: syz.3.1533 Not tainted syzkaller #0 [ 516.438070][ T9979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.448208][ T9979] Call Trace: [ 516.451568][ T9979] [ 516.454656][ T9979] dump_stack_lvl+0x188/0x24e [ 516.459427][ T9979] ? show_regs_print_info+0x12/0x12 [ 516.464707][ T9979] ? load_image+0x400/0x400 [ 516.469292][ T9979] ? __might_sleep+0xd0/0xd0 [ 516.474059][ T9979] ? __lock_acquire+0x7d10/0x7d10 [ 516.479183][ T9979] should_fail_ex+0x399/0x4d0 [ 516.484044][ T9979] should_failslab+0x5/0x20 [ 516.488712][ T9979] slab_pre_alloc_hook+0x59/0x310 [ 516.493813][ T9979] ? tomoyo_encode+0x27e/0x540 [ 516.498662][ T9979] __kmem_cache_alloc_node+0x4f/0x260 [ 516.504277][ T9979] ? tomoyo_encode+0x27e/0x540 [ 516.509111][ T9979] __kmalloc+0xa0/0x240 [ 516.513370][ T9979] tomoyo_encode+0x27e/0x540 [ 516.518086][ T9979] tomoyo_realpath_from_path+0x58e/0x5d0 [ 516.523924][ T9979] ? tomoyo_path_number_perm+0x205/0x650 [ 516.529643][ T9979] tomoyo_path_number_perm+0x22f/0x650 [ 516.535197][ T9979] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 516.541263][ T9979] ? ksys_write+0x1c0/0x250 [ 516.545844][ T9979] ? common_file_perm+0x171/0x1c0 [ 516.551062][ T9979] ? __fget_files+0x28/0x4b0 [ 516.555744][ T9979] ? __fget_files+0x28/0x4b0 [ 516.560460][ T9979] security_file_ioctl+0x6c/0xa0 [ 516.565482][ T9979] __se_sys_ioctl+0x48/0x170 [ 516.570165][ T9979] do_syscall_64+0x4c/0xa0 [ 516.574742][ T9979] ? clear_bhb_loop+0x60/0xb0 [ 516.579495][ T9979] ? clear_bhb_loop+0x60/0xb0 [ 516.584257][ T9979] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 516.590232][ T9979] RIP: 0033:0x7fbd7ff9c799 [ 516.594730][ T9979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.614417][ T9979] RSP: 002b:00007fbd80e85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.622923][ T9979] RAX: ffffffffffffffda RBX: 00007fbd80215fa0 RCX: 00007fbd7ff9c799 [ 516.630982][ T9979] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000005 [ 516.639078][ T9979] RBP: 00007fbd80e85090 R08: 0000000000000000 R09: 0000000000000000 [ 516.647145][ T9979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.655211][ T9979] R13: 00007fbd80216038 R14: 00007fbd80215fa0 R15: 00007ffd1983f8a8 [ 516.663308][ T9979] [ 517.099018][ T9979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 517.528375][ T9991] netlink: 'syz.2.1534': attribute type 21 has an invalid length. [ 517.645406][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 517.822797][ T9999] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 518.007177][ T9999] team0: Device wg1 is of different type [ 518.981463][T10041] FAULT_INJECTION: forcing a failure. [ 518.981463][T10041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.041281][T10041] CPU: 0 PID: 10041 Comm: syz.2.1550 Not tainted syzkaller #0 [ 519.048836][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.058948][T10041] Call Trace: [ 519.062272][T10041] [ 519.065242][T10041] dump_stack_lvl+0x188/0x24e [ 519.069985][T10041] ? show_regs_print_info+0x12/0x12 [ 519.075283][T10041] ? load_image+0x400/0x400 [ 519.079852][T10041] ? __lock_acquire+0x7d10/0x7d10 [ 519.084946][T10041] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 519.090653][T10041] should_fail_ex+0x399/0x4d0 [ 519.095383][T10041] _copy_from_user+0x2c/0x170 [ 519.100115][T10041] inet6_ioctl+0x1ac/0x280 [ 519.104594][T10041] ? __kmem_cache_free+0xb6/0x1f0 [ 519.109680][T10041] ? inet6_getname+0x640/0x640 [ 519.114496][T10041] ? tomoyo_path_number_perm+0x205/0x650 [ 519.120193][T10041] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 519.125719][T10041] sock_do_ioctl+0xfb/0x320 [ 519.130278][T10041] ? sock_show_fdinfo+0xb0/0xb0 [ 519.135188][T10041] sock_ioctl+0x4d2/0x710 [ 519.139590][T10041] ? sock_poll+0x410/0x410 [ 519.144043][T10041] ? bpf_lsm_file_ioctl+0x5/0x10 [ 519.149035][T10041] ? security_file_ioctl+0x7c/0xa0 [ 519.154182][T10041] ? sock_poll+0x410/0x410 [ 519.158626][T10041] __se_sys_ioctl+0xfa/0x170 [ 519.163253][T10041] do_syscall_64+0x4c/0xa0 [ 519.167792][T10041] ? clear_bhb_loop+0x60/0xb0 [ 519.172499][T10041] ? clear_bhb_loop+0x60/0xb0 [ 519.177255][T10041] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 519.183177][T10041] RIP: 0033:0x7fa447f9c799 [ 519.188243][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.207873][T10041] RSP: 002b:00007fa448df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.216332][T10041] RAX: ffffffffffffffda RBX: 00007fa448216090 RCX: 00007fa447f9c799 [ 519.224420][T10041] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000005 [ 519.232432][T10041] RBP: 00007fa448df6090 R08: 0000000000000000 R09: 0000000000000000 [ 519.240437][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.248445][T10041] R13: 00007fa448216128 R14: 00007fa448216090 R15: 00007ffceda00a08 [ 519.256481][T10041] [ 519.984391][T10063] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1558'. [ 520.308459][T10078] netlink: 'syz.2.1562': attribute type 22 has an invalid length. [ 520.317366][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 520.337186][T10079] netlink: 'syz.2.1562': attribute type 22 has an invalid length. [ 520.359751][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1562'. [ 520.613879][T10087] FAULT_INJECTION: forcing a failure. [ 520.613879][T10087] name failslab, interval 1, probability 0, space 0, times 0 [ 520.627155][T10087] CPU: 1 PID: 10087 Comm: syz.0.1567 Not tainted syzkaller #0 [ 520.634700][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.644914][T10087] Call Trace: [ 520.648264][T10087] [ 520.651262][T10087] dump_stack_lvl+0x188/0x24e [ 520.656035][T10087] ? show_regs_print_info+0x12/0x12 [ 520.661314][T10087] ? load_image+0x400/0x400 [ 520.665896][T10087] ? perf_trace_lock+0x301/0x390 [ 520.670916][T10087] should_fail_ex+0x399/0x4d0 [ 520.675677][T10087] should_failslab+0x5/0x20 [ 520.680257][T10087] slab_pre_alloc_hook+0x59/0x310 [ 520.685349][T10087] ? nsim_fib_event_nb+0xe3/0x1040 [ 520.690550][T10087] __kmem_cache_alloc_node+0x4f/0x260 [ 520.696018][T10087] ? nsim_fib_event_nb+0xe3/0x1040 [ 520.701224][T10087] kmalloc_trace+0x26/0xe0 [ 520.705739][T10087] nsim_fib_event_nb+0xe3/0x1040 [ 520.710783][T10087] atomic_notifier_call_chain+0x17a/0x2b0 [ 520.716647][T10087] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 520.722560][T10087] call_fib_notifiers+0x2d/0x60 [ 520.727487][T10087] fib6_del+0xf8a/0x1530 [ 520.731809][T10087] ? fib6_del+0x5c1/0x1530 [ 520.736330][T10087] ? fib6_locate_1+0x6c0/0x6c0 [ 520.741165][T10087] ? do_raw_spin_lock+0x128/0x2f0 [ 520.746268][T10087] ? __lock_acquire+0x7d10/0x7d10 [ 520.751373][T10087] ? __ip6_del_rt+0x8c/0x150 [ 520.756038][T10087] __ip6_del_rt+0x97/0x150 [ 520.760528][T10087] ip6_route_del+0x1342/0x14f0 [ 520.765376][T10087] ? trace_contention_end+0x5f/0x170 [ 520.770731][T10087] ? ip6_route_del+0xdf/0x14f0 [ 520.775600][T10087] ? ipv6_route_ioctl+0x31e/0x500 [ 520.780788][T10087] ? mutex_lock_nested+0x10/0x10 [ 520.785788][T10087] ? ipv6_route_ioctl+0x500/0x500 [ 520.790882][T10087] ? apparmor_capable+0x12c/0x190 [ 520.796062][T10087] ? l3mdev_fib_table_by_index+0x30/0x2c0 [ 520.801839][T10087] ? l3mdev_fib_table_by_index+0x30/0x2c0 [ 520.807758][T10087] ipv6_route_ioctl+0x385/0x500 [ 520.812699][T10087] ? rt6_purge_dflt_routers+0xb10/0xb10 [ 520.818512][T10087] ? __might_fault+0xa6/0x120 [ 520.823249][T10087] ? __might_fault+0xc2/0x120 [ 520.827972][T10087] ? __might_fault+0xa6/0x120 [ 520.832749][T10087] inet6_ioctl+0x207/0x280 [ 520.837236][T10087] ? __kmem_cache_free+0xb6/0x1f0 [ 520.842327][T10087] ? inet6_getname+0x640/0x640 [ 520.847149][T10087] ? tomoyo_path_number_perm+0x205/0x650 [ 520.852879][T10087] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 520.858448][T10087] sock_do_ioctl+0xfb/0x320 [ 520.863030][T10087] ? sock_show_fdinfo+0xb0/0xb0 [ 520.867999][T10087] sock_ioctl+0x4d2/0x710 [ 520.872412][T10087] ? sock_poll+0x410/0x410 [ 520.876939][T10087] ? bpf_lsm_file_ioctl+0x5/0x10 [ 520.881953][T10087] ? security_file_ioctl+0x7c/0xa0 [ 520.887298][T10087] ? sock_poll+0x410/0x410 [ 520.891776][T10087] __se_sys_ioctl+0xfa/0x170 [ 520.896437][T10087] do_syscall_64+0x4c/0xa0 [ 520.900909][T10087] ? clear_bhb_loop+0x60/0xb0 [ 520.905645][T10087] ? clear_bhb_loop+0x60/0xb0 [ 520.910441][T10087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 520.916400][T10087] RIP: 0033:0x7f1d05d9c799 [ 520.920879][T10087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.940837][T10087] RSP: 002b:00007f1d06ca5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.949316][T10087] RAX: ffffffffffffffda RBX: 00007f1d06015fa0 RCX: 00007f1d05d9c799 [ 520.957348][T10087] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000005 [ 520.965372][T10087] RBP: 00007f1d06ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 520.973398][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.981423][T10087] R13: 00007f1d06016038 R14: 00007f1d06015fa0 R15: 00007ffd9341b7b8 [ 520.989496][T10087] [ 521.150541][T10096] device pim6reg1 entered promiscuous mode [ 521.924469][T10104] netlink: 'syz.3.1572': attribute type 2 has an invalid length. [ 521.963122][T10104] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1572'. [ 522.248778][T10106] netlink: 'syz.4.1574': attribute type 16 has an invalid length. [ 522.280552][T10106] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1574'. [ 522.303954][T10104] netlink: 'syz.3.1572': attribute type 21 has an invalid length. [ 522.327800][T10104] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 522.339143][T10104] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.1572'. [ 522.352734][T10103] netlink: 'syz.1.1573': attribute type 21 has an invalid length. [ 522.369148][T10103] netlink: 'syz.1.1573': attribute type 10 has an invalid length. [ 522.394304][T10103] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.1573'. [ 525.482126][T10131] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1581'. [ 526.032992][T10170] device veth0_vlan left promiscuous mode [ 526.049161][T10170] device veth0_vlan entered promiscuous mode [ 526.070346][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 526.101920][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 526.123040][ T8831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 526.288040][T10175] FAULT_INJECTION: forcing a failure. [ 526.288040][T10175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.374584][T10175] CPU: 1 PID: 10175 Comm: syz.3.1596 Not tainted syzkaller #0 [ 526.382257][T10175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.392930][T10175] Call Trace: [ 526.396291][T10175] [ 526.399375][T10175] dump_stack_lvl+0x188/0x24e [ 526.404159][T10175] ? show_regs_print_info+0x12/0x12 [ 526.409453][T10175] ? load_image+0x400/0x400 [ 526.414062][T10175] ? __lock_acquire+0x7d10/0x7d10 [ 526.419256][T10175] ? snprintf+0xe5/0x140 [ 526.423606][T10175] should_fail_ex+0x399/0x4d0 [ 526.428419][T10175] _copy_to_user+0x2c/0x130 [ 526.433023][T10175] simple_read_from_buffer+0xe3/0x150 [ 526.438514][T10175] proc_fail_nth_read+0x1a6/0x220 [ 526.443729][T10175] ? proc_fault_inject_write+0x310/0x310 [ 526.449468][T10175] ? fsnotify_perm+0x248/0x550 [ 526.454336][T10175] ? proc_fault_inject_write+0x310/0x310 [ 526.460063][T10175] vfs_read+0x2de/0xa00 [ 526.464360][T10175] ? kernel_read+0x1e0/0x1e0 [ 526.469090][T10175] ? __fget_files+0x28/0x4b0 [ 526.473772][T10175] ? __fget_files+0x28/0x4b0 [ 526.478457][T10175] ? __fget_files+0x43d/0x4b0 [ 526.483252][T10175] ? __fdget_pos+0x2ae/0x360 [ 526.487974][T10175] ? ksys_read+0x71/0x250 [ 526.492397][T10175] ksys_read+0x14c/0x250 [ 526.496740][T10175] ? vfs_write+0xa30/0xa30 [ 526.501304][T10175] ? lockdep_hardirqs_on+0x94/0x140 [ 526.506594][T10175] do_syscall_64+0x4c/0xa0 [ 526.511101][T10175] ? clear_bhb_loop+0x60/0xb0 [ 526.515870][T10175] ? clear_bhb_loop+0x60/0xb0 [ 526.520643][T10175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.526617][T10175] RIP: 0033:0x7fbd7ff5cfce [ 526.531103][T10175] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 526.550982][T10175] RSP: 002b:00007fbd80e84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 526.559574][T10175] RAX: ffffffffffffffda RBX: 00007fbd80e856c0 RCX: 00007fbd7ff5cfce [ 526.567634][T10175] RDX: 000000000000000f RSI: 00007fbd80e850a0 RDI: 0000000000000006 [ 526.575866][T10175] RBP: 00007fbd80e85090 R08: 0000000000000000 R09: 0000000000000000 [ 526.583918][T10175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.591956][T10175] R13: 00007fbd80216038 R14: 00007fbd80215fa0 R15: 00007ffd1983f8a8 [ 526.600081][T10175] [ 527.122529][T10182] validate_nla: 8 callbacks suppressed [ 527.122546][T10182] netlink: 'syz.4.1598': attribute type 3 has an invalid length. [ 527.170202][T10182] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1598'. [ 527.253514][T10184] netlink: 'syz.2.1599': attribute type 2 has an invalid length. [ 527.269215][T10184] netlink: 'syz.2.1599': attribute type 8 has an invalid length. [ 527.277122][T10184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1599'. [ 527.320006][T10187] netlink: 'syz.2.1599': attribute type 2 has an invalid length. [ 527.327907][T10187] netlink: 'syz.2.1599': attribute type 8 has an invalid length. [ 527.357132][T10187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1599'. [ 527.561705][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 527.590803][T10196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.833265][T10203] netlink: 'syz.2.1602': attribute type 39 has an invalid length. [ 529.986244][T10216] netlink: 'syz.1.1606': attribute type 3 has an invalid length. [ 530.017035][T10216] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1606'. [ 530.481249][T10224] netlink: 'syz.2.1609': attribute type 2 has an invalid length. [ 530.499304][T10224] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1609'. [ 530.740427][T10236] device syzkaller0 entered promiscuous mode [ 530.966085][T10247] netlink: 'syz.3.1615': attribute type 2 has an invalid length. [ 531.059777][T10251] netlink: 'syz.3.1615': attribute type 2 has an invalid length. [ 531.105172][T10251] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1615'. [ 531.145771][T10254] netlink: 4091 bytes leftover after parsing attributes in process `syz.3.1615'. [ 531.271178][T10256] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1617'. [ 533.382529][T10247] device 0 entered promiscuous mode [ 533.394141][T10259] validate_nla: 1 callbacks suppressed [ 533.394157][T10259] netlink: 'syz.0.1618': attribute type 21 has an invalid length. [ 533.410246][T10259] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.1618'. [ 533.760081][T10287] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1624'. [ 533.793461][T10287] device hsr_slave_0 left promiscuous mode [ 533.892409][T10297] netlink: 'syz.1.1626': attribute type 2 has an invalid length. [ 533.904574][T10297] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.1626'. [ 534.479388][T10318] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1631'. [ 534.913450][T10325] netlink: 'syz.1.1635': attribute type 10 has an invalid length. [ 534.923047][T10325] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1635'. [ 535.539511][T10333] netlink: 'syz.1.1635': attribute type 10 has an invalid length. [ 536.449733][T10378] netlink: 'syz.0.1646': attribute type 21 has an invalid length. [ 537.279710][T10402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1653'. [ 537.294939][T10399] netlink: 'syz.2.1653': attribute type 3 has an invalid length. [ 537.356575][T10399] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1653'. [ 537.451851][T10402] tc_dump_action: action bad kind [ 538.071627][T10404] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1654'. [ 538.540105][T10429] netlink: 'syz.3.1658': attribute type 41 has an invalid length. [ 539.729479][T10451] IPv6: Can't replace route, no match found [ 539.779976][T10454] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 540.180121][T10466] netlink: 'syz.1.1665': attribute type 3 has an invalid length. [ 540.209761][T10466] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1665'. [ 545.102731][T10523] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.1685'. [ 545.172916][T10523] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1685'. [ 547.544838][T10546] tap0: tun_chr_ioctl cmd 1074025677 [ 547.640527][T10546] tap0: linktype set to 805 [ 547.714100][T10549] tun0: tun_chr_ioctl cmd 1074025675 [ 547.775659][T10549] tun0: persist enabled [ 547.794147][T10546] tun0: tun_chr_ioctl cmd 1074025675 [ 547.827371][T10546] tun0: persist enabled [ 548.591791][T10567] netlink: 'syz.2.1699': attribute type 21 has an invalid length. [ 548.618811][T10567] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1699'. [ 548.657253][T10570] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.1699'. [ 548.670498][T10567] netlink: 'syz.2.1699': attribute type 5 has an invalid length. [ 548.724213][T10567] netlink: 'syz.2.1699': attribute type 6 has an invalid length. [ 548.765623][T10567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1699'. [ 549.072303][T10589] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1701'. [ 549.212144][T10592] netlink: 'syz.3.1704': attribute type 19 has an invalid length. [ 549.231917][T10592] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1704'. [ 549.675729][T10596] device syzkaller0 entered promiscuous mode [ 549.730102][T10599] netlink: 'syz.2.1707': attribute type 10 has an invalid length. [ 549.794161][T10599] bond0: (slave bond_slave_0): Releasing backup interface [ 550.071538][T10606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1708'. [ 551.286740][T10633] netlink: 'syz.0.1716': attribute type 3 has an invalid length. [ 551.318225][T10633] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 551.357517][T10633] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1716'. [ 553.095273][T10625] netlink: 'syz.2.1714': attribute type 21 has an invalid length. [ 553.104116][T10625] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1714'. [ 553.113956][T10625] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1714'. [ 553.137901][T10627] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 553.178622][T10627] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.222312][T10633] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1716'. [ 553.403861][T10645] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1720'. [ 553.416390][T10645] tc_dump_action: action bad kind [ 553.553534][T10644] netlink: 'syz.1.1721': attribute type 9 has an invalid length. [ 553.587129][T10644] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1721'. [ 553.680256][T10652] netlink: 'syz.0.1724': attribute type 9 has an invalid length. [ 553.700356][T10652] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1724'. [ 554.444800][T10684] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 554.468915][T10684] netlink: 'syz.2.1735': attribute type 3 has an invalid length. [ 554.476751][T10684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1735'. [ 554.536104][T10688] device veth1_macvtap left promiscuous mode [ 554.581016][T10688] device macsec0 left promiscuous mode [ 554.621209][T10682] netlink: 'syz.1.1734': attribute type 10 has an invalid length. [ 554.662883][T10682] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1734'. [ 554.740782][T10682] bridge0: port 3(veth0_vlan) entered blocking state [ 554.764306][T10682] bridge0: port 3(veth0_vlan) entered disabled state [ 554.896661][T10682] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 554.996487][T10701] netlink: 'syz.4.1740': attribute type 2 has an invalid length. [ 555.732393][T10724] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1746'. [ 555.757513][T10724] netlink: zone id is out of range [ 555.777705][T10724] netlink: zone id is out of range [ 555.796278][T10724] netlink: zone id is out of range [ 555.803570][T10724] netlink: zone id is out of range [ 555.839056][T10724] netlink: zone id is out of range [ 555.881282][T10724] netlink: zone id is out of range [ 555.917365][T10724] netlink: zone id is out of range [ 555.925054][T10724] netlink: zone id is out of range [ 557.890694][T10737] : port 1(ip6gretap0) entered blocking state [ 557.907571][T10737] : port 1(ip6gretap0) entered disabled state [ 557.931151][T10737] device ip6gretap0 entered promiscuous mode [ 557.961040][T10738] device ip6gretap0 left promiscuous mode [ 557.968428][T10738] : port 1(ip6gretap0) entered disabled state [ 558.580892][T10771] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1759'. [ 558.619339][T10771] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1759'. [ 558.661383][T10775] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1759'. [ 558.911364][T10782] netlink: 'syz.4.1763': attribute type 7 has an invalid length. [ 558.970789][T10784] netlink: 'syz.3.1762': attribute type 10 has an invalid length. [ 560.596411][T10808] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1768'. [ 562.264649][T10830] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.1773'. [ 562.356568][T10831] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1774'. [ 562.399738][T10831] bridge_slave_1: default FDB implementation only supports local addresses [ 562.951001][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.957397][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.500467][T10871] netlink: 'syz.1.1785': attribute type 10 has an invalid length. [ 563.723487][T10871] team0: Device hsr_slave_0 failed to register rx_handler [ 563.952334][T10887] netlink: 'syz.4.1789': attribute type 6 has an invalid length. [ 564.801735][T10909] netlink: 'syz.0.1795': attribute type 3 has an invalid length. [ 564.813960][T10909] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1795'. [ 564.962647][T10906] netlink: 'syz.0.1795': attribute type 3 has an invalid length. [ 564.982452][T10906] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1795'. [ 565.603958][T10918] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1797'. [ 566.007631][T10923] netlink: 'syz.3.1800': attribute type 10 has an invalid length. [ 566.113419][T10923] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1800'. [ 566.203435][T10923] net_ratelimit: 2 callbacks suppressed [ 566.203457][T10923] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 572.177951][T10994] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 572.271237][T10994] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1816'. [ 572.490619][T10994] bridge0: port 3(veth0_vlan) entered blocking state [ 572.510170][T10994] bridge0: port 3(veth0_vlan) entered disabled state [ 572.811682][T10994] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 574.701472][T11023] netlink: 'syz.0.1825': attribute type 2 has an invalid length. [ 574.733656][T11023] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 574.744233][T11023] netlink: 'syz.0.1825': attribute type 39 has an invalid length. [ 576.923703][T11060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.931672][T11060] IPv6: NLM_F_CREATE should be set when creating new route [ 576.943646][T11060] IPv6: NLM_F_CREATE should be set when creating new route [ 576.952522][T11060] IPv6: NLM_F_CREATE should be set when creating new route [ 585.090154][T11132] netlink: 'syz.2.1853': attribute type 2 has an invalid length. [ 585.098010][T11132] netlink: 'syz.2.1853': attribute type 1 has an invalid length. [ 585.225837][T11132] netlink: 'syz.2.1853': attribute type 39 has an invalid length. [ 585.525005][T11143] netlink: 'syz.1.1854': attribute type 10 has an invalid length. [ 585.549016][T11143] device netdevsim0 entered promiscuous mode [ 586.500079][T11151] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1859'. [ 587.464232][T11157] netlink: 'syz.3.1860': attribute type 21 has an invalid length. [ 587.519115][T11157] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1860'. [ 588.797488][T11178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1867'. [ 589.116768][T11184] netlink: 'syz.1.1878': attribute type 29 has an invalid length. [ 589.320781][T11187] netlink: 'syz.2.1870': attribute type 2 has an invalid length. [ 589.328612][T11187] netlink: 'syz.2.1870': attribute type 8 has an invalid length. [ 589.384096][T11187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1870'. [ 589.725478][T11198] netlink: 'syz.4.1873': attribute type 2 has an invalid length. [ 589.792487][T11198] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1873'. [ 589.850418][T11202] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1875'. [ 589.874550][T11205] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1874'. [ 591.480136][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.480286][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.487867][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.498207][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.505928][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.514309][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.521939][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.529993][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.537553][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.546355][ T4283] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 591.620447][T11228] device syzkaller0 entered promiscuous mode [ 591.753398][ T8834] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 592.502326][T11259] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1891'. [ 594.018312][T11301] netlink: 'syz.2.1902': attribute type 29 has an invalid length. [ 594.102778][T11301] netlink: 'syz.2.1902': attribute type 29 has an invalid length. [ 594.222554][T11305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 594.230085][T11305] IPv6: NLM_F_CREATE should be set when creating new route [ 594.237476][T11305] IPv6: NLM_F_CREATE should be set when creating new route [ 594.244959][T11305] IPv6: NLM_F_CREATE should be set when creating new route [ 597.611120][T11348] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.618605][T11348] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.672198][T11348] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.679864][T11348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.687535][T11348] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.694879][T11348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.780386][T11348] device bridge0 entered promiscuous mode [ 597.817860][T11350] netlink: 'syz.2.1917': attribute type 1 has an invalid length. [ 598.536953][T11393] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1930'. [ 598.566421][T11395] netlink: 'syz.4.1929': attribute type 10 has an invalid length. [ 598.708928][ T8837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.974746][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 600.996952][T11412] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1935'. [ 601.024714][T11412] netlink: 'syz.1.1935': attribute type 1 has an invalid length. [ 601.059013][T11412] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1935'. [ 601.330436][T11434] netlink: 177648 bytes leftover after parsing attributes in process `syz.4.1940'. [ 602.315871][T11457] device syzkaller0 entered promiscuous mode [ 606.514335][T11462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1947'. [ 606.546040][T11473] netlink: 'syz.4.1950': attribute type 21 has an invalid length. [ 606.653592][T11469] device syzkaller0 entered promiscuous mode [ 607.010068][T11490] netlink: 'syz.2.1953': attribute type 3 has an invalid length. [ 607.024940][T11490] netlink: 'syz.2.1953': attribute type 1 has an invalid length. [ 607.037441][T11490] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.1953'. [ 615.184501][T11491] netlink: 15446 bytes leftover after parsing attributes in process `syz.1.1954'. [ 615.468986][T11518] netlink: 'syz.4.1965': attribute type 13 has an invalid length. [ 615.476947][T11518] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1965'. [ 615.496536][T11518] erspan0: refused to change device tx_queue_len [ 615.534686][T11518] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 615.691002][T11520] netlink: 'syz.0.1967': attribute type 10 has an invalid length. [ 615.825706][T11520] bond0: (slave bond_slave_0): Releasing backup interface [ 615.913508][T11528] netlink: 'syz.3.1966': attribute type 10 has an invalid length. [ 616.087915][T11535] netlink: 'syz.1.1971': attribute type 2 has an invalid length. [ 616.099643][T11535] netlink: 'syz.1.1971': attribute type 4 has an invalid length. [ 616.118412][T11535] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1971'. [ 616.791749][T11558] device syzkaller0 entered promiscuous mode [ 616.817367][T11562] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1975'. [ 617.938256][T11596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1985'. [ 618.172479][T11604] raw_sendmsg: syz.2.1988 forgot to set AF_INET. Fix it! [ 618.323786][T11614] netlink: 'syz.4.1990': attribute type 28 has an invalid length. [ 618.338840][T11614] netlink: 'syz.4.1990': attribute type 3 has an invalid length. [ 618.374306][T11614] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1990'. [ 621.758288][T11636] netlink: 'syz.4.1995': attribute type 2 has an invalid length. [ 623.112300][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 623.146299][T11645] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1998'. [ 623.297005][T11648] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 624.309233][T11672] device syzkaller0 entered promiscuous mode [ 624.401246][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.407676][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.499594][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2021'. [ 627.533676][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2021'. [ 627.568528][T11738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2021'. [ 627.597140][T11730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2021'. [ 627.642887][T11730] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2021'. [ 627.811617][T11747] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2026'. [ 627.843642][T11747] tc_dump_action: action bad kind [ 627.963394][T11749] device syzkaller0 entered promiscuous mode [ 633.417996][T11766] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 633.525082][T11814] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.2039'. [ 633.798527][T11828] netlink: 'syz.2.2044': attribute type 2 has an invalid length. [ 633.866722][T11828] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 633.915187][T11832] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2040'. [ 634.179389][T11840] netlink: 'syz.4.2045': attribute type 10 has an invalid length. [ 634.258835][T11840] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.277770][T11840] bond0: (slave team0): Enslaving as an active interface with an up link [ 634.465996][T11854] netlink: 'syz.2.2049': attribute type 21 has an invalid length. [ 634.490806][T11854] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'. [ 634.520241][T11854] netlink: 'syz.2.2049': attribute type 1 has an invalid length. [ 634.621198][T11849] bridge0: port 3(ip6gretap0) entered blocking state [ 634.628496][T11849] bridge0: port 3(ip6gretap0) entered disabled state [ 634.670473][T11849] device ip6gretap0 entered promiscuous mode [ 634.705516][T11849] netlink: 814 bytes leftover after parsing attributes in process `syz.2.2049'. [ 634.897429][T11864] device syzkaller0 entered promiscuous mode [ 634.931634][T11866] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2052'. [ 635.019207][T11857] device syzkaller0 entered promiscuous mode [ 635.325367][T11876] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2055'. [ 635.336869][T11882] netlink: 'syz.0.2056': attribute type 2 has an invalid length. [ 635.344807][T11876] netlink: 'syz.2.2055': attribute type 3 has an invalid length. [ 635.353078][T11882] netlink: 'syz.0.2056': attribute type 1 has an invalid length. [ 639.189829][T11919] netlink: 'syz.4.2069': attribute type 2 has an invalid length. [ 639.197660][T11919] netlink: 'syz.4.2069': attribute type 1 has an invalid length. [ 640.483955][T11913] netlink: 'syz.3.2067': attribute type 21 has an invalid length. [ 640.501631][T11913] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2067'. [ 640.914504][T11937] device syzkaller0 entered promiscuous mode [ 641.078052][T11939] device syzkaller0 entered promiscuous mode [ 641.463074][T11948] netlink: 'syz.1.2078': attribute type 17 has an invalid length. [ 641.652077][T11957] IPv6: Can't replace route, no match found [ 641.800776][T11961] netlink: 'syz.1.2082': attribute type 29 has an invalid length. [ 642.739836][T11964] delete_channel: no stack [ 645.611385][T11961] netlink: 'syz.1.2082': attribute type 29 has an invalid length. [ 645.629678][T11969] netlink: 'syz.4.2084': attribute type 25 has an invalid length. [ 646.915654][T12011] device syzkaller0 entered promiscuous mode [ 652.561640][T12023] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2096'. [ 652.580057][T12046] netlink: 'syz.0.2103': attribute type 10 has an invalid length. [ 652.592567][T12046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2103'. [ 652.613293][T12046] device ipvlan1 entered promiscuous mode [ 652.629639][T12046] bridge0: port 3(ipvlan1) entered blocking state [ 652.646540][T12046] bridge0: port 3(ipvlan1) entered disabled state [ 652.690470][T12046] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 652.740697][T12052] netlink: 'syz.1.2105': attribute type 2 has an invalid length. [ 652.759096][T12052] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 654.012852][T12075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2110'. [ 654.631623][T12075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2110'. [ 654.766089][T12080] netlink: 'syz.3.2112': attribute type 21 has an invalid length. [ 654.776411][T12080] netlink: 'syz.3.2112': attribute type 6 has an invalid length. [ 654.784676][T12080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2112'. [ 654.920238][T12082] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.929472][T12082] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.096888][T12092] device bridge_slave_1 left promiscuous mode [ 655.173610][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.236525][T12092] device bridge_slave_0 left promiscuous mode [ 655.275310][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.071319][T12101] netlink: 'syz.0.2114': attribute type 25 has an invalid length. [ 656.124306][T12112] netlink: 'syz.3.2119': attribute type 2 has an invalid length. [ 656.167036][T12112] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 656.209880][T12100] device syzkaller0 entered promiscuous mode [ 656.386519][T12119] netlink: 'syz.0.2132': attribute type 2 has an invalid length. [ 656.530330][T12119] netlink: 'syz.0.2132': attribute type 1 has an invalid length. [ 664.959839][T12153] netlink: 'syz.0.2129': attribute type 21 has an invalid length. [ 664.967750][T12153] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2129'. [ 664.980217][T12153] netlink: 'syz.0.2129': attribute type 5 has an invalid length. [ 665.149348][T12168] netlink: 'syz.4.2135': attribute type 2 has an invalid length. [ 665.157162][T12168] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 665.365962][T12176] netlink: 'syz.0.2136': attribute type 10 has an invalid length. [ 665.386209][T12176] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2136'. [ 668.815289][T12176] team0: Port device macvlan0 removed [ 668.909979][T12207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2146'. [ 669.164634][T12227] netlink: 'syz.0.2151': attribute type 2 has an invalid length. [ 669.189040][T12227] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 669.231418][T12211] device syzkaller0 entered promiscuous mode [ 670.745209][T12254] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2160'. [ 672.945782][T12261] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2162'. [ 672.956809][T12261] netlink: zone id is out of range [ 672.962913][T12261] netlink: zone id is out of range [ 672.970304][T12261] netlink: zone id is out of range [ 672.977055][T12261] netlink: zone id is out of range [ 672.982758][T12261] netlink: zone id is out of range [ 672.990266][T12261] netlink: zone id is out of range [ 672.996126][T12261] netlink: zone id is out of range [ 673.001986][T12261] netlink: zone id is out of range [ 673.008076][T12261] netlink: zone id is out of range [ 673.013730][T12261] netlink: zone id is out of range [ 674.688701][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'. [ 674.702768][T12259] netlink: 'syz.2.2161': attribute type 21 has an invalid length. [ 674.724942][T12267] -: renamed from syzkaller0 [ 674.870051][T12272] netlink: 'syz.1.2165': attribute type 2 has an invalid length. [ 674.909062][T12272] netlink: 'syz.1.2165': attribute type 1 has an invalid length. [ 674.942033][T12275] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2167'. [ 675.024259][T12278] netlink: 'syz.2.2168': attribute type 29 has an invalid length. [ 675.101211][T12278] netlink: 'syz.2.2168': attribute type 29 has an invalid length. [ 675.158240][T12281] netlink: 'syz.2.2168': attribute type 29 has an invalid length. [ 676.315230][T12318] netlink: 'syz.3.2180': attribute type 2 has an invalid length. [ 676.352352][T12318] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 676.486547][T12312] device syzkaller0 entered promiscuous mode [ 676.528712][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2177'. [ 677.874214][T12322] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2179'. [ 677.907571][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2179'. [ 677.978269][T12344] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2188'. [ 680.249189][T12346] netlink: 'syz.1.2189': attribute type 2 has an invalid length. [ 680.258702][T12346] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.2189'. [ 680.278276][T12357] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2191'. [ 680.458127][T12363] netlink: 'syz.0.2194': attribute type 2 has an invalid length. [ 680.485378][T12363] netlink: 'syz.0.2194': attribute type 1 has an invalid length. [ 681.255785][T12390] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2201'. [ 681.457253][T12388] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2201'. [ 681.468399][T12392] netlink: 'syz.3.2202': attribute type 28 has an invalid length. [ 681.488781][T12392] netlink: 'syz.3.2202': attribute type 29 has an invalid length. [ 681.509219][T12388] net_ratelimit: 17 callbacks suppressed [ 681.509240][T12388] netlink: zone id is out of range [ 681.513905][T12392] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2202'. [ 681.529772][T12388] netlink: zone id is out of range [ 681.535251][T12388] netlink: zone id is out of range [ 681.545424][T12388] netlink: zone id is out of range [ 681.556828][T12388] netlink: zone id is out of range [ 681.562590][T12388] netlink: zone id is out of range [ 681.567886][T12388] netlink: zone id is out of range [ 681.574801][T12388] netlink: zone id is out of range [ 681.580378][T12388] netlink: zone id is out of range [ 681.586177][T12388] netlink: zone id is out of range [ 681.705106][T12395] netlink: 'syz.4.2203': attribute type 29 has an invalid length. [ 681.742293][T12395] netlink: 'syz.4.2203': attribute type 29 has an invalid length. [ 681.760112][T12399] netlink: 'syz.4.2203': attribute type 29 has an invalid length. [ 681.956634][T12404] device syzkaller0 entered promiscuous mode [ 682.001077][T12411] netlink: 'syz.4.2208': attribute type 2 has an invalid length. [ 682.024475][T12411] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 682.048508][T12405] device syzkaller0 entered promiscuous mode [ 684.422923][T12447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2217'. [ 685.836571][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.843177][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.775383][T12432] validate_nla: 2 callbacks suppressed [ 686.775395][T12432] netlink: 'syz.1.2215': attribute type 17 has an invalid length. [ 686.789768][T12432] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2215'. [ 686.819178][T12460] netlink: 'syz.2.2220': attribute type 10 has an invalid length. [ 686.827094][T12460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2220'. [ 686.858404][T12460] device ipvlan1 entered promiscuous mode [ 686.890665][T12460] bridge0: port 4(ipvlan1) entered blocking state [ 686.897327][T12460] bridge0: port 4(ipvlan1) entered disabled state [ 686.910522][T12460] net_ratelimit: 20 callbacks suppressed [ 686.910539][T12460] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 687.076001][T12468] netlink: 'syz.4.2222': attribute type 2 has an invalid length. [ 687.120524][T12468] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 687.853269][T12497] device syzkaller0 entered promiscuous mode [ 691.011126][T12513] netlink: 'syz.4.2233': attribute type 28 has an invalid length. [ 691.019618][T12513] netlink: 'syz.4.2233': attribute type 29 has an invalid length. [ 691.027491][T12513] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2233'. [ 691.215949][T12521] netlink: 'syz.2.2237': attribute type 2 has an invalid length. [ 691.225347][T12521] netlink: 'syz.2.2237': attribute type 1 has an invalid length. [ 691.592845][T12526] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2238'. [ 693.088930][T12504] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 693.098294][T12504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 693.109245][T12504] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 693.110969][T12522] netlink: 'syz.1.2234': attribute type 10 has an invalid length. [ 693.159960][T12522] team0: Port device wlan1 removed [ 693.981836][T12561] netlink: 'syz.4.2249': attribute type 2 has an invalid length. [ 694.019418][T12561] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 696.145055][T12567] netlink: 'syz.1.2250': attribute type 1 has an invalid length. [ 696.197510][T12567] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2250'. [ 696.217073][T12568] device lo entered promiscuous mode [ 696.233392][T12568] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 696.451747][T12573] device syzkaller0 entered promiscuous mode [ 696.476434][T12581] netlink: 'syz.3.2253': attribute type 3 has an invalid length. [ 696.517865][T12581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2253'. [ 697.461594][T12607] netlink: 'syz.3.2261': attribute type 2 has an invalid length. [ 697.477507][T12607] netlink: 'syz.3.2261': attribute type 1 has an invalid length. [ 702.311130][T12616] netlink: 'syz.2.2262': attribute type 10 has an invalid length. [ 702.334059][T12616] device bridge_slave_1 left promiscuous mode [ 702.340624][T12616] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.352271][T12616] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 702.976239][T12650] netlink: 'syz.0.2274': attribute type 2 has an invalid length. [ 702.988469][T12650] netlink: 'syz.0.2274': attribute type 1 has an invalid length. [ 703.469234][T12656] device syzkaller0 entered promiscuous mode [ 703.611116][T12671] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2280'. [ 704.096497][T12679] netlink: 'syz.3.2282': attribute type 1 has an invalid length. [ 704.133534][T12679] netlink: 'syz.3.2282': attribute type 4 has an invalid length. [ 704.170895][T12679] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2282'. [ 704.625792][T12695] netlink: 'syz.4.2287': attribute type 2 has an invalid length. [ 704.634725][T12695] netlink: 'syz.4.2287': attribute type 1 has an invalid length. [ 707.299020][T12715] netlink: 'syz.0.2291': attribute type 2 has an invalid length. [ 707.306854][T12715] netlink: 'syz.0.2291': attribute type 8 has an invalid length. [ 707.328875][T12715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2291'. [ 707.360998][T12719] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2293'. [ 707.960309][T12732] netlink: 'syz.4.2299': attribute type 2 has an invalid length. [ 707.968140][T12732] netlink: 'syz.4.2299': attribute type 1 has an invalid length. [ 708.030732][T12734] netlink: 'syz.2.2300': attribute type 2 has an invalid length. [ 708.049561][T12734] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.2300'. [ 708.352000][T12743] device syzkaller0 entered promiscuous mode [ 708.375006][T12740] netlink: 'syz.1.2302': attribute type 39 has an invalid length. [ 708.591228][T12755] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2306'. [ 709.970702][T12780] netlink: 'syz.1.2314': attribute type 2 has an invalid length. [ 709.978546][T12780] netlink: 'syz.1.2314': attribute type 1 has an invalid length. [ 710.039135][ T4283] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 713.147574][T12799] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 713.192472][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.231265][T12799] bond0: (slave team0): Enslaving as an active interface with an up link [ 713.301971][T12808] netlink: 'syz.3.2319': attribute type 10 has an invalid length. [ 713.403230][T12817] netlink: 'syz.2.2326': attribute type 2 has an invalid length. [ 713.411491][T12817] netlink: 'syz.2.2326': attribute type 1 has an invalid length. [ 714.238980][T12823] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2327'. [ 714.575876][T12842] sock: sock_timestamping_bind_phc: sock not bind to device [ 714.589824][T12839] netlink: 'syz.4.2332': attribute type 29 has an invalid length. [ 714.610561][T12832] device syzkaller0 entered promiscuous mode [ 714.627671][T12840] device lo left promiscuous mode [ 714.657231][T12839] netlink: 'syz.4.2332': attribute type 29 has an invalid length. [ 714.714258][T12845] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 714.721685][T12843] netlink: 'syz.4.2332': attribute type 29 has an invalid length. [ 714.737182][T12846] netlink: 'syz.4.2332': attribute type 29 has an invalid length. [ 715.485012][T12856] netlink: 'syz.1.2339': attribute type 2 has an invalid length. [ 715.505773][T12856] netlink: 'syz.1.2339': attribute type 1 has an invalid length. [ 717.492535][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2336'. [ 717.509034][T12865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2342'. [ 718.366896][T12906] validate_nla: 3 callbacks suppressed [ 718.366917][T12906] netlink: 'syz.1.2351': attribute type 2 has an invalid length. [ 718.445544][T12906] netlink: 'syz.1.2351': attribute type 1 has an invalid length. [ 719.187531][T12917] device syzkaller0 entered promiscuous mode [ 719.223904][T12924] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2357'. [ 719.591042][T12931] netlink: 'syz.0.2358': attribute type 2 has an invalid length. [ 721.375871][T12954] netlink: 'syz.4.2366': attribute type 2 has an invalid length. [ 721.383897][T12954] netlink: 'syz.4.2366': attribute type 1 has an invalid length. [ 725.700323][T12971] netlink: 'syz.2.2370': attribute type 41 has an invalid length. [ 725.734208][T12971] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2370'. [ 726.117401][T12993] netlink: 'syz.3.2377': attribute type 2 has an invalid length. [ 726.134054][T12993] netlink: 'syz.3.2377': attribute type 1 has an invalid length. [ 726.378091][T12999] device syzkaller0 entered promiscuous mode [ 727.297746][ T4283] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 727.502187][T13046] netlink: 'syz.3.2392': attribute type 2 has an invalid length. [ 727.521480][T13046] netlink: 'syz.3.2392': attribute type 1 has an invalid length. [ 729.159357][T13037] netlink: 40227 bytes leftover after parsing attributes in process `syz.4.2387'. [ 729.169799][T13048] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2393'. [ 729.340621][T13059] netlink: 'syz.2.2395': attribute type 3 has an invalid length. [ 729.364537][T13059] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2395'. [ 729.445761][T13065] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2398'. [ 729.487794][T13068] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2395'. [ 729.531770][T13073] netlink: 'syz.2.2395': attribute type 3 has an invalid length. [ 729.597207][T13073] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2395'. [ 729.758421][T13042] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 729.934437][T13083] netlink: 'syz.4.2404': attribute type 2 has an invalid length. [ 729.986786][T13083] netlink: 'syz.4.2404': attribute type 1 has an invalid length. [ 730.243335][T13087] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2406'. [ 730.463985][T13094] device syzkaller0 entered promiscuous mode [ 730.551537][T13084] delete_channel: no stack [ 731.169231][T13130] netlink: 'syz.1.2417': attribute type 2 has an invalid length. [ 731.177577][T13130] netlink: 'syz.1.2417': attribute type 1 has an invalid length. [ 732.997138][T13141] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2420'. [ 733.029171][T13141] team0: Port device team_slave_0 removed [ 733.035491][T13141] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 733.195489][T13147] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2422'. [ 733.586183][T13161] netlink: 'syz.3.2428': attribute type 2 has an invalid length. [ 733.595440][T13149] delete_channel: no stack [ 733.615652][T13161] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 734.201076][T13176] device syzkaller0 entered promiscuous mode [ 734.321072][T13187] netlink: 'syz.0.2436': attribute type 3 has an invalid length. [ 734.330085][T13187] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2436'. [ 736.694520][T13189] netlink: 'syz.2.2435': attribute type 1 has an invalid length. [ 736.702992][T13190] netlink: 'syz.3.2434': attribute type 10 has an invalid length. [ 736.740824][T13190] bond0: (slave team0): Releasing backup interface [ 736.808347][T13190] team0 (unregistering): Port device team_slave_1 removed [ 736.841978][T13190] team0 (unregistering): Port device dummy0 removed [ 736.864554][T13206] netlink: 'syz.4.2442': attribute type 2 has an invalid length. [ 736.877228][T13206] netlink: 'syz.4.2442': attribute type 1 has an invalid length. [ 736.965846][T13204] netlink: 'syz.1.2440': attribute type 21 has an invalid length. [ 737.581275][T13219] device syzkaller0 entered promiscuous mode [ 737.611691][T13229] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2448'. [ 737.833821][T13241] netlink: 'syz.2.2453': attribute type 2 has an invalid length. [ 737.853353][T13241] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 739.845812][T13254] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2456'. [ 740.034262][T13258] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2457'. [ 740.072014][T13258] netlink: 'syz.2.2457': attribute type 1 has an invalid length. [ 740.084658][T13258] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2457'. [ 740.383610][T13265] netlink: 'syz.1.2459': attribute type 21 has an invalid length. [ 740.405186][T13265] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2459'. [ 740.443437][T13265] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2459'. [ 740.867401][T13282] netlink: 'syz.4.2465': attribute type 2 has an invalid length. [ 741.269221][T13294] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2468'. [ 741.393784][T13297] device syzkaller0 entered promiscuous mode [ 741.435169][T13299] device wlan1 entered promiscuous mode [ 741.945708][T13318] delete_channel: no stack [ 742.124055][T13326] validate_nla: 3 callbacks suppressed [ 742.124072][T13326] netlink: 'syz.1.2478': attribute type 2 has an invalid length. [ 742.138160][T13326] netlink: 'syz.1.2478': attribute type 1 has an invalid length. [ 743.761304][T13304] netlink: 'syz.2.2472': attribute type 39 has an invalid length. [ 743.778999][T13334] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2481'. [ 744.716344][T13363] netlink: 'syz.4.2489': attribute type 2 has an invalid length. [ 744.776194][T13363] netlink: 'syz.4.2489': attribute type 1 has an invalid length. [ 745.230664][T13376] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2493'. [ 745.431378][T13378] device syzkaller0 entered promiscuous mode [ 746.197226][T13398] netlink: 'syz.0.2498': attribute type 1 has an invalid length. [ 746.272671][T13398] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2498'. [ 746.955217][T13408] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2501'. [ 746.983853][T13410] netlink: 'syz.4.2502': attribute type 2 has an invalid length. [ 746.992195][T13410] netlink: 'syz.4.2502': attribute type 1 has an invalid length. [ 747.279593][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.286011][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.864921][T13432] netlink: 'syz.3.2509': attribute type 3 has an invalid length. [ 748.878331][T13432] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2509'. [ 750.250873][T13395] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2498'. [ 750.261270][T13417] netlink: 'syz.4.2504': attribute type 13 has an invalid length. [ 750.269214][T13417] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2504'. [ 750.279146][T13417] erspan0: refused to change device tx_queue_len [ 750.286222][T13417] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 750.303295][T13423] netlink: 'syz.2.2506': attribute type 10 has an invalid length. [ 750.335359][T13423] team0: Port device wlan1 added [ 750.770279][T13042] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 751.410421][T13435] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 753.568832][T13480] netlink: 'syz.1.2522': attribute type 2 has an invalid length. [ 753.576619][T13480] netlink: 'syz.1.2522': attribute type 8 has an invalid length. [ 753.598855][T13480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2522'. [ 753.857335][T13497] netlink: 'syz.3.2525': attribute type 10 has an invalid length. [ 753.900210][T13497] device geneve0 entered promiscuous mode [ 754.022582][T13497] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 754.090501][T13488] delete_channel: no stack [ 754.332322][T13508] netlink: 'syz.4.2529': attribute type 3 has an invalid length. [ 754.358197][T13508] netlink: 197344 bytes leftover after parsing attributes in process `syz.4.2529'. [ 754.957302][T13524] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2534'. [ 754.996280][T13524] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 756.873976][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 757.029267][T13590] device wlan1 entered promiscuous mode [ 757.357269][T13601] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.2555'. [ 757.676502][T13613] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2558'. [ 757.884488][T13616] netlink: 'syz.4.2559': attribute type 10 has an invalid length. [ 758.023883][T13616] team0: Port device geneve1 added [ 758.107004][T13623] netlink: 'syz.2.2561': attribute type 21 has an invalid length. [ 758.130917][T13623] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2561'. [ 758.204853][T13623] netlink: 'syz.2.2561': attribute type 4 has an invalid length. [ 758.223420][T13623] netlink: 'syz.2.2561': attribute type 3 has an invalid length. [ 758.257792][T13623] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2561'. [ 759.355400][T13644] device syzkaller0 entered promiscuous mode [ 760.413534][T13674] netlink: 'syz.2.2573': attribute type 2 has an invalid length. [ 760.431886][T13674] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 762.429170][T13664] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 762.440978][T13664] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 762.451229][T13664] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 763.034471][T13705] netlink: 'syz.2.2582': attribute type 13 has an invalid length. [ 763.070110][T13705] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2582'. [ 763.115237][T13705] syz_tun: refused to change device tx_queue_len [ 763.132958][T13705] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 763.153191][T13708] netlink: 'syz.2.2582': attribute type 13 has an invalid length. [ 763.172427][T13708] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2582'. [ 763.185157][T13708] syz_tun: refused to change device tx_queue_len [ 763.193073][T13708] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 763.267688][T13705] netlink: 'syz.2.2582': attribute type 10 has an invalid length. [ 763.423137][T13705] team0: Port device netdevsim0 added [ 763.473516][T13714] netlink: 'syz.1.2584': attribute type 2 has an invalid length. [ 763.518786][T13714] netlink: 'syz.1.2584': attribute type 1 has an invalid length. [ 763.631813][T13716] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2585'. [ 763.926658][T13718] device syzkaller0 entered promiscuous mode [ 764.274383][T13730] netlink: 'syz.3.2588': attribute type 2 has an invalid length. [ 764.286470][T13730] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2588'. [ 766.329325][T13759] FAULT_INJECTION: forcing a failure. [ 766.329325][T13759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.371332][T13759] CPU: 1 PID: 13759 Comm: syz.1.2596 Not tainted syzkaller #0 [ 766.378884][T13759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.389343][T13759] Call Trace: [ 766.392672][T13759] [ 766.395653][T13759] dump_stack_lvl+0x188/0x24e [ 766.400402][T13759] ? show_regs_print_info+0x12/0x12 [ 766.405719][T13759] ? load_image+0x400/0x400 [ 766.410280][T13759] ? __lock_acquire+0x7d10/0x7d10 [ 766.415362][T13759] should_fail_ex+0x399/0x4d0 [ 766.420087][T13759] _copy_from_user+0x2c/0x170 [ 766.424816][T13759] __sys_bpf+0x2ea/0x780 [ 766.429120][T13759] ? bpf_link_show_fdinfo+0x380/0x380 [ 766.434559][T13759] ? lock_chain_count+0x20/0x20 [ 766.439472][T13759] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 766.445701][T13759] __x64_sys_bpf+0x78/0x90 [ 766.450173][T13759] do_syscall_64+0x4c/0xa0 [ 766.454735][T13759] ? clear_bhb_loop+0x60/0xb0 [ 766.459462][T13759] ? clear_bhb_loop+0x60/0xb0 [ 766.464194][T13759] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 766.470140][T13759] RIP: 0033:0x7f2018d9c799 [ 766.474622][T13759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.494305][T13759] RSP: 002b:00007f2016ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 766.502776][T13759] RAX: ffffffffffffffda RBX: 00007f2019015fa0 RCX: 00007f2018d9c799 [ 766.510796][T13759] RDX: 0000000000000090 RSI: 0000200000000100 RDI: 0000000000000005 [ 766.518820][T13759] RBP: 00007f2016ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 766.527006][T13759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.535059][T13759] R13: 00007f2019016038 R14: 00007f2019015fa0 R15: 00007ffec0d96718 [ 766.543100][T13759] [ 767.230093][T13763] netlink: 'syz.1.2597': attribute type 2 has an invalid length. [ 767.253010][T13763] netlink: 'syz.1.2597': attribute type 1 has an invalid length. [ 768.943792][T13770] netlink: 'syz.1.2599': attribute type 21 has an invalid length. [ 769.286914][T13775] sctp: [Deprecated]: syz.1.2602 (pid 13775) Use of int in max_burst socket option deprecated. [ 769.286914][T13775] Use struct sctp_assoc_value instead [ 770.028848][T13796] netlink: 'syz.4.2607': attribute type 2 has an invalid length. [ 770.157778][T13801] netlink: 'syz.2.2608': attribute type 2 has an invalid length. [ 770.176953][T13801] netlink: 'syz.2.2608': attribute type 1 has an invalid length. [ 772.250199][T13797] netlink: 'syz.4.2607': attribute type 21 has an invalid length. [ 772.258204][T13797] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2607'. [ 772.267667][T13797] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2607'. [ 772.281841][T13796] device 0 entered promiscuous mode [ 772.287571][T13810] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2612'. [ 772.326461][T13824] netlink: 'syz.3.2614': attribute type 10 has an invalid length. [ 772.388239][T13824] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 772.588814][T13835] netlink: 'syz.0.2617': attribute type 20 has an invalid length. [ 772.842680][T13844] netlink: 'syz.0.2621': attribute type 2 has an invalid length. [ 772.865715][T13844] netlink: 'syz.0.2621': attribute type 1 has an invalid length. [ 773.003059][T13851] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2622'. [ 773.038365][T13851] netlink: zone id is out of range [ 773.082653][T13854] netlink: 'syz.4.2622': attribute type 3 has an invalid length. [ 773.087956][T13851] netlink: zone id is out of range [ 773.170318][T13851] netlink: zone id is out of range [ 773.175765][T13851] netlink: zone id is out of range [ 773.207622][T13858] netlink: 35343 bytes leftover after parsing attributes in process `syz.4.2622'. [ 773.230867][T13854] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2622'. [ 773.271919][T13851] netlink: zone id is out of range [ 773.282748][T13860] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2626'. [ 773.287094][T13851] netlink: zone id is out of range [ 773.306085][T13851] netlink: zone id is out of range [ 773.325166][T13864] delete_channel: no stack [ 773.335938][T13851] netlink: zone id is out of range [ 773.339781][T13864] delete_channel: no stack [ 773.350890][T13864] delete_channel: no stack [ 773.354094][T13851] netlink: zone id is out of range [ 773.356683][T13864] delete_channel: no stack [ 773.365301][T13851] netlink: zone id is out of range [ 773.374381][T13864] delete_channel: no stack [ 773.379441][T13864] delete_channel: no stack [ 773.384456][T13864] delete_channel: no stack [ 773.391641][T13864] delete_channel: no stack [ 773.396717][T13864] delete_channel: no stack [ 773.401827][T13864] delete_channel: no stack [ 773.406834][T13864] delete_channel: no stack [ 773.412481][T13864] delete_channel: no stack [ 773.417538][T13864] delete_channel: no stack [ 773.432399][T13864] delete_channel: no stack [ 773.437352][T13864] delete_channel: no stack [ 773.459989][T13864] delete_channel: no stack [ 773.475003][T13864] delete_channel: no stack [ 773.551397][T13864] delete_channel: no stack [ 773.559783][T13864] delete_channel: no stack [ 773.577646][T13866] netlink: 'syz.1.2629': attribute type 2 has an invalid length. [ 773.585796][T13864] delete_channel: no stack [ 773.596114][T13864] delete_channel: no stack [ 773.600780][T13866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2629'. [ 773.613593][T13864] delete_channel: no stack [ 773.627488][T13864] delete_channel: no stack [ 773.649810][T13864] delete_channel: no stack [ 773.664840][T13864] delete_channel: no stack [ 773.684974][T13864] delete_channel: no stack [ 773.695291][T13864] delete_channel: no stack [ 773.711932][T13864] delete_channel: no stack [ 773.734852][T13864] delete_channel: no stack [ 773.739645][T13864] delete_channel: no stack [ 773.753121][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2628'. [ 773.763407][T13864] delete_channel: no stack [ 773.777239][T13864] delete_channel: no stack [ 773.792702][T13864] delete_channel: no stack [ 773.807803][ T8834] tipc: Subscription rejected, illegal request [ 773.833172][T13864] delete_channel: no stack [ 773.879448][T13864] delete_channel: no stack [ 773.884116][T13864] delete_channel: no stack [ 773.911651][T13883] netlink: 'syz.4.2631': attribute type 11 has an invalid length. [ 773.919645][T13864] delete_channel: no stack [ 773.919728][T13864] delete_channel: no stack [ 773.920028][T13864] delete_channel: no stack [ 773.920112][T13864] delete_channel: no stack [ 773.920585][T13864] delete_channel: no stack [ 773.945768][T13883] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2631'. [ 773.968947][T13873] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 773.982836][T13873] syzkaller0: linktype set to 769 [ 773.988982][T13864] delete_channel: no stack [ 773.998352][T13864] delete_channel: no stack [ 774.011583][T13864] delete_channel: no stack [ 774.024618][T13864] delete_channel: no stack [ 774.033972][T13885] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 774.046158][T13864] delete_channel: no stack [ 774.062960][T13864] delete_channel: no stack [ 774.087597][T13864] delete_channel: no stack [ 774.099081][T13864] delete_channel: no stack [ 774.103621][T13864] delete_channel: no stack [ 774.108370][T13864] delete_channel: no stack [ 774.119047][T13887] netlink: 'syz.0.2634': attribute type 2 has an invalid length. [ 774.126852][T13887] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 774.143753][T13864] delete_channel: no stack [ 774.150547][T13864] delete_channel: no stack [ 774.156969][T13864] delete_channel: no stack [ 774.590309][T13872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 774.635585][T13905] netlink: 'syz.2.2640': attribute type 17 has an invalid length. [ 775.243816][T13927] device batadv_slave_1 entered promiscuous mode [ 775.260365][T13927] device dummy0 entered promiscuous mode [ 775.267447][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 775.281483][T13927] bridge0: port 3(dummy0) entered blocking state [ 775.297696][T13927] bridge0: port 3(dummy0) entered disabled state [ 775.418719][T13927] bridge0: port 3(dummy0) entered blocking state [ 775.425758][T13927] bridge0: port 3(dummy0) entered forwarding state [ 775.441044][T13927] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 775.506674][T13929] bond0: (slave geneve0): Error: Slave device does not support XDP [ 775.963753][T13953] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 777.809467][T14028] validate_nla: 11 callbacks suppressed [ 777.809485][T14028] netlink: 'syz.4.2676': attribute type 10 has an invalid length. [ 777.830684][T14027] netlink: 'syz.3.2678': attribute type 2 has an invalid length. [ 777.849391][T14027] netlink: 'syz.3.2678': attribute type 1 has an invalid length. [ 777.910498][T14028] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 779.021812][T14056] netlink: 'syz.3.2687': attribute type 17 has an invalid length. [ 779.743815][T14068] delete_channel: no stack [ 779.748423][T14068] delete_channel: no stack [ 779.945477][T14070] netlink: 'syz.2.2692': attribute type 2 has an invalid length. [ 779.961327][T14070] netlink: 'syz.2.2692': attribute type 1 has an invalid length. [ 780.619851][T14102] netlink: 'syz.2.2699': attribute type 10 has an invalid length. [ 781.405152][T14113] device syzkaller0 entered promiscuous mode [ 781.426101][T14115] netlink: 'syz.4.2705': attribute type 27 has an invalid length. [ 786.911875][T14171] netlink: 'syz.4.2719': attribute type 10 has an invalid length. [ 787.347222][T14184] device syzkaller0 entered promiscuous mode [ 789.163591][T14241] ------------[ cut here ]------------ [ 789.169309][T14241] WARNING: CPU: 1 PID: 14241 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 789.179231][T14241] Modules linked in: [ 789.183265][T14241] CPU: 1 PID: 14241 Comm: syz.3.2737 Not tainted syzkaller #0 [ 789.190856][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.201213][T14241] RIP: 0010:perf_pending_task+0x358/0x470 [ 789.207061][T14241] Code: ff 84 db 75 14 e8 e8 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 7f da ff e8 d7 90 58 ff eb e5 e8 c8 7f da ff <0f> 0b e9 f3 fe ff ff e8 bc 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 789.227103][T14241] RSP: 0018:ffffc90003ab78e0 EFLAGS: 00010293 [ 789.233290][T14241] RAX: ffffffff81a7f2e8 RBX: ffff88807c6d5e58 RCX: ffff888039050000 [ 789.241413][T14241] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 789.249515][T14241] RBP: 0000000000000001 R08: ffff888039050a03 R09: 1ffff1100720a140 [ 789.257552][T14241] R10: dffffc0000000000 R11: ffffed100720a141 R12: ffff888039050000 [ 789.265697][T14241] R13: ffff888057b42d60 R14: ffff88807c6d5c20 R15: 1ffff1100f8dab84 [ 789.273832][T14241] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 789.282914][T14241] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 789.289743][T14241] CR2: 00007fbd80e21ff8 CR3: 000000007714f000 CR4: 00000000003506e0 [ 789.297771][T14241] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 789.305908][T14241] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 789.314039][T14241] Call Trace: [ 789.317352][T14241] [ 789.320399][T14241] task_work_run+0x1d0/0x260 [ 789.325064][T14241] ? task_work_cancel+0x220/0x220 [ 789.330200][T14241] ? do_raw_spin_unlock+0x11d/0x230 [ 789.335560][T14241] do_exit+0x982/0x2480 [ 789.339945][T14241] ? put_task_struct+0x80/0x80 [ 789.344791][T14241] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 789.350905][T14241] ? lock_chain_count+0x20/0x20 [ 789.355840][T14241] do_group_exit+0x217/0x2d0 [ 789.360598][T14241] ? lockdep_hardirqs_on+0x94/0x140 [ 789.365868][T14241] get_signal+0x1272/0x1350 [ 789.370587][T14241] arch_do_signal_or_restart+0xc4/0x1350 [ 789.376297][T14241] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 789.382355][T14241] ? do_futex+0x310/0x320 [ 789.386824][T14241] ? get_sigframe_size+0x10/0x10 [ 789.391916][T14241] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 789.397829][T14241] ? exit_to_user_mode_loop+0x3b/0x110 [ 789.403535][T14241] exit_to_user_mode_loop+0x70/0x110 [ 789.408979][T14241] exit_to_user_mode_prepare+0xee/0x180 [ 789.414657][T14241] syscall_exit_to_user_mode+0x16/0x40 [ 789.420287][T14241] do_syscall_64+0x58/0xa0 [ 789.424800][T14241] ? clear_bhb_loop+0x60/0xb0 [ 789.429974][T14241] ? clear_bhb_loop+0x60/0xb0 [ 789.434812][T14241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.440870][T14241] RIP: 0033:0x7fbd7ff9c799 [ 789.445517][T14241] Code: Unable to access opcode bytes at 0x7fbd7ff9c76f. [ 789.452651][T14241] RSP: 002b:00007fbd80e850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 789.461280][T14241] RAX: fffffffffffffe00 RBX: 00007fbd80215fa8 RCX: 00007fbd7ff9c799 [ 789.469475][T14241] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd80215fa8 [ 789.477503][T14241] RBP: 00007fbd80215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 789.485621][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.493694][T14241] R13: 00007fbd80216038 R14: 00007ffd1983f7c0 R15: 00007ffd1983f8a8 [ 789.501826][T14241] [ 789.504930][T14241] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 789.512263][T14241] CPU: 1 PID: 14241 Comm: syz.3.2737 Not tainted syzkaller #0 [ 789.519857][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 789.529974][T14241] Call Trace: [ 789.533321][T14241] [ 789.536302][T14241] dump_stack_lvl+0x188/0x24e [ 789.541036][T14241] ? memcpy+0x3c/0x60 [ 789.545097][T14241] ? show_regs_print_info+0x12/0x12 [ 789.550351][T14241] ? load_image+0x400/0x400 [ 789.554884][T14241] panic+0x2e5/0x730 [ 789.558817][T14241] ? bpf_jit_dump+0xd0/0xd0 [ 789.563380][T14241] __warn+0x2f8/0x4f0 [ 789.567401][T14241] ? perf_pending_task+0x358/0x470 [ 789.572641][T14241] ? perf_pending_task+0x358/0x470 [ 789.578141][T14241] report_bug+0x2ba/0x4f0 [ 789.582503][T14241] ? perf_pending_task+0x358/0x470 [ 789.587737][T14241] handle_bug+0x3a/0x70 [ 789.592009][T14241] exc_invalid_op+0x16/0x40 [ 789.596546][T14241] asm_exc_invalid_op+0x16/0x20 [ 789.601425][T14241] RIP: 0010:perf_pending_task+0x358/0x470 [ 789.607172][T14241] Code: ff 84 db 75 14 e8 e8 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 7f da ff e8 d7 90 58 ff eb e5 e8 c8 7f da ff <0f> 0b e9 f3 fe ff ff e8 bc 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 789.626918][T14241] RSP: 0018:ffffc90003ab78e0 EFLAGS: 00010293 [ 789.633021][T14241] RAX: ffffffff81a7f2e8 RBX: ffff88807c6d5e58 RCX: ffff888039050000 [ 789.641019][T14241] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 789.649033][T14241] RBP: 0000000000000001 R08: ffff888039050a03 R09: 1ffff1100720a140 [ 789.657054][T14241] R10: dffffc0000000000 R11: ffffed100720a141 R12: ffff888039050000 [ 789.665065][T14241] R13: ffff888057b42d60 R14: ffff88807c6d5c20 R15: 1ffff1100f8dab84 [ 789.673078][T14241] ? perf_pending_task+0x358/0x470 [ 789.678236][T14241] task_work_run+0x1d0/0x260 [ 789.682861][T14241] ? task_work_cancel+0x220/0x220 [ 789.687929][T14241] ? do_raw_spin_unlock+0x11d/0x230 [ 789.693163][T14241] do_exit+0x982/0x2480 [ 789.697364][T14241] ? put_task_struct+0x80/0x80 [ 789.702169][T14241] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 789.708182][T14241] ? lock_chain_count+0x20/0x20 [ 789.713069][T14241] do_group_exit+0x217/0x2d0 [ 789.717698][T14241] ? lockdep_hardirqs_on+0x94/0x140 [ 789.722929][T14241] get_signal+0x1272/0x1350 [ 789.727501][T14241] arch_do_signal_or_restart+0xc4/0x1350 [ 789.733168][T14241] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 789.739096][T14241] ? do_futex+0x310/0x320 [ 789.743535][T14241] ? get_sigframe_size+0x10/0x10 [ 789.748525][T14241] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 789.754399][T14241] ? exit_to_user_mode_loop+0x3b/0x110 [ 789.759979][T14241] exit_to_user_mode_loop+0x70/0x110 [ 789.765389][T14241] exit_to_user_mode_prepare+0xee/0x180 [ 789.771073][T14241] syscall_exit_to_user_mode+0x16/0x40 [ 789.776564][T14241] do_syscall_64+0x58/0xa0 [ 789.781004][T14241] ? clear_bhb_loop+0x60/0xb0 [ 789.785706][T14241] ? clear_bhb_loop+0x60/0xb0 [ 789.790437][T14241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 789.796358][T14241] RIP: 0033:0x7fbd7ff9c799 [ 789.800796][T14241] Code: Unable to access opcode bytes at 0x7fbd7ff9c76f. [ 789.807829][T14241] RSP: 002b:00007fbd80e850e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 789.816267][T14241] RAX: fffffffffffffe00 RBX: 00007fbd80215fa8 RCX: 00007fbd7ff9c799 [ 789.824262][T14241] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbd80215fa8 [ 789.832265][T14241] RBP: 00007fbd80215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 789.840275][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 789.848285][T14241] R13: 00007fbd80216038 R14: 00007ffd1983f7c0 R15: 00007ffd1983f8a8 [ 789.856315][T14241] [ 789.859937][T14241] Kernel Offset: disabled [ 789.864285][T14241] Rebooting in 86400 seconds..