last executing test programs: 3m25.426747339s ago: executing program 3 (id=2157): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c, 0x0, 0xd00}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x420, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000080), &(0x7f0000000040)=r2, 0x500}, 0xffffffffffffff4f) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000001700d16a080c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000f80)='/', &(0x7f00000004c0)=""/216}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180045010000400", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89ed, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/226, 0xe9}, {&(0x7f0000000940)=""/201, 0xee}, {&(0x7f0000000a80)=""/307, 0x133}, {&(0x7f0000000bc0)=""/4155, 0x103c}], 0x4}, 0x2000) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x4000001) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) 3m25.092200998s ago: executing program 3 (id=2162): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x11, &(0x7f0000000140)=r1, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x22, 0x2, 0x21) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) write$cgroup_subtree(r4, 0x0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f00000001c0)=r5, 0x2f) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c189e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m24.793454706s ago: executing program 3 (id=2167): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x127, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="c00e020023000b02d25a80d0bcb924f93045fc60040f12", 0x17}], 0x1}, 0x4010) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x87}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0xd, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x84140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x800, 0x17ac}, 0x14b4, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000d40)=[{0x0}], 0x1}, 0x4003) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x241) r7 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x80044944, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x58, 0x0}, 0x8840) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x800, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)="fd505c8674", 0x5}], 0x1}, 0x4004000) 3m24.2752354s ago: executing program 3 (id=2173): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m24.105673874s ago: executing program 3 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004b85df54b28e5698ab6df37273b5bf000000000000000000000000000000000000000200de00000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020400f9ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) unlink(&(0x7f0000000080)='./cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000108695887c1eb0f0b277ad8809f3a32872a1d42b219f528c18f761b9f255adf52278e27e50c387bb9f92baea4fb083102f28a2c06169c28096a1ca00bc1cdfd1f6812b1f625f2c79dde18effe97d23f123a1a9d64361792c75dd6a2602e6d6657fb06978e5559fcb724f43df9aa3308f5f3a55956319e1cfd2667203997aae5f457732eb51d5602ab880ae42f84df76cdcaa3351b794e111fcab578fe82e42ea6c698b7a4acd6cc8cbf0c91797ba634b573978b3ea4ab8afdbb7ae25", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0xffffffac, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x81000000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80203, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x510, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="e96c07e48d9f1df0104290088f49db3c3834cf007218f006f545ef391a56a30ddfe65dc01c3a448e6cdb6b48aa62d3aebf1dfa7ea996000bbcf5b32bdff311324a8c6b1f921c25711f4f6a4cec8152ff649fc3a10651a40c65e2be9157801a1e0951bba461529f770f2a5cb3682623c2a352a13d8f92b97d841d21d1a021b3824b02ecbcbb8d17d1a61577f425639910bebb54b2feef054ccecec5aa6008c4d483d1b2fdb647aeaec009ef3bc9c9a50bf165440e2a52db2cdf8e95910837cc8e4110b2d140b9a097335d00"/212, &(0x7f0000001f80), 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) 3m23.034821503s ago: executing program 3 (id=2181): syz_open_procfs$namespace(0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002500)={&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f0000002380)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/152, 0x98}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/20, 0x14}, {&(0x7f0000002240)=""/139, 0x8b}, {&(0x7f0000002300)=""/79, 0x4f}], 0x6, &(0x7f0000002400)=""/205, 0xcd}, 0x40000000) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x27, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000002540)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000002600)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 3m7.875276103s ago: executing program 32 (id=2181): syz_open_procfs$namespace(0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000002500)={&(0x7f00000000c0)=@caif=@rfm, 0x80, &(0x7f0000002380)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/152, 0x98}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/20, 0x14}, {&(0x7f0000002240)=""/139, 0x8b}, {&(0x7f0000002300)=""/79, 0x4f}], 0x6, &(0x7f0000002400)=""/205, 0xcd}, 0x40000000) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x27, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000002540)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002580)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000002600)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000040), 0x12) 19.839834835s ago: executing program 1 (id=3039): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x6, 0x4, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r3}, 0xc) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x401, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x32e9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x0, 0x3, 0x0, 0xfae, 0x2402c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x1, @perf_bp={0x0, 0x1}, 0x91400, 0xca, 0xfffffffd, 0x9, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000040)=@isdn, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000000300)=""/73, 0x49}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) 18.963813238s ago: executing program 2 (id=3048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/16], 0x10}, 0x41) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r3, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0xe, 0x1ef7}, 0x1080aa, 0x4, 0x98, 0x9, 0x8, 0x32f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x100024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x11, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYRESOCT=r2], &(0x7f0000000200)='GPL\x00', 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000100)=r11, 0x8) setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000100)=r9, 0x4) ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000380)=r7) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0xff43, 0xf0, 0x7, 0x4}]}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x48, 0x4, 0x0, 0x3}, {0x44, 0x94}, {}, {0x6, 0x0, 0xd}]}) 18.637770476s ago: executing program 1 (id=3049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 18.183615549s ago: executing program 1 (id=3051): perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b8c373be35c6e17aa31046a876c1d0000007ea60864160af26508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000e40)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180000000000000000000002cd65c65c3d7d756", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 18.064750982s ago: executing program 2 (id=3054): socketpair(0x26, 0x5, 0xa471, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000580)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000a80)=""/59, 0x3b}, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x4, 0x80, 0x0, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x84, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x7, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x1, 0xfffff075, 0x6, 0x401, 0x2, 0x6cb, 0x0, 0x214a, 0x0, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x50) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000001000084020000000a000000035e0e152d575f89bf000000000000010500000020000000000000000000000b02000000006100302e61006161006100"], 0x0, 0x58}, 0x28) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000010e7ffffbca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f040000000000002e0a0200000000002604"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25}, 0x94) r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x1, 0x1, 0x5, 0x5, 0x0, 0xffffffffffffff02, 0x20030, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x112008, 0x800, 0x37, 0x8, 0xfffffffffffffffb, 0x1ff, 0x0, 0x0, 0x400, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r4, 0x222fcd8d67cab1ec) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="185d000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x60300, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 17.950328965s ago: executing program 0 (id=3055): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c189e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.835708858s ago: executing program 1 (id=3057): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c, 0x0, 0xd00}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x420, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000080), &(0x7f0000000040)=r2, 0x500}, 0xffffffffffffff4f) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000001700d16a080c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000f80)='/', &(0x7f00000004c0)=""/216}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180045010000400", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89ed, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/226, 0xe9}, {&(0x7f0000000940)=""/201, 0xee}, {&(0x7f0000000a80)=""/307, 0x133}, {&(0x7f0000000bc0)=""/4155, 0x103c}], 0x4}, 0x2000) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x4000001) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) 17.75206129s ago: executing program 4 (id=3058): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000dc0), &(0x7f0000001dc0)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x4f, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x2663}, 0x8840) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) 17.711954351s ago: executing program 0 (id=3059): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 17.600773704s ago: executing program 0 (id=3060): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x20, 0x0, 0x5, 0x550e4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x42, 0x0, 0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffdffffffffd, 0xffffffffffffffff, 0xb) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x8, 0x0, 0x0, 0x0, 0x4, 0x80001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r3, 0x0, 0x3, &(0x7f0000000280)='\xe2\xfch'}, 0x30) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000240)=ANY=[@ANYBLOB="0400"/24]) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xe}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 17.515908217s ago: executing program 2 (id=3061): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x9, 0x4, 0x1ff, 0xfffd, 0x0, 0x10000, 0x0, 0x20000006}, 0x0, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x33}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRESDEC=r4, @ANYRESOCT=r1], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x8, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd71, 0x7, 0xa, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10204, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x101a0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x3, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000020a"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.895395703s ago: executing program 1 (id=3062): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5460, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0xffffffff}]}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x63}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e40)={r3, 0x0, 0x0, 0xca, &(0x7f0000000140), &(0x7f0000000280)=""/202, 0x5, 0x0, 0x67, 0x0, &(0x7f0000000500)="af14a762c483f909652afaa62d43f8ffefaf9d47abbc9710626be3d4e92c5e77e6ca24174112ee0b3a5fa1e310ddbb1e5a7cbec48824964517bbdbe1f47f6b4090cf2572d899d3c15ec4971cd2559f971fd299ec2c86bde66de4ad47a9948e81a6eae0a71d3f6e", 0x0, 0x4, 0x0, 0x6}, 0x50) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x17, &(0x7f0000000000)=r7, 0x10) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32, @ANYRES8=r2], 0xfe33) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000fe00000000000000feff05ff850000df1800000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b40)={r8, 0xe0, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000001900), 0x0, 0x0, 0x0, &(0x7f00000019c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@bloom_filter={0x1e, 0x3f98d798, 0x33b, 0x4, 0x8038, r7, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x5, 0x2, @value=r7}, 0x50) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000140)={0x1, 0xa, [@empty, @local, @local, @remote, @local, @broadcast, @remote, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote]}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r12 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r14, &(0x7f0000000340)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a92fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa", @ANYRES64=r12], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x280000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0xfffffa0a, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0x48, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x3, 0x0, 0x232c}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001d00)=[r10, r11], &(0x7f0000001d40)=[{0x5, 0x5, 0x5, 0xc}, {0x1, 0xc, 0xb, 0x1}, {0x3, 0x3, 0x5, 0x6}], 0x10, 0x7}, 0x94) r15 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r15, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001900)="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", 0x4f6}, {&(0x7f0000000740)="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", 0x54b}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @local}}}], 0x20}, 0x0) 16.64548819s ago: executing program 4 (id=3063): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f00000000c0)="a072889b9fb5626ad1eb27e6dd5e7ce0b6f7efc94d265ac5df6069fda356d3afea6c85e6eb91e1fdee3b6699032c335e1464c348965c7bb5df69048cc236fcbd0173629849ab176c3081907d2ff3e45d8f74fb6f65836c530cffda527621446d00da0279bdc5cb9a384a6c4416117279d3f23de8c6a1cadadaa9bc789ed23679e7f4ac5c49b43128", &(0x7f0000000180)=""/126, &(0x7f0000000300)="74c04bdc288143cd2f87a69135c5523d1d2d5e631285b1d7f7d78e3af2308727445c23e857ecd2d8e4abda3429aad8052ba673797e9e55e98fb9d6bf58076466d321fc4cb26df7479eacaa0da09fcac92a4e619bacadd73579288022bf0ac383dc7fff9ce86ba8683d7c7dbab0f53c3543cc70865de156c4b812509b6b44ceee62", &(0x7f00000003c0)="be2e0b7050f0af253bcdcd043d14d130c9fd304e14e00d17c232e0c7486e22c0beb80128c71f6f38cf57d96f6c3a94bc2b0974b8bc346eced46621e01e0907b20d3a147cd34a5859ca0c120322d931449da43c2a7d9791e486739f496264ab513c03372640ffcdbab5ac2697e94502114c5e74ff7c1ddfc980fa9f40ba275d3d1cf6d11313af1feb6ec5611c09945019d9f67902673a705044b9bf00d9acd5bdbf69c784be00f83bb564777c74858ba6855526bacae50cb6ee5ab52a08cc983df69cdf5abb2a373504db8c02bd61998284fa32ffba2e8451b4", 0x3, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112ce000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400003}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x10e, 0xb, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800001363a3d900000000000300000000809fcdd445692024fd7461f7e0bb63a60c765d41daf9607fe99364eb6e1fab5b8b68be7c8f4dacef77e7a4a17f2ed5c0dac3509922b4000000000000000000"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000340)="63ec33e9e586d4f0d1460a0d5cc3", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, &(0x7f0000000280), 0xfffffeed) 16.585720911s ago: executing program 2 (id=3064): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10182) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) close(r3) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) 16.500637663s ago: executing program 4 (id=3065): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8902, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) 16.454340854s ago: executing program 2 (id=3066): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0x9c, 0x0, 0xd00}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x7}, 0x420, 0x5, 0x0, 0x0, 0x100000000000000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001b00)={&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000080), &(0x7f0000000040)=r2, 0x500}, 0xffffffffffffff4f) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000e9ffff470000002c41000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa645335000000000000000a0000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d11410500000000000000f6027bf48cabecead649f96ea24d32872c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe94ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000380f00000000895ddbb76122bf222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d143107006b9419c2b6353fcf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676590bd2047229e0237c1e34641848531712ff09e89fb062a3e66f4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000800425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f210ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f00000000c4c2566179b9043a48da00000000003f000000cf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b38038002d29b3193cea9cd0a0ef4f58fa48f61071f548d411353965615c24c1860fd0dfae0f4cdf8c8f8645a289a79f9b919b674f0325d81eacaa8399324a304885da01733bb7917ec5e52718eb05f9c1ffd69f834150e9100c215968e8fb31c83526e6f66897569e28d01ca6135a2acca398c1415e0f9b58b63ee9dc33608ba7e5c4bdf3f37d8e4f4f424be263d9c2a5204f41e9b0ee01ad4cc0519395b69c310c98d3c8edc7d07b30617f3535634257f5472d9f3263a6f04778a920c12000721bb82f9884780ac294b8ba9778289c19fb775514246159bbfa9dc0fdf711d3efa316a3323c915a40e6d7c8f8d7daf98824fd0bc955dc9731cc8c7a600d94b8049af764688c7ffdd26a741b03b065ba9c586914d8beb94c8a265ace34172ed003357ddd4005572"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000001700d16a080c00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000180)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000f80)='/', &(0x7f00000004c0)=""/216}, 0x20) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180045010000400", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89ed, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c00)=""/226, 0xe9}, {&(0x7f0000000940)=""/201, 0xee}, {&(0x7f0000000a80)=""/307, 0x133}, {&(0x7f0000000bc0)=""/4155, 0x103c}], 0x4}, 0x2000) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x4000001) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="13030000760091"], 0xfe33) 16.361470087s ago: executing program 0 (id=3067): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000380), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x48040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2280, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfffff6}, [@call={0x85, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r3, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000001b00)=[0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) sendmsg$inet(r1, &(0x7f0000001f00)={&(0x7f0000000140)={0x2, 0xc, @rand_addr=0x64010101}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000280)="9bb539ee811e728e3feb579101b39b831a441b5c9ed8b5c87b60852b84f2ccf1a2b5146b457c0720e975e2ad77e7c8c55edfc3d52fbfd10e9817b1ed6e41d1f54e9ef93f9b709f6a2ca784cee9721df73f3652a4812bbfe89188ae8ba605bad5309b02c382fc1b46ced2f862b28c630d6e3fb85f979a54ee8f5655b20bbe34ac9898aa0aa62849858a7ea24b96ac2efd47d0cebb872b4ecb1af939b3d2875e21231c4f7db03b5a0f137cf948c6add4421a96331f251074a167d6d016c8140bbd372d89c95055d549bfe5bf", 0xcb}, {&(0x7f00000003c0)="3a401ea7c9e1b3ca1f2680a54980a70d861e6153479f3881a5b2cba4e66205bbda32bf660e8e", 0x26}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="0100000004393b75f56cd2699f274203a3f86e0983648951a3b912ae92f4dce77c8cdfcd442b073d061a7048499ecd", 0x2f}, {&(0x7f00000019c0)="a3fa104977e55a396623a059d2540a0c258e4d4908b58797126732d2c32d6c78d9501c727b69e5648117c54d45bb39cb463321fb8989133ee81aaf1558ffc39e884abacdbb198942b0c707d6ea", 0x4d}], 0x5, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x3, [{@broadcast, 0x4230}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff7f}, {@private=0xa010100, 0x3}, {@multicast2}]}, @rr={0x7, 0x13, 0xf5, [@dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xed, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}]}, @cipso={0x86, 0x36, 0x3, [{0x6, 0x10, "8551e347f015dc0b4959fc22daa6"}, {0x6, 0x4, 'E\"'}, {0x0, 0xf, "abd34e48ef025b6eceae6276e8"}, {0x2, 0xd, "ccc3d22614d812bb5189ee"}]}, @ssrr={0x89, 0x7, 0x7f, [@empty]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x3, [0x5, 0x57, 0x8]}, @lsrr={0x83, 0x23, 0x4c, [@remote, @multicast1, @private=0xa010100, @empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x44, 0x12, "aa40ac07d32c7b3bc5d6da681a08d622"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x138}, 0xc804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x10, &(0x7f0000000200), 0x4) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64038, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000400), 0x5}, 0x8000, 0xce1, 0x5, 0x9, 0x9, 0x6, 0x2, 0x0, 0xff, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 16.312186328s ago: executing program 4 (id=3068): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c189e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.134996223s ago: executing program 4 (id=3069): socketpair(0x26, 0x5, 0xa471, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000580)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000000a80)=""/59, 0x3b}, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36516002b000c0001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000380)={0x4, 0x80, 0x0, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x84, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x7, @perf_bp={&(0x7f00000001c0), 0x2}, 0x40, 0x1, 0xfffff075, 0x6, 0x401, 0x2, 0x6cb, 0x0, 0x214a, 0x0, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/28], 0x50) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0x3}, 0x10020, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c0000000400000001000084020000000a000000035e0e152d575f89bf000000000000010500000020000000000000000000000b02000000006100302e61006161006100"], 0x0, 0x58}, 0x28) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000010e7ffffbca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f040000000000002e0a0200000000002604"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25}, 0x94) r5 = perf_event_open$cgroup(&(0x7f0000000240)={0x4, 0x80, 0x1, 0x1, 0x5, 0x5, 0x0, 0xffffffffffffff02, 0x20030, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x112008, 0x800, 0x37, 0x8, 0xfffffffffffffffb, 0x1ff, 0x0, 0x0, 0x400, 0x0, 0x6}, 0xffffffffffffffff, 0x7, r4, 0x222fcd8d67cab1ec) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="185d000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x60300, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 16.092783414s ago: executing program 0 (id=3070): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 16.091679584s ago: executing program 2 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004b85df54b28e5698ab6df37273b5bf000000000000000000000000000000000000000200de0000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020400f9ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) unlink(&(0x7f0000000080)='./cgroup\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000108695887c1eb0f0b277ad8809f3a32872a1d42b219f528c18f761b9f255adf52278e27e50c387bb9f92baea4fb083102f28a2c06169c28096a1ca00bc1cdfd1f6812b1f625f2c79dde18effe97d23f123a1a9d64361792c75dd6a2602e6d6657fb06978e5559fcb724f43df9aa3308f5f3a55956319e1cfd2667203997aae5f457732eb51d5602ab880ae42f84df76cdcaa3351b794e111fcab578fe82e42ea6c698b7a4acd6cc8cbf0c91797ba634b573978b3ea4ab8afdbb7ae25", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0xffffffac, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x81000000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80203, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x510, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="e96c07e48d9f1df0104290088f49db3c3834cf007218f006f545ef391a56a30ddfe65dc01c3a448e6cdb6b48aa62d3aebf1dfa7ea996000bbcf5b32bdff311324a8c6b1f921c25711f4f6a4cec8152ff649fc3a10651a40c65e2be9157801a1e0951bba461529f770f2a5cb3682623c2a352a13d8f92b97d841d21d1a021b3824b02ecbcbb8d17d1a61577f425639910bebb54b2feef054ccecec5aa6008c4d483d1b2fdb647aeaec009ef3bc9c9a50bf165440e2a52db2cdf8e95910837cc8e4110b2d140b9a097335d00"/212, &(0x7f0000001f80), 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) 15.920826539s ago: executing program 0 (id=3072): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000380), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x48040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2280, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfffff6}, [@call={0x85, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r3, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000001b00)=[0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) sendmsg$inet(r1, &(0x7f0000001f00)={&(0x7f0000000140)={0x2, 0xc, @rand_addr=0x64010101}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000280)="9bb539ee811e728e3feb579101b39b831a441b5c9ed8b5c87b60852b84f2ccf1a2b5146b457c0720e975e2ad77e7c8c55edfc3d52fbfd10e9817b1ed6e41d1f54e9ef93f9b709f6a2ca784cee9721df73f3652a4812bbfe89188ae8ba605bad5309b02c382fc1b46ced2f862b28c630d6e3fb85f979a54ee8f5655b20bbe34ac9898aa0aa62849858a7ea24b96ac2efd47d0cebb872b4ecb1af939b3d2875e21231c4f7db03b5a0f137cf948c6add4421a96331f251074a167d6d016c8140bbd372d89c95055d549bfe5bf", 0xcb}, {&(0x7f00000003c0)="3a401ea7c9e1b3ca1f2680a54980a70d861e6153479f3881a5b2cba4e66205bbda32bf660e8e", 0x26}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="0100000004393b75f56cd2699f274203a3f86e0983648951a3b912ae92f4dce77c8cdfcd442b073d061a7048499ecd", 0x2f}, {&(0x7f00000019c0)="a3fa104977e55a396623a059d2540a0c258e4d4908b58797126732d2c32d6c78d9501c727b69e5648117c54d45bb39cb463321fb8989133ee81aaf1558ffc39e884abacdbb198942b0c707d6ea", 0x4d}], 0x5, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x3, [{@broadcast, 0x4230}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff7f}, {@private=0xa010100, 0x3}, {@multicast2}]}, @rr={0x7, 0x13, 0xf5, [@dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xed, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}]}, @cipso={0x86, 0x36, 0x3, [{0x6, 0x10, "8551e347f015dc0b4959fc22daa6"}, {0x6, 0x4, 'E\"'}, {0x0, 0xf, "abd34e48ef025b6eceae6276e8"}, {0x2, 0xd, "ccc3d22614d812bb5189ee"}]}, @ssrr={0x89, 0x7, 0x7f, [@empty]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x3, [0x5, 0x57, 0x8]}, @lsrr={0x83, 0x23, 0x4c, [@remote, @multicast1, @private=0xa010100, @empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x44, 0x12, "aa40ac07d32c7b3bc5d6da681a08d622"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x138}, 0xc804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x10, &(0x7f0000000200), 0x4) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64038, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000400), 0x5}, 0x8000, 0xce1, 0x5, 0x9, 0x9, 0x6, 0x2, 0x0, 0xff, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 15.920177948s ago: executing program 4 (id=3073): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0xa1, 0x6, 0x82, 0xf7, 0x0, 0xb, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x4, @perf_config_ext={0x8da, 0x18000000}, 0x880, 0x8, 0x7, 0x4, 0xfffffffffffffffd, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a12c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a8000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x1410, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000002a40)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/227, 0xe3}, {&(0x7f0000002780)=""/5, 0x5}, {&(0x7f00000027c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/145, 0x91}], 0x5, &(0x7f0000002a00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2023) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 15.677674145s ago: executing program 1 (id=3074): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10182) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) close(r3) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) 447.825128ms ago: executing program 33 (id=3072): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000380), 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x48040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2280, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfbfffff6}, [@call={0x85, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d80)={r3, 0xe0, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000001b00)=[0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000001b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001bc0), &(0x7f0000001c00), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000001c40)}}, 0x10) sendmsg$inet(r1, &(0x7f0000001f00)={&(0x7f0000000140)={0x2, 0xc, @rand_addr=0x64010101}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000280)="9bb539ee811e728e3feb579101b39b831a441b5c9ed8b5c87b60852b84f2ccf1a2b5146b457c0720e975e2ad77e7c8c55edfc3d52fbfd10e9817b1ed6e41d1f54e9ef93f9b709f6a2ca784cee9721df73f3652a4812bbfe89188ae8ba605bad5309b02c382fc1b46ced2f862b28c630d6e3fb85f979a54ee8f5655b20bbe34ac9898aa0aa62849858a7ea24b96ac2efd47d0cebb872b4ecb1af939b3d2875e21231c4f7db03b5a0f137cf948c6add4421a96331f251074a167d6d016c8140bbd372d89c95055d549bfe5bf", 0xcb}, {&(0x7f00000003c0)="3a401ea7c9e1b3ca1f2680a54980a70d861e6153479f3881a5b2cba4e66205bbda32bf660e8e", 0x26}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="0100000004393b75f56cd2699f274203a3f86e0983648951a3b912ae92f4dce77c8cdfcd442b073d061a7048499ecd", 0x2f}, {&(0x7f00000019c0)="a3fa104977e55a396623a059d2540a0c258e4d4908b58797126732d2c32d6c78d9501c727b69e5648117c54d45bb39cb463321fb8989133ee81aaf1558ffc39e884abacdbb198942b0c707d6ea", 0x4d}], 0x5, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x8b, 0x1, 0x3, [{@broadcast, 0x4230}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff7f}, {@private=0xa010100, 0x3}, {@multicast2}]}, @rr={0x7, 0x13, 0xf5, [@dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010100, @multicast2, @multicast2]}, @rr={0x7, 0xf, 0xed, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1]}, @timestamp_addr={0x44, 0xc, 0x42, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}]}, @cipso={0x86, 0x36, 0x3, [{0x6, 0x10, "8551e347f015dc0b4959fc22daa6"}, {0x6, 0x4, 'E\"'}, {0x0, 0xf, "abd34e48ef025b6eceae6276e8"}, {0x2, 0xd, "ccc3d22614d812bb5189ee"}]}, @ssrr={0x89, 0x7, 0x7f, [@empty]}, @timestamp={0x44, 0x10, 0xf, 0x0, 0x3, [0x5, 0x57, 0x8]}, @lsrr={0x83, 0x23, 0x4c, [@remote, @multicast1, @private=0xa010100, @empty, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0x32}, @dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x44, 0x12, "aa40ac07d32c7b3bc5d6da681a08d622"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x138}, 0xc804) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) close(r2) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x10, &(0x7f0000000200), 0x4) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64038, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000400), 0x5}, 0x8000, 0xce1, 0x5, 0x9, 0x9, 0x6, 0x2, 0x0, 0xff, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0x2, 0x3, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r8, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0e"], 0x20) 292.519442ms ago: executing program 34 (id=3074): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10182) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6}, 0x94) close(r3) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r7}, 0x18) 163.798225ms ago: executing program 35 (id=3071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00004b85df54b28e5698ab6df37273b5bf000000000000000000000000000000000000000200de0000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020400f9ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) unlink(&(0x7f0000000080)='./cgroup\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000108695887c1eb0f0b277ad8809f3a32872a1d42b219f528c18f761b9f255adf52278e27e50c387bb9f92baea4fb083102f28a2c06169c28096a1ca00bc1cdfd1f6812b1f625f2c79dde18effe97d23f123a1a9d64361792c75dd6a2602e6d6657fb06978e5559fcb724f43df9aa3308f5f3a55956319e1cfd2667203997aae5f457732eb51d5602ab880ae42f84df76cdcaa3351b794e111fcab578fe82e42ea6c698b7a4acd6cc8cbf0c91797ba634b573978b3ea4ab8afdbb7ae25", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0xffffffac, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x81000000}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80203, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000001c0), 0x4}, 0x510, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)="e96c07e48d9f1df0104290088f49db3c3834cf007218f006f545ef391a56a30ddfe65dc01c3a448e6cdb6b48aa62d3aebf1dfa7ea996000bbcf5b32bdff311324a8c6b1f921c25711f4f6a4cec8152ff649fc3a10651a40c65e2be9157801a1e0951bba461529f770f2a5cb3682623c2a352a13d8f92b97d841d21d1a021b3824b02ecbcbb8d17d1a61577f425639910bebb54b2feef054ccecec5aa6008c4d483d1b2fdb647aeaec009ef3bc9c9a50bf165440e2a52db2cdf8e95910837cc8e4110b2d140b9a097335d00"/212, &(0x7f0000001f80), 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) 0s ago: executing program 36 (id=3073): ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0xa1, 0x6, 0x82, 0xf7, 0x0, 0xb, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x4, @perf_config_ext={0x8da, 0x18000000}, 0x880, 0x8, 0x7, 0x4, 0xfffffffffffffffd, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a12c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a8000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) gettid() perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x1410, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000002a40)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000002980)=[{&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/227, 0xe3}, {&(0x7f0000002780)=""/5, 0x5}, {&(0x7f00000027c0)=""/232, 0xe8}, {&(0x7f00000003c0)=""/145, 0x91}], 0x5, &(0x7f0000002a00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x2023) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): adv0: Interface activated: batadv_slave_0 [ 404.130899][T11888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.163646][T11888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.198918][T11888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.228828][T11888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.260178][T11888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.276145][T11888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.289560][T11888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.300891][T11888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.317124][T11888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.328761][T11986] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 404.347189][T11888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.370231][T11888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.382389][T11888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.391490][T11888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.621153][ T4152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.653327][ T4152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.703778][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.711670][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.738447][T11995] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2292'. [ 404.764686][T11995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.010468][T11991] delete_channel: no stack [ 405.106986][T11999] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2256'. [ 405.118335][T11999] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 405.159085][T12001] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 405.169530][ T5783] Bluetooth: hci4: command tx timeout [ 405.205702][T12002] netlink: 'syz.4.2256': attribute type 29 has an invalid length. [ 405.224222][T12002] netlink: 'syz.4.2256': attribute type 29 has an invalid length. [ 405.232822][T11999] netlink: 'syz.4.2256': attribute type 29 has an invalid length. [ 405.247641][T12002] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2256'. [ 405.551688][T12012] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2296'. [ 405.621633][T12012] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 406.006826][T12018] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.279895][T12022] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2301'. [ 406.340045][T12022] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.527700][T12028] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2304'. [ 406.563135][T12028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.611882][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2303'. [ 406.662540][T12030] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 406.701524][T12030] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2303'. [ 406.749138][T12032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.934985][T12038] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 407.045698][T12041] netlink: 'syz.1.2307': attribute type 29 has an invalid length. [ 407.235019][T12040] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.250753][ T5783] Bluetooth: hci4: command tx timeout [ 407.269518][T12041] netlink: 'syz.1.2307': attribute type 29 has an invalid length. [ 407.307255][T12038] netlink: 'syz.1.2307': attribute type 29 has an invalid length. [ 407.425338][T12047] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 407.515743][T12051] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 407.721280][T12056] __nla_validate_parse: 5 callbacks suppressed [ 407.721298][T12056] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2312'. [ 408.718827][T12064] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2316'. [ 408.746259][T12064] net_ratelimit: 1 callbacks suppressed [ 408.746277][T12064] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.804381][T12066] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2317'. [ 408.848350][T12066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.157703][ T5086] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 409.183748][ T5086] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 409.194108][ T5086] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 409.212648][ T5086] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 409.222179][ T5086] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 409.237466][ T5086] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 409.479631][T12078] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2327'. [ 409.559298][T12078] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 409.622046][T12078] netlink: 'syz.0.2327': attribute type 29 has an invalid length. [ 409.687048][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.727508][T12078] netlink: 'syz.0.2327': attribute type 29 has an invalid length. [ 409.750783][T12082] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2327'. [ 409.761826][T12081] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2320'. [ 409.791422][T12081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.862798][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.890058][T12079] netlink: 'syz.0.2327': attribute type 29 has an invalid length. [ 409.904702][T12085] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 410.027325][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.202359][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.248762][T12091] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 410.381150][T12096] syzkaller0: entered promiscuous mode [ 410.409549][T12096] syzkaller0: entered allmulticast mode [ 410.429560][T12071] chnl_net:caif_netlink_parms(): no params data found [ 410.485556][T12101] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2325'. [ 410.512588][T12101] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 410.653018][T12102] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2325'. [ 410.751294][T12109] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2328'. [ 410.776942][T12109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.817233][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.824921][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.832423][T12071] bridge_slave_0: entered allmulticast mode [ 410.841742][T12071] bridge_slave_0: entered promiscuous mode [ 410.869403][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.877475][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.885588][T12071] bridge_slave_1: entered allmulticast mode [ 410.893139][T12071] bridge_slave_1: entered promiscuous mode [ 410.976535][T12071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.059980][T12071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.323614][ T5783] Bluetooth: hci5: command tx timeout [ 412.955314][T12114] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2330'. [ 412.968256][T12114] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.036226][T12118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2332'. [ 413.057572][T12118] netlink: 'syz.0.2332': attribute type 1 has an invalid length. [ 413.073968][T12118] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2332'. [ 413.147290][T12121] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2333'. [ 413.202991][T12121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.279821][T12071] team0: Port device team_slave_0 added [ 413.294860][T12071] team0: Port device team_slave_1 added [ 413.302563][T12127] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 413.405123][ T5783] Bluetooth: hci5: command tx timeout [ 413.689763][T12071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.733834][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.774144][T12071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.786816][T12143] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2338'. [ 413.801236][T12071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.810839][T12143] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 413.822905][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.851425][T12071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.865545][T12140] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2337'. [ 413.900269][T12140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.012565][T12148] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2338'. [ 414.170819][T12071] hsr_slave_0: entered promiscuous mode [ 414.210210][T12071] hsr_slave_1: entered promiscuous mode [ 414.225096][T12071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.255354][T12071] Cannot create hsr debugfs directory [ 414.574371][T12157] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 414.622943][ T1131] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 414.631345][T12160] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2341'. [ 414.640891][ T1131] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 414.677912][T12160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.046794][ T34] vlan0: left allmulticast mode [ 415.056236][ T34] veth0_vlan: left allmulticast mode [ 415.061758][ T34] vlan0: left promiscuous mode [ 415.086410][ T34] À: port 1(vlan0) entered disabled state [ 415.106529][ T34] hsr_slave_0: left promiscuous mode [ 415.116123][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.132544][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.148460][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.184479][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.245634][ T34] veth1_vlan: left promiscuous mode [ 415.261449][ T34] veth0_vlan: left promiscuous mode [ 415.484541][ T5783] Bluetooth: hci5: command tx timeout [ 415.576407][ T34] geneve1 (unregistering): left promiscuous mode [ 415.589438][ T34] geneve1 (unregistering): left allmulticast mode [ 415.603188][ T34] team0 (unregistering): Port device geneve1 removed [ 416.107828][ T34] team_slave_1 (unregistering): left promiscuous mode [ 416.114890][ T34] team_slave_1 (unregistering): left allmulticast mode [ 416.127477][ T34] team0 (unregistering): Port device team_slave_1 removed [ 416.170886][ T34] C (unregistering): left promiscuous mode [ 416.176883][ T34] C (unregistering): left allmulticast mode [ 416.188316][ T34] team0 (unregistering): Port device C removed [ 416.232672][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.617126][ T34] bond0 (unregistering): Released all slaves [ 416.666618][T12175] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 416.676024][T12173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2345'. [ 416.686040][T12173] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 416.694057][T12173] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2345'. [ 416.977008][T12204] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 417.503433][T12213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.563716][ T5783] Bluetooth: hci5: command tx timeout [ 417.681370][T12220] FAULT_INJECTION: forcing a failure. [ 417.681370][T12220] name failslab, interval 1, probability 0, space 0, times 0 [ 417.694568][T12220] CPU: 1 PID: 12220 Comm: syz.0.2352 Not tainted syzkaller #0 [ 417.702106][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 417.712237][T12220] Call Trace: [ 417.715578][T12220] [ 417.718563][T12220] dump_stack_lvl+0x18c/0x250 [ 417.723326][T12220] ? show_regs_print_info+0x20/0x20 [ 417.728600][T12220] ? load_image+0x420/0x420 [ 417.733201][T12220] should_fail_ex+0x394/0x4c0 [ 417.737952][T12220] should_failslab+0x9/0x20 [ 417.742519][T12220] slab_pre_alloc_hook+0x59/0x300 [ 417.747629][T12220] kmem_cache_alloc+0x5a/0x2c0 [ 417.752464][T12220] ? dst_alloc+0x105/0x170 [ 417.756937][T12220] dst_alloc+0x105/0x170 [ 417.761237][T12220] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 417.767376][T12220] ? ip_route_output_key_hash+0x13d/0x330 [ 417.773189][T12220] ip_route_output_key_hash+0x1f3/0x330 [ 417.778802][T12220] ? ip_route_input_rcu+0x3120/0x3120 [ 417.784233][T12220] ? __asan_memset+0x22/0x40 [ 417.788872][T12220] ip_route_output_flow+0x2a/0x150 [ 417.794054][T12220] ip_tunnel_xmit+0x9c2/0x25b0 [ 417.798890][T12220] ? ip_tunnel_xmit+0x160/0x25b0 [ 417.803900][T12220] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 417.808987][T12220] ? validate_xmit_xfrm+0xbb/0x1340 [ 417.814244][T12220] ? skb_push+0x8e/0xe0 [ 417.818480][T12220] ipgre_xmit+0x7eb/0xb70 [ 417.822925][T12220] dev_hard_start_xmit+0x269/0x790 [ 417.828101][T12220] __dev_queue_xmit+0x1be8/0x37e0 [ 417.833243][T12220] ? __dev_queue_xmit+0x272/0x37e0 [ 417.838421][T12220] ? netdev_core_pick_tx+0x370/0x370 [ 417.843751][T12220] ? pskb_expand_head+0x17a/0x1150 [ 417.848904][T12220] ? pskb_expand_head+0x17a/0x1150 [ 417.854067][T12220] ? skb_release_data+0x1de/0x7f0 [ 417.859160][T12220] ? __bpf_redirect+0x4d1/0xdf0 [ 417.864048][T12220] __bpf_tx_skb+0x181/0x260 [ 417.868612][T12220] bpf_clone_redirect+0x315/0x4a0 [ 417.873714][T12220] bpf_prog_208b094576c80b22+0x5e/0x63 [ 417.879247][T12220] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 417.885311][T12220] ? __lock_acquire+0x7eb0/0x7eb0 [ 417.890412][T12220] ? lock_chain_count+0x20/0x20 [ 417.895336][T12220] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 417.901636][T12220] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 417.906975][T12220] ? ktime_get+0x7f/0x280 [ 417.911360][T12220] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 417.917663][T12220] ? ktime_get_real_ts64+0x440/0x440 [ 417.923001][T12220] ? __x64_sys_bpf+0x7c/0x90 [ 417.927644][T12220] ? __local_bh_disable_ip+0x108/0x1a0 [ 417.933171][T12220] ? __cant_sleep+0x220/0x220 [ 417.937913][T12220] ? read_tsc+0x9/0x20 [ 417.942033][T12220] ? ktime_get+0x24b/0x280 [ 417.946505][T12220] ? bpf_test_run+0x174/0x870 [ 417.951244][T12220] bpf_test_run+0x2df/0x870 [ 417.955827][T12220] ? bpf_test_run+0x174/0x870 [ 417.960568][T12220] ? dst_hold+0x70/0x70 [ 417.964768][T12220] ? eth_get_headlen+0x210/0x210 [ 417.969768][T12220] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 417.975233][T12220] ? cpu_online+0x60/0x60 [ 417.979621][T12220] bpf_prog_test_run+0x31f/0x390 [ 417.984611][T12220] __sys_bpf+0x49d/0x890 [ 417.988912][T12220] ? bpf_link_show_fdinfo+0x560/0x560 [ 417.994369][T12220] ? lock_chain_count+0x20/0x20 [ 417.999294][T12220] __x64_sys_bpf+0x7c/0x90 [ 418.003773][T12220] do_syscall_64+0x55/0xb0 [ 418.008256][T12220] ? clear_bhb_loop+0x40/0x90 [ 418.012980][T12220] ? clear_bhb_loop+0x40/0x90 [ 418.017733][T12220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.023723][T12220] RIP: 0033:0x7f59dff9e159 [ 418.028179][T12220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.047840][T12220] RSP: 002b:00007f59de1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.056298][T12220] RAX: ffffffffffffffda RBX: 00007f59e0225fa0 RCX: 00007f59dff9e159 [ 418.064336][T12220] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 418.072360][T12220] RBP: 00007f59de1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 418.080366][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.088367][T12220] R13: 00007f59e0226038 R14: 00007f59e0225fa0 R15: 00007fffea825678 [ 418.096429][T12220] [ 418.417471][T12228] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 418.476240][T12231] __nla_validate_parse: 3 callbacks suppressed [ 418.476281][T12231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2354'. [ 418.506678][T12231] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 418.519826][T12231] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2354'. [ 418.587923][T12071] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 418.640949][T12071] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 418.697587][T12071] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 418.770007][T12071] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.977219][T12248] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2360'. [ 419.027591][T12248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.158112][T12252] FAULT_INJECTION: forcing a failure. [ 419.158112][T12252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.172056][T12252] CPU: 0 PID: 12252 Comm: syz.2.2361 Not tainted syzkaller #0 [ 419.179593][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 419.189696][T12252] Call Trace: [ 419.193033][T12252] [ 419.196016][T12252] dump_stack_lvl+0x18c/0x250 [ 419.200750][T12252] ? show_regs_print_info+0x20/0x20 [ 419.205990][T12252] ? load_image+0x420/0x420 [ 419.210534][T12252] ? __lock_acquire+0x7eb0/0x7eb0 [ 419.215629][T12252] ? snprintf+0xe9/0x140 [ 419.219917][T12252] should_fail_ex+0x394/0x4c0 [ 419.224657][T12252] _copy_to_user+0x2f/0xa0 [ 419.229113][T12252] simple_read_from_buffer+0xe7/0x150 [ 419.234533][T12252] proc_fail_nth_read+0x1e8/0x260 [ 419.239610][T12252] ? proc_fault_inject_write+0x360/0x360 [ 419.245297][T12252] ? fsnotify_perm+0x271/0x5e0 [ 419.250104][T12252] ? proc_fault_inject_write+0x360/0x360 [ 419.255787][T12252] vfs_read+0x298/0x990 [ 419.259999][T12252] ? kernel_read+0x1e0/0x1e0 [ 419.264628][T12252] ? __fget_files+0x28/0x460 [ 419.269254][T12252] ? __fget_files+0x3fc/0x460 [ 419.274072][T12252] ? __fdget_pos+0x2a3/0x330 [ 419.278724][T12252] ? ksys_read+0x74/0x260 [ 419.283093][T12252] ksys_read+0x151/0x260 [ 419.287469][T12252] ? vfs_write+0x9a0/0x9a0 [ 419.291957][T12252] ? lockdep_hardirqs_on+0x98/0x150 [ 419.297203][T12252] do_syscall_64+0x55/0xb0 [ 419.301665][T12252] ? clear_bhb_loop+0x40/0x90 [ 419.306382][T12252] ? clear_bhb_loop+0x40/0x90 [ 419.311098][T12252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 419.317030][T12252] RIP: 0033:0x7f3db295e98e [ 419.321489][T12252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.341155][T12252] RSP: 002b:00007f3db37bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.349717][T12252] RAX: ffffffffffffffda RBX: 00007f3db37c06c0 RCX: 00007f3db295e98e [ 419.357748][T12252] RDX: 000000000000000f RSI: 00007f3db37c00a0 RDI: 0000000000000006 [ 419.365770][T12252] RBP: 00007f3db37c0090 R08: 0000000000000000 R09: 0000000000000000 [ 419.373772][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 419.381789][T12252] R13: 00007f3db2c26038 R14: 00007f3db2c25fa0 R15: 00007ffddcb8d488 [ 419.389826][T12252] [ 419.438133][T12071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.523307][T12071] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.597119][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.604423][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.673138][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.681907][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.824056][T12260] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 419.825163][ T1131] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 419.859020][T12262] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2365'. [ 419.874034][ T1131] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 419.909980][T12262] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 419.935636][T12265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2366'. [ 419.959121][T12265] netlink: 'syz.0.2366': attribute type 1 has an invalid length. [ 419.984179][T12265] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2366'. [ 420.026422][T12269] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2365'. [ 420.424330][T12071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.575694][T12071] veth0_vlan: entered promiscuous mode [ 420.610199][T12071] veth1_vlan: entered promiscuous mode [ 420.636832][T12286] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2369'. [ 420.678453][T12286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.785841][T12292] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2371'. [ 420.815538][T12292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.917597][T12071] veth0_macvtap: entered promiscuous mode [ 420.941740][T12071] veth1_macvtap: entered promiscuous mode [ 421.037875][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.073547][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.101215][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.112104][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.129113][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.141001][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.163791][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.200521][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.228924][T12071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.267343][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.279511][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.291272][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.323736][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.340287][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.351395][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.367969][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.378659][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.396344][T12071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.429757][ T34] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 421.438329][T12300] mac80211_hwsim hwsim12 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 421.448578][ T34] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 421.464528][T12308] FAULT_INJECTION: forcing a failure. [ 421.464528][T12308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.491037][T12308] CPU: 0 PID: 12308 Comm: syz.2.2375 Not tainted syzkaller #0 [ 421.498581][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 421.508686][T12308] Call Trace: [ 421.511989][T12308] [ 421.514966][T12308] dump_stack_lvl+0x18c/0x250 [ 421.519691][T12308] ? show_regs_print_info+0x20/0x20 [ 421.524928][T12308] ? load_image+0x420/0x420 [ 421.529466][T12308] ? __might_fault+0xaa/0x120 [ 421.534176][T12308] ? __lock_acquire+0x7eb0/0x7eb0 [ 421.539228][T12308] should_fail_ex+0x394/0x4c0 [ 421.543938][T12308] _copy_from_user+0x2f/0xe0 [ 421.548552][T12308] __sys_bpf+0x23e/0x890 [ 421.552813][T12308] ? bpf_link_show_fdinfo+0x560/0x560 [ 421.558238][T12308] ? lock_chain_count+0x20/0x20 [ 421.563121][T12308] __x64_sys_bpf+0x7c/0x90 [ 421.567558][T12308] do_syscall_64+0x55/0xb0 [ 421.572029][T12308] ? clear_bhb_loop+0x40/0x90 [ 421.576747][T12308] ? clear_bhb_loop+0x40/0x90 [ 421.581488][T12308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 421.587446][T12308] RIP: 0033:0x7f3db299e159 [ 421.591900][T12308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.611637][T12308] RSP: 002b:00007f3db37c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.620087][T12308] RAX: ffffffffffffffda RBX: 00007f3db2c25fa0 RCX: 00007f3db299e159 [ 421.628090][T12308] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 421.636096][T12308] RBP: 00007f3db37c0090 R08: 0000000000000000 R09: 0000000000000000 [ 421.644195][T12308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.652204][T12308] R13: 00007f3db2c26038 R14: 00007f3db2c25fa0 R15: 00007ffddcb8d488 [ 421.660211][T12308] [ 421.688473][T12071] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.731978][T12071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.747684][T12071] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.766780][T12071] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.924416][T12313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2376'. [ 421.979949][T12313] netlink: 'syz.0.2376': attribute type 1 has an invalid length. [ 422.007611][T12320] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 422.075777][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.112797][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.224734][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.232660][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.643040][T12334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.720530][T12338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.038252][T12347] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.754586][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 423.772715][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.791515][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.803009][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.819083][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.835925][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.843820][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.894192][T12358] __nla_validate_parse: 6 callbacks suppressed [ 423.894241][T12358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2386'. [ 423.931183][T12358] netlink: 'syz.1.2386': attribute type 1 has an invalid length. [ 423.971614][T12358] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2386'. [ 424.107257][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.305456][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.468650][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.531840][T12377] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2390'. [ 424.565607][T12382] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2391'. [ 424.587206][T12377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.620013][T12372] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2388'. [ 424.620470][T12382] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 424.801257][T12382] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2391'. [ 424.927719][T12395] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2392'. [ 424.948318][T12395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 425.633088][T12410] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2395'. [ 425.655804][T12410] netlink: 'syz.1.2395': attribute type 1 has an invalid length. [ 425.683817][T12410] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2395'. [ 425.716213][T12359] chnl_net:caif_netlink_parms(): no params data found [ 425.885082][ T5783] Bluetooth: hci0: command tx timeout [ 426.914645][T12433] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2400'. [ 426.982495][T12433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.155368][T12444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.343051][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.367520][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.397028][T12359] bridge_slave_0: entered allmulticast mode [ 427.423052][T12359] bridge_slave_0: entered promiscuous mode [ 427.434685][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.450383][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.458255][T12359] bridge_slave_1: entered allmulticast mode [ 427.467886][T12359] bridge_slave_1: entered promiscuous mode [ 427.519350][T12448] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 427.531094][T12448] syz_tun: entered promiscuous mode [ 427.537379][T12452] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 427.629867][T12448] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 427.791754][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.818430][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.974802][ T5783] Bluetooth: hci0: command tx timeout [ 428.141980][T12359] team0: Port device team_slave_0 added [ 428.257126][T12359] team0: Port device team_slave_1 added [ 428.484099][ T12] hsr_slave_0: left promiscuous mode [ 428.595922][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.629409][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.665284][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.705440][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.725395][ T12] team0: left allmulticast mode [ 428.737823][ T12] team_slave_0: left allmulticast mode [ 428.744753][ T12] team_slave_1: left allmulticast mode [ 428.750580][ T12] team0: left promiscuous mode [ 428.758479][ T12] team_slave_0: left promiscuous mode [ 428.765023][ T12] team_slave_1: left promiscuous mode [ 428.771515][ T12] bridge0: port 3(team0) entered disabled state [ 428.788334][ T12] bridge_slave_1: left allmulticast mode [ 428.800479][ T12] bridge_slave_1: left promiscuous mode [ 428.807790][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.855517][ T12] bridge_slave_0: left promiscuous mode [ 428.872744][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.975010][ T12] veth1_vlan: left promiscuous mode [ 428.993990][ T12] veth0_vlan: left promiscuous mode [ 429.757627][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.802655][ T12] team0 (unregistering): Port device team_slave_0 removed [ 429.852893][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.055664][ T5783] Bluetooth: hci0: command tx timeout [ 430.251805][ T12] bond0 (unregistering): Released all slaves [ 430.313642][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.320887][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.351422][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.374971][T12471] __nla_validate_parse: 3 callbacks suppressed [ 430.374988][T12471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2409'. [ 430.399346][T12471] netlink: 'syz.4.2409': attribute type 1 has an invalid length. [ 430.407731][T12471] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2409'. [ 430.494674][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.512703][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.549588][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.615010][T12481] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2410'. [ 430.679231][T12481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.715689][T12486] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2412'. [ 430.740475][T12486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.042625][T12359] hsr_slave_0: entered promiscuous mode [ 431.088737][T12359] hsr_slave_1: entered promiscuous mode [ 431.317362][T12492] netlink: 'syz.4.2414': attribute type 10 has an invalid length. [ 431.369286][T12492] syz_tun: entered promiscuous mode [ 431.918901][T12492] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 432.143824][ T5783] Bluetooth: hci0: command tx timeout [ 432.288288][T12510] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2416'. [ 432.313894][T12510] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 432.353339][T12504] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2422'. [ 432.435314][T12513] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2416'. [ 432.471020][T12504] netlink: 'syz.1.2422': attribute type 10 has an invalid length. [ 432.502101][T12504] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.516267][T12504] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.616333][T12504] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.624592][T12504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.636810][T12504] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.645390][T12504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.744937][T12504] team0: Port device bridge0 added [ 432.795137][T12516] netlink: 'syz.2.2417': attribute type 10 has an invalid length. [ 433.247603][T12521] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2426'. [ 433.328561][T12521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.240071][T12359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 434.262631][T12359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 434.330719][T12359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 434.390599][T12359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 434.452711][T12543] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2423'. [ 434.466707][T12543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.751308][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.819324][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.844548][T12553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2427'. [ 434.855059][T12553] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 434.867458][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.874697][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.917553][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.924888][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.018343][T12359] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.098823][T12556] netlink: 'syz.2.2425': attribute type 10 has an invalid length. [ 435.301181][T12566] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 435.344178][T12568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.418411][T12566] __nla_validate_parse: 3 callbacks suppressed [ 435.418433][T12566] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2428'. [ 435.646884][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.762901][T12359] veth0_vlan: entered promiscuous mode [ 435.777399][T12585] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2434'. [ 435.801821][T12585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.872129][T12359] veth1_vlan: entered promiscuous mode [ 435.980793][T12359] veth0_macvtap: entered promiscuous mode [ 436.019967][T12359] veth1_macvtap: entered promiscuous mode [ 436.062360][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.077984][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.091585][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.105830][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.116425][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.127387][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.137732][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.148810][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.163280][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.192373][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.216157][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.240996][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.272888][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.293915][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.322007][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.346820][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.371433][T12596] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2442'. [ 436.378803][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.398893][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.420853][T12596] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 436.424849][T12598] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2436'. [ 436.444740][T12598] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 436.454801][T12598] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2436'. [ 436.522379][T12359] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.563245][T12359] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.593195][T12359] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.626828][T12359] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.674951][T12601] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2442'. [ 437.124472][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.153372][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.415076][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.450777][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.759683][T12614] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2381'. [ 437.795425][T12614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.824339][T12618] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2439'. [ 437.860222][T12618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.295672][T12632] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2445'. [ 438.337882][T12632] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 438.382824][T12632] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2445'. [ 438.422443][T12634] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 438.892142][T12644] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 439.013769][T12649] netlink: 'syz.4.2448': attribute type 29 has an invalid length. [ 439.023763][T12649] netlink: 'syz.4.2448': attribute type 29 has an invalid length. [ 439.055678][T12644] netlink: 'syz.4.2448': attribute type 29 has an invalid length. [ 439.136997][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 439.148965][ T5086] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 439.158455][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 439.173753][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 439.185365][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 439.194301][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 439.591008][ T991] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.814812][T12659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.101145][ T991] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.355754][ T991] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.519455][ T991] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.836732][T12679] __nla_validate_parse: 5 callbacks suppressed [ 440.836770][T12679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2456'. [ 440.894049][T12679] netlink: 'syz.4.2456': attribute type 1 has an invalid length. [ 440.902104][T12679] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2456'. [ 440.972860][T12653] chnl_net:caif_netlink_parms(): no params data found [ 441.053173][T12685] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2457'. [ 441.103830][T12685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.251367][ T5783] Bluetooth: hci1: command tx timeout [ 441.282627][T12688] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2459'. [ 441.303651][T12688] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 441.346904][T12690] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2460'. [ 441.406939][T12690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.512633][T12697] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2461'. [ 441.524546][T12697] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 441.593293][T12694] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2459'. [ 441.627119][T12703] netlink: 'syz.1.2461': attribute type 29 has an invalid length. [ 441.729087][T12703] netlink: 'syz.1.2461': attribute type 29 has an invalid length. [ 441.760081][T12704] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2461'. [ 441.791482][T12653] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.803852][T12653] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.820819][T12653] bridge_slave_0: entered allmulticast mode [ 441.832935][T12653] bridge_slave_0: entered promiscuous mode [ 441.843970][T12697] netlink: 'syz.1.2461': attribute type 29 has an invalid length. [ 441.931926][T12653] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.953882][T12653] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.969818][T12653] bridge_slave_1: entered allmulticast mode [ 441.989290][T12653] bridge_slave_1: entered promiscuous mode [ 443.008055][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.016282][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.323819][ T5783] Bluetooth: hci1: command tx timeout [ 445.069937][T12653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.233231][T12653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.378501][T12731] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2466'. [ 445.389296][T12731] netlink: 'syz.4.2466': attribute type 1 has an invalid length. [ 445.400397][T12731] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2466'. [ 445.410040][ T5783] Bluetooth: hci1: command tx timeout [ 445.529935][T12653] team0: Port device team_slave_0 added [ 445.541655][T12653] team0: Port device team_slave_1 added [ 445.700936][T12653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.717069][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.750002][T12653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.770035][T12738] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 445.791525][T12740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.824317][T12739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.872941][T12653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.889965][T12653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.895235][T12744] netlink: 'syz.0.2470': attribute type 29 has an invalid length. [ 445.931367][T12653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.051188][T12744] netlink: 'syz.0.2470': attribute type 29 has an invalid length. [ 446.070805][T12745] __nla_validate_parse: 3 callbacks suppressed [ 446.070824][T12745] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2470'. [ 446.097127][T12748] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2471'. [ 446.107746][T12748] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 446.193046][T12738] netlink: 'syz.0.2470': attribute type 29 has an invalid length. [ 446.300830][ T991] hsr_slave_0: left promiscuous mode [ 446.309063][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.330875][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.355760][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.363308][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.381389][ T991] team0: left allmulticast mode [ 446.402684][ T991] team_slave_0: left allmulticast mode [ 446.423866][ T991] team_slave_1: left allmulticast mode [ 446.470931][ T991] veth0_to_bond: left allmulticast mode [ 446.544558][ T991] team0: left promiscuous mode [ 446.549466][ T991] team_slave_0: left promiscuous mode [ 446.617378][ T991] team_slave_1: left promiscuous mode [ 446.632564][ T991] veth0_to_bond: left promiscuous mode [ 446.650551][ T991] bridge0: port 3(team0) entered disabled state [ 446.708264][ T991] bridge_slave_1: left allmulticast mode [ 446.735260][ T991] bridge_slave_1: left promiscuous mode [ 446.756678][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.802738][ T991] bridge_slave_0: left promiscuous mode [ 446.813100][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.971344][ T991] veth1_vlan: left promiscuous mode [ 446.992182][ T991] veth0_vlan: left promiscuous mode [ 447.491509][ T5783] Bluetooth: hci1: command tx timeout [ 447.760904][ T991] team0 (unregistering): Port device team_slave_1 removed [ 447.818650][ T991] team0 (unregistering): Port device team_slave_0 removed [ 447.877011][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.938743][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.974686][ T991] team0 (unregistering): Port device veth0_to_bond removed [ 448.326757][ T991] bond0 (unregistering): Released all slaves [ 448.391875][T12750] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2471'. [ 448.435618][T12653] hsr_slave_0: entered promiscuous mode [ 448.442994][T12653] hsr_slave_1: entered promiscuous mode [ 448.457178][T12653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.464961][T12653] Cannot create hsr debugfs directory [ 448.471674][T12765] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2474'. [ 448.513018][T12765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 448.564063][T12774] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2475'. [ 448.574481][T12774] netlink: 'syz.4.2475': attribute type 1 has an invalid length. [ 448.582494][T12774] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2475'. [ 449.267370][T12789] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2479'. [ 449.326718][T12789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.424719][T12797] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2480'. [ 449.466549][T12797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.662341][T12804] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2482'. [ 449.737260][T12804] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 449.872304][T12804] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2482'. [ 449.887474][T12809] netlink: 'syz.1.2483': attribute type 4 has an invalid length. [ 450.240235][T12653] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 450.272716][T12819] netlink: 'syz.4.2484': attribute type 1 has an invalid length. [ 450.312685][T12653] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 450.389436][T12653] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.196195][T12653] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.477096][T12826] __nla_validate_parse: 3 callbacks suppressed [ 453.477122][T12826] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2487'. [ 453.518937][T12826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.551677][T12653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.618102][T12653] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.660498][T12828] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2488'. [ 453.704228][T12828] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.735258][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.742540][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.807524][T12723] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.814803][T12723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.106689][T12840] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2492'. [ 454.173092][T12840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.339347][T12844] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2493'. [ 454.374477][T12844] netlink: 'syz.4.2493': attribute type 1 has an invalid length. [ 454.413803][T12844] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2493'. [ 454.530429][T12853] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2494'. [ 454.573651][T12853] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 454.681318][T12854] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2494'. [ 454.895424][T12653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.150891][T12653] veth0_vlan: entered promiscuous mode [ 455.216138][T12653] veth1_vlan: entered promiscuous mode [ 455.388952][T12653] veth0_macvtap: entered promiscuous mode [ 455.439464][T12653] veth1_macvtap: entered promiscuous mode [ 455.517383][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.548326][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.601154][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.633743][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.669329][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.706005][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.737219][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.764192][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.796363][T12653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.889905][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.921413][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.952056][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.974132][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.999784][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.031123][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.061432][T12653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 456.083618][T12653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.105917][T12653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.192781][T12653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.233869][T12653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.253913][T12653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.284191][T12653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.139011][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.190322][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.270409][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.282670][T12903] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2499'. [ 458.318167][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.328986][T12903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.475336][T12899] netlink: 'syz.0.2498': attribute type 2 has an invalid length. [ 458.498031][T12899] netlink: 'syz.0.2498': attribute type 8 has an invalid length. [ 458.522034][T12899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2498'. [ 458.646446][T12910] FAULT_INJECTION: forcing a failure. [ 458.646446][T12910] name failslab, interval 1, probability 0, space 0, times 0 [ 458.660917][T12910] CPU: 1 PID: 12910 Comm: syz.2.2444 Not tainted syzkaller #0 [ 458.668452][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 458.678553][T12910] Call Trace: [ 458.681874][T12910] [ 458.684846][T12910] dump_stack_lvl+0x18c/0x250 [ 458.689596][T12910] ? show_regs_print_info+0x20/0x20 [ 458.694877][T12910] ? load_image+0x420/0x420 [ 458.699442][T12910] ? __might_sleep+0xe0/0xe0 [ 458.704082][T12910] ? __lock_acquire+0x7eb0/0x7eb0 [ 458.709157][T12910] should_fail_ex+0x394/0x4c0 [ 458.713906][T12910] should_failslab+0x9/0x20 [ 458.718470][T12910] slab_pre_alloc_hook+0x59/0x300 [ 458.723565][T12910] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 458.729336][T12910] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 458.735116][T12910] __kmem_cache_alloc_node+0x53/0x250 [ 458.740556][T12910] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 458.746338][T12910] __kmalloc+0xa7/0x240 [ 458.750554][T12910] tomoyo_realpath_from_path+0xe6/0x5c0 [ 458.756174][T12910] ? tomoyo_domain+0xd6/0x120 [ 458.760997][T12910] tomoyo_path_number_perm+0x248/0x5e0 [ 458.766619][T12910] ? tomoyo_path_number_perm+0x217/0x5e0 [ 458.772311][T12910] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 458.777808][T12910] ? ksys_write+0x1d2/0x260 [ 458.782380][T12910] ? __fget_files+0x28/0x460 [ 458.787020][T12910] security_file_ioctl+0x70/0xa0 [ 458.792008][T12910] __se_sys_ioctl+0x48/0x170 [ 458.796636][T12910] do_syscall_64+0x55/0xb0 [ 458.801090][T12910] ? clear_bhb_loop+0x40/0x90 [ 458.805805][T12910] ? clear_bhb_loop+0x40/0x90 [ 458.810524][T12910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.816453][T12910] RIP: 0033:0x7f9aa4b9e159 [ 458.820912][T12910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.840599][T12910] RSP: 002b:00007f9aa5a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.849072][T12910] RAX: ffffffffffffffda RBX: 00007f9aa4e25fa0 RCX: 00007f9aa4b9e159 [ 458.857089][T12910] RDX: 00002000000000c0 RSI: 000000000000541b RDI: 0000000000000003 [ 458.865097][T12910] RBP: 00007f9aa5a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 458.873106][T12910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.881111][T12910] R13: 00007f9aa4e26038 R14: 00007f9aa4e25fa0 R15: 00007ffe04f6e478 [ 458.889134][T12910] [ 458.901996][T12910] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.943804][T12899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2498'. [ 459.155011][T12914] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2502'. [ 459.255816][T12914] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.365142][T12921] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2503'. [ 459.382621][T12921] netlink: 'syz.1.2503': attribute type 1 has an invalid length. [ 459.463860][T12921] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2503'. [ 459.540117][T12931] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2505'. [ 459.577165][T12931] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 459.680788][T12935] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2505'. [ 461.267895][T12967] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2510'. [ 461.300448][T12965] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2510'. [ 461.342642][T12968] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2511'. [ 461.398322][T12968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.267894][T12981] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2515'. [ 464.288111][T12981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.376530][T12979] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2514'. [ 464.386629][T12979] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 464.395130][T12979] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2514'. [ 464.410244][T12983] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2516'. [ 464.423948][T12983] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 464.657111][T12988] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2516'. [ 465.310915][T13001] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2523'. [ 465.328890][T13001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.710476][T13011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2527'. [ 465.742312][T13011] netlink: 'syz.4.2527': attribute type 1 has an invalid length. [ 465.760511][T13011] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2527'. [ 465.795083][T13013] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2529'. [ 465.905661][T13013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.092290][T13016] netlink: 'syz.0.2530': attribute type 10 has an invalid length. [ 466.143529][T13016] geneve0: entered promiscuous mode [ 466.186922][T13023] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2533'. [ 466.213954][T13023] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 466.367861][T13016] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 466.701471][T13029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.531894][T13037] FAULT_INJECTION: forcing a failure. [ 467.531894][T13037] name failslab, interval 1, probability 0, space 0, times 0 [ 467.554329][T13037] CPU: 0 PID: 13037 Comm: syz.0.2538 Not tainted syzkaller #0 [ 467.561912][T13037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 467.572064][T13037] Call Trace: [ 467.575402][T13037] [ 467.578476][T13037] dump_stack_lvl+0x18c/0x250 [ 467.583231][T13037] ? show_regs_print_info+0x20/0x20 [ 467.588514][T13037] ? load_image+0x420/0x420 [ 467.593117][T13037] ? ipip6_tunnel_ctl+0x6aa/0x9e0 [ 467.598271][T13037] should_fail_ex+0x394/0x4c0 [ 467.603030][T13037] should_failslab+0x9/0x20 [ 467.607592][T13037] slab_pre_alloc_hook+0x59/0x300 [ 467.612770][T13037] ? stack_depot_init+0x36/0xe0 [ 467.617675][T13037] ? __hw_addr_add_ex+0x1f4/0x700 [ 467.622759][T13037] __kmem_cache_alloc_node+0x53/0x250 [ 467.628204][T13037] ? __hw_addr_add_ex+0x1f4/0x700 [ 467.633269][T13037] kmalloc_trace+0x2a/0xe0 [ 467.637757][T13037] __hw_addr_add_ex+0x1f4/0x700 [ 467.642655][T13037] dev_addr_init+0x15b/0x240 [ 467.647307][T13037] ? dev_addr_flush+0x210/0x210 [ 467.652224][T13037] alloc_netdev_mqs+0x2d8/0x1040 [ 467.657229][T13037] ? vti6_exit_batch_net+0x420/0x420 [ 467.662564][T13037] ipip6_tunnel_locate+0x4d2/0x740 [ 467.667768][T13037] ? check_6rd+0x660/0x660 [ 467.672265][T13037] ? bpf_lsm_capable+0x9/0x10 [ 467.677007][T13037] ipip6_tunnel_ctl+0x6aa/0x9e0 [ 467.681936][T13037] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 467.687544][T13037] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.693786][T13037] ? ip_tunnel_update+0xae0/0xae0 [ 467.698876][T13037] ? ipip6_tunnel_siocdevprivate+0x34f/0x16e0 [ 467.705025][T13037] ipip6_tunnel_siocdevprivate+0x362/0x16e0 [ 467.710980][T13037] ? rcu_is_watching+0x15/0xb0 [ 467.715792][T13037] ? sit_tunnel_xmit+0x2390/0x2390 [ 467.720946][T13037] ? trace_contention_end+0x39/0xe0 [ 467.726195][T13037] ? __mutex_lock+0x30d/0xc80 [ 467.730919][T13037] ? lockdep_hardirqs_on+0x98/0x150 [ 467.736164][T13037] ? dev_load+0x21/0x1f0 [ 467.740474][T13037] ? dev_ioctl+0x83c/0x1140 [ 467.745013][T13037] ? __lock_acquire+0x7eb0/0x7eb0 [ 467.750083][T13037] ? mutex_lock_nested+0x20/0x20 [ 467.755074][T13037] ? full_name_hash+0x92/0xe0 [ 467.759788][T13037] ? dev_ifsioc+0x957/0xc40 [ 467.764335][T13037] dev_ioctl+0x84c/0x1140 [ 467.768715][T13037] sock_ioctl+0x74c/0x7e0 [ 467.773093][T13037] ? sock_poll+0x3e0/0x3e0 [ 467.777563][T13037] ? bpf_lsm_file_ioctl+0x9/0x10 [ 467.782556][T13037] ? security_file_ioctl+0x80/0xa0 [ 467.787722][T13037] ? sock_poll+0x3e0/0x3e0 [ 467.792191][T13037] __se_sys_ioctl+0xfd/0x170 [ 467.796851][T13037] do_syscall_64+0x55/0xb0 [ 467.801310][T13037] ? clear_bhb_loop+0x40/0x90 [ 467.806021][T13037] ? clear_bhb_loop+0x40/0x90 [ 467.810743][T13037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.816681][T13037] RIP: 0033:0x7ff36959e159 [ 467.821141][T13037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.840808][T13037] RSP: 002b:00007ff36a4b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.849285][T13037] RAX: ffffffffffffffda RBX: 00007ff369825fa0 RCX: 00007ff36959e159 [ 467.857306][T13037] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 467.865354][T13037] RBP: 00007ff36a4b0090 R08: 0000000000000000 R09: 0000000000000000 [ 467.873376][T13037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.881379][T13037] R13: 00007ff369826038 R14: 00007ff369825fa0 R15: 00007ffe2c237d08 [ 467.889421][T13037] [ 468.029414][T13042] netlink: 'syz.4.2537': attribute type 21 has an invalid length. [ 468.052853][T13044] netlink: 'syz.1.2540': attribute type 1 has an invalid length. [ 468.292407][T13049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.422252][T13052] netlink: 'syz.1.2543': attribute type 1 has an invalid length. [ 468.502219][T13056] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 468.515085][T13058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.805214][T13066] netlink: 'syz.2.2549': attribute type 49 has an invalid length. [ 468.846320][T13066] netlink: set zone limit has 8 unknown bytes [ 470.587684][T13072] __nla_validate_parse: 11 callbacks suppressed [ 470.587705][T13072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2551'. [ 470.624721][T13072] netlink: 'syz.2.2551': attribute type 1 has an invalid length. [ 470.632654][T13072] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2551'. [ 471.828482][T13079] netlink: 'syz.1.2554': attribute type 21 has an invalid length. [ 472.015997][T13085] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2557'. [ 472.073676][T13085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.115480][T13089] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2559'. [ 472.138598][T13089] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 472.149339][T13083] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2556'. [ 472.215341][T13089] netlink: 'syz.4.2559': attribute type 29 has an invalid length. [ 472.250105][T13083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.291753][T13089] netlink: 'syz.4.2559': attribute type 29 has an invalid length. [ 472.326347][T13092] netlink: 'syz.4.2559': attribute type 29 has an invalid length. [ 472.340821][T13096] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2559'. [ 472.525898][T13099] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2561'. [ 472.544416][T13099] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 472.617336][T13102] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2561'. [ 472.737278][T13104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2563'. [ 472.755158][T13104] netlink: 'syz.1.2563': attribute type 1 has an invalid length. [ 472.765126][T13104] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2563'. [ 475.827681][T13113] netlink: 'syz.4.2565': attribute type 49 has an invalid length. [ 475.877991][T13113] netlink: set zone limit has 8 unknown bytes [ 476.139579][T13125] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2570'. [ 476.166634][T13125] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.267585][T13128] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2571'. [ 476.307379][T13128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.522658][T13134] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2574'. [ 476.555934][T13134] netlink: 'syz.1.2574': attribute type 1 has an invalid length. [ 476.576254][T13134] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2574'. [ 476.635466][T13137] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2575'. [ 476.655450][T13137] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 476.756223][T13142] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2575'. [ 479.912262][T13153] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2584'. [ 479.934190][T13153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.981030][T13155] netlink: 'syz.1.2583': attribute type 3 has an invalid length. [ 480.044822][T13155] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2583'. [ 480.280773][T13162] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2593'. [ 480.303865][T13162] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 480.422971][T13163] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2593'. [ 480.853402][T13166] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.174450][T13174] __nla_validate_parse: 1 callbacks suppressed [ 481.174495][T13174] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2590'. [ 481.210873][T13174] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 481.292774][T13183] netlink: 'syz.2.2590': attribute type 29 has an invalid length. [ 481.322126][T13183] netlink: 'syz.2.2590': attribute type 29 has an invalid length. [ 481.349793][T13174] netlink: 'syz.2.2590': attribute type 29 has an invalid length. [ 481.387974][T13183] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2590'. [ 481.438689][T13185] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2595'. [ 481.521004][T13185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 484.788309][T13195] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2598'. [ 484.808426][T13196] netlink: 'syz.0.2597': attribute type 3 has an invalid length. [ 484.841901][T13196] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2597'. [ 484.855907][T13195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.739499][T13204] veth1_macvtap: left promiscuous mode [ 485.755185][T13204] macsec0: entered allmulticast mode [ 485.781602][T13209] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2602'. [ 485.800441][T13209] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 485.891940][T13210] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2602'. [ 486.039478][T13218] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2607'. [ 486.069640][T13218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.950747][T13236] netlink: 'syz.4.2613': attribute type 3 has an invalid length. [ 489.981271][T13236] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2613'. [ 490.332118][T13239] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 490.413054][T13239] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 490.476225][T13240] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 490.570517][T13239] netlink: 'syz.0.2614': attribute type 29 has an invalid length. [ 490.648546][T13239] netlink: 'syz.0.2614': attribute type 21 has an invalid length. [ 490.666601][T13239] netlink: 'syz.0.2614': attribute type 10 has an invalid length. [ 490.680925][T13239] netlink: 'syz.0.2614': attribute type 12 has an invalid length. [ 490.696088][T13239] netlink: 'syz.0.2614': attribute type 13 has an invalid length. [ 490.704644][T13239] netlink: 'syz.0.2614': attribute type 14 has an invalid length. [ 490.712605][T13239] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.2614'. [ 490.909870][T13246] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2617'. [ 490.922056][T13246] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 490.967865][T13248] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2619'. [ 490.988854][T13248] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.008359][T13249] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2617'. [ 494.271682][T13258] netlink: set zone limit has 8 unknown bytes [ 494.974024][T13265] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2626'. [ 495.025250][T13265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.742911][T13273] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2628'. [ 495.774180][T13273] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 495.847949][T13273] validate_nla: 6 callbacks suppressed [ 495.847991][T13273] netlink: 'syz.1.2628': attribute type 29 has an invalid length. [ 495.856372][T13276] netlink: 'syz.2.2629': attribute type 10 has an invalid length. [ 495.856397][T13276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2629'. [ 495.856460][T13276] netlink: 'syz.2.2629': attribute type 10 has an invalid length. [ 495.856478][T13276] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2629'. [ 495.925677][T13273] netlink: 'syz.1.2628': attribute type 29 has an invalid length. [ 495.945275][T13274] netlink: 'syz.1.2628': attribute type 29 has an invalid length. [ 495.955071][T13276] netlink: 'syz.2.2629': attribute type 4 has an invalid length. [ 495.967105][T13277] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2628'. [ 496.030306][T13279] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2630'. [ 496.048979][T13279] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 496.074729][T13281] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2631'. [ 496.098615][T13281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.148792][T13282] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2630'. [ 496.631630][T13294] syzkaller0: entered promiscuous mode [ 496.640332][T13294] syzkaller0: entered allmulticast mode [ 497.040658][T13304] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2641'. [ 497.061253][T13304] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 497.074715][T13307] netlink: set zone limit has 8 unknown bytes [ 497.189489][T13308] netlink: 'syz.2.2641': attribute type 29 has an invalid length. [ 498.578057][T13300] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2639'. [ 498.596634][T13300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.622555][T13305] netlink: 'syz.0.2640': attribute type 49 has an invalid length. [ 498.642399][T13308] netlink: 'syz.2.2641': attribute type 29 has an invalid length. [ 498.658439][T13309] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2641'. [ 498.875954][T13312] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 498.912690][T13317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.130967][T13323] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 499.270698][T13330] netlink: 'syz.4.2651': attribute type 49 has an invalid length. [ 499.365354][T13330] netlink: set zone limit has 8 unknown bytes [ 499.896911][T13334] netlink: set zone limit has 8 unknown bytes [ 500.138236][T13336] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 500.941337][T13367] __nla_validate_parse: 8 callbacks suppressed [ 500.941362][T13367] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2663'. [ 501.059547][T13374] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2663'. [ 501.128980][T13376] net_ratelimit: 3 callbacks suppressed [ 501.129002][T13376] netlink: set zone limit has 8 unknown bytes [ 502.291974][T13387] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2671'. [ 502.315615][T13387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.418148][T13389] validate_nla: 5 callbacks suppressed [ 502.418168][T13389] netlink: 'syz.1.2672': attribute type 10 has an invalid length. [ 502.432507][T13389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2672'. [ 502.441924][T13389] netlink: 'syz.1.2672': attribute type 10 has an invalid length. [ 502.451365][T13389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2672'. [ 502.499654][T13389] netlink: 'syz.1.2672': attribute type 4 has an invalid length. [ 502.846965][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 503.029254][T13404] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2679'. [ 503.071515][T13404] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 503.132808][T13408] netlink: 'syz.1.2681': attribute type 49 has an invalid length. [ 503.147626][T13411] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2679'. [ 503.181473][T13410] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2682'. [ 503.207793][T13410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.336608][T13413] netlink: 'syz.4.2684': attribute type 10 has an invalid length. [ 503.344633][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2684'. [ 503.354172][T13413] netlink: 'syz.4.2684': attribute type 10 has an invalid length. [ 503.362110][T13413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2684'. [ 503.401669][T13413] netlink: 'syz.4.2684': attribute type 4 has an invalid length. [ 504.461495][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.470711][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.884174][T13435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.022801][T13438] netlink: 'syz.4.2694': attribute type 49 has an invalid length. [ 505.144509][T13441] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 505.348999][T13448] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 505.359462][T13448] netlink: 'syz.0.2699': attribute type 10 has an invalid length. [ 505.803893][ T34] wlan1: Trigger new scan to find an IBSS to join [ 506.108539][T13458] __nla_validate_parse: 5 callbacks suppressed [ 506.108563][T13458] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2704'. [ 506.149232][T13461] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2711'. [ 506.183947][T13458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 506.220722][T13461] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 506.229095][T13462] netlink: set zone limit has 8 unknown bytes [ 506.329374][T13461] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2711'. [ 506.759750][ T991] wlan1: Creating new IBSS network, BSSID c2:30:dc:57:53:2d [ 507.558993][T13473] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2709'. [ 507.569891][T13473] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 507.649199][T13474] validate_nla: 1 callbacks suppressed [ 507.649237][T13474] netlink: 'syz.4.2709': attribute type 29 has an invalid length. [ 507.684400][T13474] netlink: 'syz.4.2709': attribute type 29 has an invalid length. [ 507.705440][T13473] netlink: 'syz.4.2709': attribute type 29 has an invalid length. [ 507.741614][T13473] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2709'. [ 508.004920][T13489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2715'. [ 508.023289][T13489] netlink: 'syz.4.2715': attribute type 1 has an invalid length. [ 508.036373][T13489] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2715'. [ 508.080234][T13492] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2716'. [ 508.128081][T13492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.305640][T13495] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2717'. [ 508.321017][T13495] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 508.367078][T13497] netlink: 'syz.0.2718': attribute type 10 has an invalid length. [ 508.375559][T13497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2718'. [ 508.386653][T13497] netlink: 'syz.0.2718': attribute type 10 has an invalid length. [ 508.790510][T13510] netlink: 'syz.0.2726': attribute type 1 has an invalid length. [ 508.889292][T13516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.032081][T13520] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 509.043335][T13520] netlink: 'syz.2.2730': attribute type 10 has an invalid length. [ 509.195709][T13523] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 509.278705][T13527] netlink: 'syz.2.2731': attribute type 29 has an invalid length. [ 509.296764][T13528] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 509.319934][T13528] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 509.363054][T13528] bridge_slave_1: left allmulticast mode [ 509.374872][T13528] bridge_slave_1: left promiscuous mode [ 509.388399][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.416832][T13528] bridge_slave_0: left promiscuous mode [ 509.422750][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.782856][T13539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.977503][T13543] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 511.273189][T13581] raw_sendmsg: syz.2.2758 forgot to set AF_INET. Fix it! [ 511.308877][T13585] __nla_validate_parse: 21 callbacks suppressed [ 511.308918][T13585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2759'. [ 511.340108][T13585] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2759'. [ 511.448913][T13589] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2761'. [ 511.481856][T13589] net_ratelimit: 2 callbacks suppressed [ 511.481877][T13589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 511.529086][T13577] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2757'. [ 511.641352][T13591] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2762'. [ 511.668732][T13591] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 511.704867][T13593] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2763'. [ 511.715743][T13593] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 511.744184][T13596] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2762'. [ 511.822401][T13593] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2763'. [ 512.265557][T13615] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2772'. [ 512.301964][T13615] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 512.987956][T13626] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2776'. [ 513.027015][T13626] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 513.094633][T13629] validate_nla: 15 callbacks suppressed [ 513.094657][T13629] netlink: 'syz.2.2776': attribute type 29 has an invalid length. [ 513.190783][T13629] netlink: 'syz.2.2776': attribute type 29 has an invalid length. [ 513.230824][T13628] netlink: 'syz.2.2776': attribute type 29 has an invalid length. [ 513.458773][T13640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.703109][T13647] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 514.152910][T13659] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 514.243953][T13663] netlink: 'syz.4.2790': attribute type 29 has an invalid length. [ 514.251969][T13663] netlink: 'syz.4.2790': attribute type 29 has an invalid length. [ 514.274616][T13659] netlink: 'syz.4.2790': attribute type 29 has an invalid length. [ 514.433637][T13673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.612970][T13677] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.908782][T13702] netlink: 'syz.4.2803': attribute type 29 has an invalid length. [ 515.917157][T13702] netlink: 'syz.4.2803': attribute type 29 has an invalid length. [ 515.928490][T13695] netlink: 'syz.4.2803': attribute type 29 has an invalid length. [ 519.062893][T13711] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 519.089301][T13711] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 519.254371][T13711] bridge_slave_1: left allmulticast mode [ 519.260386][T13711] bridge_slave_1: left promiscuous mode [ 519.272861][T13711] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.278080][T13718] __nla_validate_parse: 12 callbacks suppressed [ 519.278132][T13718] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.2813'. [ 519.304227][T13718] net_ratelimit: 2 callbacks suppressed [ 519.304247][T13718] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 519.320046][T13711] bridge_slave_0: left promiscuous mode [ 519.335045][T13711] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.480249][T13718] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2813'. [ 520.335069][T13731] netlink: 'syz.2.2817': attribute type 29 has an invalid length. [ 520.343121][T13731] netlink: 'syz.2.2817': attribute type 29 has an invalid length. [ 520.381229][T13729] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2817'. [ 520.440120][T13729] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 520.543778][T13730] netlink: 'syz.2.2817': attribute type 29 has an invalid length. [ 520.645207][T13729] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2817'. [ 520.713895][T13737] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2820'. [ 520.734844][T13737] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 520.826242][T13737] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2820'. [ 520.952496][T13741] netlink: set zone limit has 8 unknown bytes [ 521.884026][ T5086] Bluetooth: hci4: command 0x0406 tx timeout [ 524.325222][T13762] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2831'. [ 524.362061][T13762] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 524.435133][T13762] netlink: 'syz.0.2831': attribute type 29 has an invalid length. [ 524.451331][T13762] netlink: 'syz.0.2831': attribute type 29 has an invalid length. [ 524.488794][T13765] netlink: 'syz.0.2831': attribute type 29 has an invalid length. [ 524.524369][T13762] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2831'. [ 524.605737][T13770] netlink: set zone limit has 8 unknown bytes [ 525.983946][T13796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2844'. [ 525.998499][T13796] netlink: 'syz.4.2844': attribute type 1 has an invalid length. [ 526.031356][T13796] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2844'. [ 526.208636][T13802] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2846'. [ 526.231650][T13802] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 526.284387][T13802] netlink: 'syz.1.2846': attribute type 29 has an invalid length. [ 526.305481][T13802] netlink: 'syz.1.2846': attribute type 29 has an invalid length. [ 526.317655][T13803] netlink: 'syz.1.2846': attribute type 29 has an invalid length. [ 526.359549][T13802] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2846'. [ 526.547690][T13810] netlink: set zone limit has 8 unknown bytes [ 526.977885][T13824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2857'. [ 527.025499][T13824] netlink: 'syz.2.2857': attribute type 1 has an invalid length. [ 527.095446][T13824] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2857'. [ 527.912400][T13833] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2861'. [ 527.936838][T13833] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 527.968430][T13836] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2862'. [ 528.014451][T13836] netlink: 'syz.4.2862': attribute type 1 has an invalid length. [ 528.030164][T13839] netlink: 'syz.2.2861': attribute type 29 has an invalid length. [ 528.151981][T13839] netlink: 'syz.2.2861': attribute type 29 has an invalid length. [ 528.177443][T13837] netlink: 'syz.2.2861': attribute type 29 has an invalid length. [ 528.681225][T13846] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 529.101329][T13862] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 529.188767][T13866] netlink: 'syz.2.2873': attribute type 29 has an invalid length. [ 530.946222][T13886] __nla_validate_parse: 6 callbacks suppressed [ 530.946264][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2883'. [ 530.983700][T13886] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2883'. [ 531.090070][T13889] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2885'. [ 531.122811][T13889] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 531.145149][T13892] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2886'. [ 531.174697][T13894] validate_nla: 3 callbacks suppressed [ 531.174714][T13894] netlink: 'syz.2.2885': attribute type 29 has an invalid length. [ 531.183641][T13892] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 531.203112][T13894] netlink: 'syz.2.2885': attribute type 29 has an invalid length. [ 531.239034][T13893] netlink: 'syz.2.2885': attribute type 29 has an invalid length. [ 531.272186][T13889] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2885'. [ 531.305847][T13892] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2886'. [ 531.977818][T13903] netlink: 'syz.4.2890': attribute type 49 has an invalid length. [ 532.065135][T13903] netlink: set zone limit has 8 unknown bytes [ 532.204554][T13875] Bluetooth: hci5: command 0x0406 tx timeout [ 532.440837][T13908] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2891'. [ 532.479970][T13908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 535.140572][T13928] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2899'. [ 535.141713][T13924] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2897'. [ 535.161579][T13928] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 535.202063][T13924] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 535.231348][T13924] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 535.245366][T13934] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2899'. [ 535.264485][T13924] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 535.307937][T13929] netlink: 'syz.1.2897': attribute type 29 has an invalid length. [ 536.811909][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 538.927628][T13947] __nla_validate_parse: 1 callbacks suppressed [ 538.927652][T13947] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2906'. [ 538.967047][T13947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.001199][T13948] netlink: 'syz.0.2914': attribute type 49 has an invalid length. [ 539.042570][T13948] netlink: set zone limit has 8 unknown bytes [ 539.315201][T13956] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2910'. [ 539.372268][T13960] netlink: 'syz.0.2910': attribute type 29 has an invalid length. [ 539.383887][T13956] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 539.424586][T13960] netlink: 'syz.0.2910': attribute type 29 has an invalid length. [ 539.477130][T13959] netlink: 'syz.0.2910': attribute type 29 has an invalid length. [ 539.535539][T13956] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2910'. [ 539.617445][T13968] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2915'. [ 539.629879][T13968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 543.077305][T13987] netlink: 'syz.4.2922': attribute type 49 has an invalid length. [ 543.106070][T13987] netlink: set zone limit has 8 unknown bytes [ 543.121894][T13991] netlink: 'syz.2.2923': attribute type 3 has an invalid length. [ 543.249790][T13991] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2923'. [ 543.850959][T13995] netlink: 'syz.0.2926': attribute type 49 has an invalid length. [ 543.946040][T13995] netlink: set zone limit has 8 unknown bytes [ 543.967120][T13997] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2925'. [ 544.032863][T13997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.208120][T14002] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2928'. [ 544.220568][T14002] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 544.310462][T14005] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2928'. [ 544.336554][T14004] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2929'. [ 544.351969][T14004] netlink: 'syz.2.2929': attribute type 1 has an invalid length. [ 544.363758][T14004] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2929'. [ 544.444319][T14008] netlink: 'syz.4.2930': attribute type 10 has an invalid length. [ 544.471045][T14008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.490866][T14008] team0: Port device bond0 added [ 544.727430][T14012] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2932'. [ 544.738089][T14012] netlink: 'syz.2.2932': attribute type 1 has an invalid length. [ 544.746585][T14012] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2932'. [ 544.927187][T14014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2941'. [ 544.943028][T14014] netlink: 'syz.0.2941': attribute type 1 has an invalid length. [ 544.954156][T14014] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2941'. [ 544.967045][T14018] netlink: 'syz.2.2933': attribute type 49 has an invalid length. [ 544.981146][T14016] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2934'. [ 544.998689][T14018] netlink: set zone limit has 8 unknown bytes [ 545.014947][T14016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 545.156893][T14021] netlink: 'syz.1.2935': attribute type 49 has an invalid length. [ 545.187382][T14021] netlink: set zone limit has 8 unknown bytes [ 545.306715][T14024] netlink: 'syz.0.2937': attribute type 3 has an invalid length. [ 545.655408][T14029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.301777][T14033] syzkaller0: entered promiscuous mode [ 546.325058][T14033] syzkaller0: entered allmulticast mode [ 546.343692][T14037] syzkaller0: left promiscuous mode [ 546.349025][T14037] syzkaller0: left allmulticast mode [ 546.602398][T14048] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 547.567253][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 548.489515][T14046] netlink: 'syz.1.2945': attribute type 10 has an invalid length. [ 548.508432][T14046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.517431][T14046] team0: Port device bond0 added [ 548.708401][T14056] netlink: 'syz.4.2947': attribute type 49 has an invalid length. [ 548.747571][T14056] netlink: set zone limit has 8 unknown bytes [ 548.797138][T14055] netlink: 'syz.0.2946': attribute type 1 has an invalid length. [ 549.242257][T14063] __nla_validate_parse: 8 callbacks suppressed [ 549.242281][T14063] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2951'. [ 549.315323][T14065] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2950'. [ 549.354669][T14065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.032098][T14075] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2955'. [ 550.066376][T14075] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 550.171411][T14079] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2955'. [ 550.237088][T14082] validate_nla: 2 callbacks suppressed [ 550.237110][T14082] netlink: 'syz.1.2965': attribute type 3 has an invalid length. [ 550.251155][T14082] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2965'. [ 550.262958][T14083] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2956'. [ 550.301680][T14083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.140914][T14087] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2967'. [ 551.180811][T14087] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.205291][T14090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2958'. [ 551.218517][T14090] netlink: 'syz.2.2958': attribute type 1 has an invalid length. [ 551.324571][T14090] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2958'. [ 551.394225][T14097] netlink: set zone limit has 8 unknown bytes [ 551.443840][T14095] netlink: 'syz.1.2959': attribute type 49 has an invalid length. [ 551.538586][T14099] netlink: 'syz.2.2960': attribute type 10 has an invalid length. [ 551.580024][T14099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.590616][T14099] team0: Port device bond0 added [ 551.800078][T14104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2961'. [ 551.811170][T14104] netlink: 'syz.4.2961': attribute type 1 has an invalid length. [ 552.540428][T14118] netlink: 'syz.4.2970': attribute type 3 has an invalid length. [ 552.739030][T14120] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 553.245589][T14126] netlink: 'syz.2.2974': attribute type 49 has an invalid length. [ 553.320966][T14126] netlink: set zone limit has 8 unknown bytes [ 553.464443][T14130] FAULT_INJECTION: forcing a failure. [ 553.464443][T14130] name failslab, interval 1, probability 0, space 0, times 0 [ 553.487322][T14128] syzkaller0: entered promiscuous mode [ 553.509931][T14128] syzkaller0: entered allmulticast mode [ 553.519039][T14130] CPU: 1 PID: 14130 Comm: syz.0.2975 Not tainted syzkaller #0 [ 553.526607][T14130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 553.536726][T14130] Call Trace: [ 553.540058][T14130] [ 553.543054][T14130] dump_stack_lvl+0x18c/0x250 [ 553.547814][T14130] ? show_regs_print_info+0x20/0x20 [ 553.553076][T14130] ? load_image+0x420/0x420 [ 553.557656][T14130] ? __might_sleep+0xe0/0xe0 [ 553.562309][T14130] ? __lock_acquire+0x7eb0/0x7eb0 [ 553.567413][T14130] should_fail_ex+0x394/0x4c0 [ 553.572165][T14130] should_failslab+0x9/0x20 [ 553.576766][T14130] slab_pre_alloc_hook+0x59/0x300 [ 553.581859][T14130] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 553.587643][T14130] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 553.593417][T14130] __kmem_cache_alloc_node+0x53/0x250 [ 553.598866][T14130] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 553.604645][T14130] __kmalloc+0xa7/0x240 [ 553.608871][T14130] tomoyo_realpath_from_path+0xe6/0x5c0 [ 553.614474][T14130] ? tomoyo_domain+0xd6/0x120 [ 553.619215][T14130] tomoyo_path_number_perm+0x248/0x5e0 [ 553.624746][T14130] ? tomoyo_path_number_perm+0x217/0x5e0 [ 553.630441][T14130] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 553.635965][T14130] ? ksys_write+0x1d2/0x260 [ 553.640567][T14130] ? __fget_files+0x28/0x460 [ 553.645235][T14130] security_file_ioctl+0x70/0xa0 [ 553.650243][T14130] __se_sys_ioctl+0x48/0x170 [ 553.654896][T14130] do_syscall_64+0x55/0xb0 [ 553.659384][T14130] ? clear_bhb_loop+0x40/0x90 [ 553.664229][T14130] ? clear_bhb_loop+0x40/0x90 [ 553.668964][T14130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.674959][T14130] RIP: 0033:0x7ff36959e159 [ 553.679444][T14130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.699107][T14130] RSP: 002b:00007ff36a46e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.707605][T14130] RAX: ffffffffffffffda RBX: 00007ff369826180 RCX: 00007ff36959e159 [ 553.715660][T14130] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 553.723687][T14130] RBP: 00007ff36a46e090 R08: 0000000000000000 R09: 0000000000000000 [ 553.731714][T14130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.739742][T14130] R13: 00007ff369826218 R14: 00007ff369826180 R15: 00007ffe2c237d08 [ 553.747807][T14130] [ 553.776579][T14130] ERROR: Out of memory at tomoyo_realpath_from_path. [ 553.783855][T14130] syzkaller0: left promiscuous mode [ 553.791133][T14130] syzkaller0: left allmulticast mode [ 555.863179][T14143] netlink: 'syz.0.2979': attribute type 10 has an invalid length. [ 555.925512][T14143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.941247][T14143] team0: Port device bond0 added [ 556.296185][T14150] syzkaller0: entered promiscuous mode [ 556.301773][T14150] syzkaller0: entered allmulticast mode [ 556.315175][T14155] __nla_validate_parse: 5 callbacks suppressed [ 556.315217][T14155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2983'. [ 556.343009][T14155] netlink: 'syz.2.2983': attribute type 1 has an invalid length. [ 556.352211][T14155] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2983'. [ 556.424491][T14154] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2981'. [ 556.442464][T14154] netlink: 'syz.0.2981': attribute type 1 has an invalid length. [ 556.520264][T14154] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2981'. [ 556.804677][T14165] netlink: set zone limit has 8 unknown bytes [ 561.869416][T14162] netlink: 'syz.1.2986': attribute type 49 has an invalid length. [ 562.096845][T14174] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2990'. [ 562.109277][T14174] netlink: 'syz.1.2990': attribute type 1 has an invalid length. [ 562.118072][T14174] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2990'. [ 562.168178][T14175] netlink: 'syz.0.2998': attribute type 49 has an invalid length. [ 562.215298][T14180] netlink: set zone limit has 8 unknown bytes [ 562.403214][T14184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2995'. [ 562.434089][T14184] netlink: 'syz.2.2995': attribute type 1 has an invalid length. [ 562.442749][T14184] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2995'. [ 562.506339][T14190] netlink: 'syz.4.2997': attribute type 4 has an invalid length. [ 562.519207][T14190] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2997'. [ 562.536541][T14190] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 562.845844][T13875] Bluetooth: hci1: command 0x0406 tx timeout [ 562.953979][T14206] netlink: set zone limit has 8 unknown bytes [ 563.001920][T14204] netlink: 'syz.0.3003': attribute type 49 has an invalid length. [ 563.244893][T14212] netlink: 'syz.0.3014': attribute type 49 has an invalid length. [ 563.275391][T14212] netlink: set zone limit has 8 unknown bytes [ 563.310995][T14215] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3007'. [ 563.323328][T14215] netlink: 'syz.1.3007': attribute type 1 has an invalid length. [ 563.353708][T14215] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3007'. [ 563.411122][T14216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3006'. [ 563.434992][T14216] netlink: 'syz.2.3006': attribute type 1 has an invalid length. [ 563.443121][T14216] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3006'. [ 563.670445][T14225] netlink: 'syz.0.3011': attribute type 16 has an invalid length. [ 563.681751][T14225] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3011'. [ 563.736228][T14229] FAULT_INJECTION: forcing a failure. [ 563.736228][T14229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.765614][T14229] CPU: 0 PID: 14229 Comm: syz.2.3013 Not tainted syzkaller #0 [ 563.773199][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 563.783318][T14229] Call Trace: [ 563.786656][T14229] [ 563.789632][T14229] dump_stack_lvl+0x18c/0x250 [ 563.794405][T14229] ? show_regs_print_info+0x20/0x20 [ 563.799672][T14229] ? load_image+0x420/0x420 [ 563.804233][T14229] ? __might_fault+0xaa/0x120 [ 563.808975][T14229] ? __lock_acquire+0x7eb0/0x7eb0 [ 563.814067][T14229] should_fail_ex+0x394/0x4c0 [ 563.818813][T14229] _copy_from_user+0x2f/0xe0 [ 563.823473][T14229] ___sys_sendmsg+0x1c7/0x360 [ 563.828222][T14229] ? __sys_sendmsg+0x2b0/0x2b0 [ 563.833074][T14229] ? trace_call_bpf+0xc3/0x6c0 [ 563.837930][T14229] __se_sys_sendmsg+0x1d0/0x2c0 [ 563.842841][T14229] ? perf_trace_preemptirq_template+0x269/0x330 [ 563.849149][T14229] ? __x64_sys_sendmsg+0x80/0x80 [ 563.854184][T14229] ? lockdep_hardirqs_on+0x98/0x150 [ 563.859462][T14229] do_syscall_64+0x55/0xb0 [ 563.863942][T14229] ? clear_bhb_loop+0x40/0x90 [ 563.868674][T14229] ? clear_bhb_loop+0x40/0x90 [ 563.873403][T14229] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.879358][T14229] RIP: 0033:0x7f9aa4b9e159 [ 563.883825][T14229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.903491][T14229] RSP: 002b:00007f9aa5a8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 563.911959][T14229] RAX: ffffffffffffffda RBX: 00007f9aa4e25fa0 RCX: 00007f9aa4b9e159 [ 563.919981][T14229] RDX: 0000000000008000 RSI: 00002000000017c0 RDI: 0000000000000003 [ 563.927978][T14229] RBP: 00007f9aa5a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 563.935981][T14229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.944009][T14229] R13: 00007f9aa4e26038 R14: 00007f9aa4e25fa0 R15: 00007ffe04f6e478 [ 563.952036][T14229] [ 564.162822][T14238] netlink: set zone limit has 8 unknown bytes [ 565.308988][T14265] netlink: set zone limit has 8 unknown bytes [ 565.900936][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.908535][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.027969][T14285] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 566.329745][T14294] netlink: set zone limit has 8 unknown bytes [ 567.586158][T14319] FAULT_INJECTION: forcing a failure. [ 567.586158][T14319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.632565][T14319] CPU: 0 PID: 14319 Comm: syz.4.3050 Not tainted syzkaller #0 [ 567.640210][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 567.650347][T14319] Call Trace: [ 567.653690][T14319] [ 567.656669][T14319] dump_stack_lvl+0x18c/0x250 [ 567.661424][T14319] ? show_regs_print_info+0x20/0x20 [ 567.666706][T14319] ? load_image+0x420/0x420 [ 567.671288][T14319] ? __might_fault+0xaa/0x120 [ 567.676021][T14319] ? __lock_acquire+0x7eb0/0x7eb0 [ 567.681117][T14319] should_fail_ex+0x394/0x4c0 [ 567.685865][T14319] _copy_from_user+0x2f/0xe0 [ 567.690527][T14319] __sys_bpf+0x23e/0x890 [ 567.694819][T14319] ? bpf_link_show_fdinfo+0x560/0x560 [ 567.700250][T14319] ? lock_chain_count+0x20/0x20 [ 567.705166][T14319] __x64_sys_bpf+0x7c/0x90 [ 567.709637][T14319] do_syscall_64+0x55/0xb0 [ 567.714117][T14319] ? clear_bhb_loop+0x40/0x90 [ 567.718870][T14319] ? clear_bhb_loop+0x40/0x90 [ 567.723601][T14319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.729558][T14319] RIP: 0033:0x7fa1b039e159 [ 567.734019][T14319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.753685][T14319] RSP: 002b:00007fa1b12e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 567.762156][T14319] RAX: ffffffffffffffda RBX: 00007fa1b0625fa0 RCX: 00007fa1b039e159 [ 567.770205][T14319] RDX: 0000000000000024 RSI: 0000200000000200 RDI: 000000000000000a [ 567.778214][T14319] RBP: 00007fa1b12e5090 R08: 0000000000000000 R09: 0000000000000000 [ 567.786223][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.794255][T14319] R13: 00007fa1b0626038 R14: 00007fa1b0625fa0 R15: 00007fff5a435c88 [ 567.802310][T14319] [ 567.989456][T14323] validate_nla: 12 callbacks suppressed [ 567.989518][T14323] netlink: 'syz.1.3051': attribute type 49 has an invalid length. [ 568.044820][T14327] netlink: set zone limit has 8 unknown bytes [ 568.152983][T14328] __nla_validate_parse: 11 callbacks suppressed [ 568.153024][T14328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3054'. [ 568.202830][T14328] netlink: 'syz.2.3054': attribute type 1 has an invalid length. [ 568.233664][T14328] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3054'. [ 568.414310][T14337] netlink: 'syz.4.3058': attribute type 3 has an invalid length. [ 568.422181][T14337] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3058'. [ 568.543083][T14335] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3057'. [ 568.568050][T14335] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 568.652547][T14335] netlink: 'syz.1.3057': attribute type 29 has an invalid length. [ 568.690547][T14335] netlink: 'syz.1.3057': attribute type 29 has an invalid length. [ 568.727819][T14344] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3057'. [ 568.739189][T14341] netlink: 'syz.1.3057': attribute type 29 has an invalid length. [ 568.883203][T12723] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 569.351489][T14352] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3062'. [ 569.694097][T14361] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3066'. [ 569.725537][T14361] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 569.798823][T14361] netlink: 'syz.2.3066': attribute type 29 has an invalid length. [ 569.808036][T14361] netlink: 'syz.2.3066': attribute type 29 has an invalid length. [ 569.818692][T14364] netlink: 'syz.2.3066': attribute type 29 has an invalid length. [ 569.836972][T14361] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3066'. [ 569.954992][T14368] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3069'. [ 569.970463][T14368] netlink: 'syz.4.3069': attribute type 1 has an invalid length. [ 569.980607][T14368] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3069'. [ 587.564429][T13875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 587.579348][T13875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 587.587641][T13875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 587.604656][T13875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 587.612490][T13875] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 587.620099][T13875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.744310][T13875] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 587.763857][T13875] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 587.771984][T13875] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 587.785613][T13875] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 587.793663][T13875] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 587.801124][T13875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 587.950277][ T5783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 587.961874][ T5783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 587.974502][ T5783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 587.985678][ T5783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 588.003487][ T5783] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 588.013980][ T5783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 588.154190][T13875] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 588.164316][T13875] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 588.172201][T13875] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 588.181384][T13875] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 588.189388][T13875] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 588.197247][T13875] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 589.723584][T13875] Bluetooth: hci2: command tx timeout [ 589.883902][T13875] Bluetooth: hci6: command tx timeout [ 590.129076][T13875] Bluetooth: hci7: command tx timeout [ 590.283627][T13875] Bluetooth: hci8: command tx timeout [ 591.803502][T13875] Bluetooth: hci2: command tx timeout [ 593.726940][ T5783] Bluetooth: hci7: command tx timeout [ 593.732473][ T5783] Bluetooth: hci8: command tx timeout [ 593.739847][T13875] Bluetooth: hci6: command tx timeout [ 593.883686][T14408] Bluetooth: hci2: command tx timeout [ 595.804250][ T5086] Bluetooth: hci8: command tx timeout [ 595.809744][ T5086] Bluetooth: hci7: command tx timeout [ 595.817183][T14408] Bluetooth: hci6: command tx timeout [ 595.963743][T14408] Bluetooth: hci2: command tx timeout [ 597.884371][T13875] Bluetooth: hci8: command tx timeout [ 597.889922][ T5086] Bluetooth: hci7: command tx timeout [ 597.895843][T14408] Bluetooth: hci6: command tx timeout [ 599.887687][ T34] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 648.216338][T14408] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 648.227165][T14408] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 648.236127][T14408] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 648.245912][T14408] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 648.254043][T14408] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 648.261568][T14408] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 648.364179][T13875] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 648.375629][T13875] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 648.384541][T13875] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 648.393012][T13875] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 648.404085][T13875] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 648.412124][T13875] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 648.524472][T13875] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 648.535843][T13875] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 648.547472][T13875] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 648.562682][T13875] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 648.572654][T13875] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 648.580935][T13875] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 648.734282][T14408] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 648.753492][T14408] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 648.764854][T14408] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 648.773453][T14408] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 648.781879][T14408] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 648.791295][T14408] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 650.363904][T14408] Bluetooth: hci9: command tx timeout [ 650.523983][T14408] Bluetooth: hci10: command tx timeout [ 650.683766][T14408] Bluetooth: hci11: command tx timeout [ 650.846489][T14408] Bluetooth: hci12: command tx timeout [ 652.443655][T14408] Bluetooth: hci9: command tx timeout [ 652.603649][T14408] Bluetooth: hci10: command tx timeout [ 652.763662][T14408] Bluetooth: hci11: command tx timeout [ 652.927760][T14408] Bluetooth: hci12: command tx timeout [ 654.523760][T14408] Bluetooth: hci9: command tx timeout [ 654.685349][T14408] Bluetooth: hci10: command tx timeout [ 654.843756][T14408] Bluetooth: hci11: command tx timeout [ 655.004743][T14408] Bluetooth: hci12: command tx timeout [ 656.603632][T14408] Bluetooth: hci9: command tx timeout [ 656.769326][T14408] Bluetooth: hci10: command tx timeout [ 656.924113][T14408] Bluetooth: hci11: command tx timeout [ 657.087365][T14408] Bluetooth: hci12: command tx timeout [ 676.043378][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 676.050215][ C0] rcu: 0-....: (10467 ticks this GP) idle=4a04/1/0x4000000000000000 softirq=50223/50224 fqs=5153 [ 676.062335][ C0] rcu: hardirqs softirqs csw/system [ 676.068768][ C0] rcu: number: 1213155 0 0 [ 676.075209][ C0] rcu: cputime: 18285 34203 66 ==> 52490(ms) [ 676.083116][ C0] rcu: (t=10500 jiffies g=75121 q=1474 ncpus=2) [ 676.089489][ C0] CPU: 0 PID: 14376 Comm: syz.4.3073 Not tainted syzkaller #0 [ 676.096999][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 676.107080][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x0/0x90 [ 676.113354][ C0] Code: c0 4c 89 01 48 c7 44 11 08 02 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 0f 1e fa 48 8b 04 24 65 48 8b 15 c0 25 7c 7e 65 8b 0d c1 25 7c [ 676.132968][ C0] RSP: 0018:ffffc90000006278 EFLAGS: 00000246 [ 676.139043][ C0] RAX: ffffffff8948b925 RBX: ffff8880600a3b00 RCX: 0000000000000100 [ 676.147472][ C0] RDX: ffff88802afb5a00 RSI: 0000000000000003 RDI: 0000000000000000 [ 676.155466][ C0] RBP: 0000000000000003 R08: dffffc0000000000 R09: 1ffffffff223e0a0 [ 676.163459][ C0] R10: dffffc0000000000 R11: fffffbfff223e0a1 R12: 0000000000000000 [ 676.171440][ C0] R13: 00000000000000f6 R14: dffffc0000000000 R15: 0000000000000000 [ 676.179430][ C0] FS: 00007fa1b12e56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 676.188381][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.194983][ C0] CR2: 0000200000399000 CR3: 000000007d0ff000 CR4: 00000000003506f0 [ 676.202960][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 676.210946][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 676.218916][ C0] Call Trace: [ 676.222205][ C0] [ 676.225087][ C0] __ipv6_addr_label+0xaf/0x3b0 [ 676.229978][ C0] ? ipv6_addr_label+0x31/0x1e0 [ 676.234848][ C0] ipv6_addr_label+0xdf/0x1e0 [ 676.239552][ C0] ipv6_get_saddr_eval+0x53a/0xee0 [ 676.244694][ C0] __ipv6_dev_get_saddr+0x1af/0x430 [ 676.249909][ C0] ipv6_dev_get_saddr+0x2bd/0xbb0 [ 676.254950][ C0] ? ipv6_dev_get_saddr+0x15a/0xbb0 [ 676.260160][ C0] ? in6_dev_put+0x80/0x80 [ 676.264592][ C0] ? ip6_dst_lookup_tail+0x203/0x1660 [ 676.269964][ C0] ? ip6_dst_lookup_tail+0x203/0x1660 [ 676.275345][ C0] ip6_dst_lookup_tail+0x107e/0x1660 [ 676.280682][ C0] ? ip6_dst_lookup_tail+0x203/0x1660 [ 676.286055][ C0] ? ip6_dst_lookup+0x60/0x60 [ 676.290761][ C0] icmpv6_route_lookup+0xfe/0x600 [ 676.295797][ C0] ? icmpv6_xrlim_allow+0x640/0x640 [ 676.300997][ C0] ? icmpv6_xrlim_allow+0x541/0x640 [ 676.306225][ C0] ? dev_get_by_index+0x22/0x2d0 [ 676.311188][ C0] ? dev_get_by_index+0x22/0x2d0 [ 676.316136][ C0] icmp6_send+0x11b4/0x1ba0 [ 676.320644][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 676.326037][ C0] ? icmp6_send+0x236/0x1ba0 [ 676.330660][ C0] ? icmpv6_push_pending_frames+0x3f0/0x3f0 [ 676.336575][ C0] ? __asan_memset+0x22/0x40 [ 676.341190][ C0] ? __xfrm_sk_clone_policy+0x850/0x850 [ 676.346755][ C0] ip6_link_failure+0x3b/0x4c0 [ 676.351556][ C0] ? ip6_negative_advice+0x310/0x310 [ 676.356868][ C0] vti6_tnl_xmit+0x135f/0x19c0 [ 676.361660][ C0] ? validate_xmit_xfrm+0xbb/0x1340 [ 676.366883][ C0] ? vti6_dev_uninit+0x120/0x120 [ 676.371869][ C0] dev_hard_start_xmit+0x269/0x790 [ 676.377016][ C0] __dev_queue_xmit+0x1be8/0x37e0 [ 676.382072][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 676.387212][ C0] ? read_seqbegin+0x126/0x250 [ 676.391991][ C0] ? read_seqbegin+0x1b6/0x250 [ 676.396764][ C0] ? neigh_event_send+0x110/0x110 [ 676.401799][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 676.407119][ C0] ? ___neigh_create+0x1dab/0x23d0 [ 676.412258][ C0] ? neigh_connected_output+0x3b7/0x460 [ 676.417834][ C0] ip6_finish_output2+0xf7a/0x1690 [ 676.422966][ C0] ? ip6_finish_output2+0x71a/0x1690 [ 676.428254][ C0] ? nf_hook+0x390/0x390 [ 676.432505][ C0] ? ip6_mtu+0x321/0x400 [ 676.436772][ C0] ? ip6_finish_output+0x567/0x7f0 [ 676.441893][ C0] udp_tunnel6_xmit_skb+0x516/0x930 [ 676.447114][ C0] geneve_xmit+0x2428/0x3530 [ 676.451731][ C0] ? geneve_xmit+0x157/0x3530 [ 676.456425][ C0] ? skb_crc32c_csum_help+0x510/0x510 [ 676.461813][ C0] ? geneve_stop+0x1b0/0x1b0 [ 676.466410][ C0] ? validate_xmit_xfrm+0xbb/0x1340 [ 676.471646][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.477829][ C0] dev_hard_start_xmit+0x269/0x790 [ 676.482959][ C0] __dev_queue_xmit+0x1be8/0x37e0 [ 676.488002][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 676.493121][ C0] ? mark_lock+0x94/0x320 [ 676.497468][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 676.503466][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 676.508757][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.514928][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 676.520137][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.526320][ C0] ? neigh_resolve_output+0x5f5/0x710 [ 676.531720][ C0] ip6_finish_output2+0xf7a/0x1690 [ 676.536868][ C0] ? ip6_finish_output2+0x71a/0x1690 [ 676.542190][ C0] ? nf_hook+0x390/0x390 [ 676.546446][ C0] ? ip6_mtu+0x321/0x400 [ 676.550720][ C0] ? ip6_finish_output+0x567/0x7f0 [ 676.555851][ C0] ndisc_send_skb+0xbb9/0x1480 [ 676.560649][ C0] ? ndisc_send_skb+0x201/0x1480 [ 676.565624][ C0] ? ndisc_mc_map+0x680/0x680 [ 676.570318][ C0] ? skb_dst+0xd0/0xd0 [ 676.574476][ C0] addrconf_rs_timer+0x36b/0x640 [ 676.579491][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 676.585607][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 676.591626][ C0] call_timer_fn+0x189/0x540 [ 676.596244][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 676.602340][ C0] ? call_timer_fn+0xd2/0x540 [ 676.607046][ C0] ? __run_timers+0x810/0x810 [ 676.611754][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 676.617851][ C0] __run_timers+0x570/0x810 [ 676.622376][ C0] ? detach_timer+0x2b0/0x2b0 [ 676.627079][ C0] run_timer_softirq+0x67/0xf0 [ 676.631861][ C0] handle_softirqs+0x27d/0x820 [ 676.636646][ C0] ? read_tsc+0x9/0x20 [ 676.640729][ C0] ? ktime_get+0x24b/0x280 [ 676.645169][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 676.649947][ C0] ? do_softirq+0x1a0/0x1a0 [ 676.654475][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 676.659711][ C0] __irq_exit_rcu+0xd3/0x190 [ 676.664306][ C0] ? irq_exit_rcu+0x20/0x20 [ 676.668818][ C0] irq_exit_rcu+0x9/0x20 [ 676.673102][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 676.678793][ C0] [ 676.681744][ C0] [ 676.684695][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.690704][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 676.696544][ C0] Code: 34 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 e3 88 3e 09 e8 3e 28 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 676.716164][ C0] RSP: 0018:ffffc9000c3cf300 EFLAGS: 00000286 [ 676.722271][ C0] RAX: 5c38512eea699e00 RBX: 0000000000000000 RCX: 5c38512eea699e00 [ 676.730244][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d4020 [ 676.738235][ C0] RBP: ffffc9000c3cf350 R08: ffffffff911f0537 R09: 1ffffffff223e0a6 [ 676.746206][ C0] R10: dffffc0000000000 R11: fffffbfff223e0a7 R12: ffff88802afb5a00 [ 676.754196][ C0] R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 [ 676.762242][ C0] __schedule+0x15b6/0x4660 [ 676.766775][ C0] ? lock_chain_count+0x20/0x20 [ 676.771649][ C0] ? asan.module_dtor+0x20/0x20 [ 676.776507][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 676.781717][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 676.787906][ C0] schedule+0xbd/0x170 [ 676.791990][ C0] schedule_preempt_disabled+0x13/0x20 [ 676.797479][ C0] rwsem_down_write_slowpath+0xc3f/0x1020 [ 676.803217][ C0] ? rwsem_down_write_slowpath+0x81b/0x1020 [ 676.809147][ C0] ? rwsem_down_read_slowpath+0x880/0x880 [ 676.814887][ C0] ? read_lock_is_recursive+0x20/0x20 [ 676.820278][ C0] ? copy_mm+0x2b6/0x1e30 [ 676.824610][ C0] down_write_killable+0x1e8/0x230 [ 676.829735][ C0] ? down_write+0x200/0x200 [ 676.834272][ C0] ? __asan_memset+0x22/0x40 [ 676.838896][ C0] ? mm_init+0xa8a/0xbf0 [ 676.843160][ C0] copy_mm+0x2b6/0x1e30 [ 676.847323][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 676.853326][ C0] ? copy_signal+0x640/0x640 [ 676.857941][ C0] ? __init_rwsem+0x122/0x160 [ 676.862624][ C0] ? copy_signal+0x51f/0x640 [ 676.867244][ C0] copy_process+0x16c9/0x3da0 [ 676.871939][ C0] ? copy_process+0x98e/0x3da0 [ 676.876715][ C0] ? __pidfd_prepare+0x140/0x140 [ 676.881677][ C0] kernel_clone+0x24b/0x8a0 [ 676.886197][ C0] ? create_io_thread+0x190/0x190 [ 676.891261][ C0] __x64_sys_clone+0x1b7/0x230 [ 676.896030][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 676.901096][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 676.907007][ C0] do_syscall_64+0x55/0xb0 [ 676.911464][ C0] ? clear_bhb_loop+0x40/0x90 [ 676.916143][ C0] ? clear_bhb_loop+0x40/0x90 [ 676.920824][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 676.926725][ C0] RIP: 0033:0x7fa1b039e159 [ 676.931187][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.950811][ C0] RSP: 002b:00007fa1b12e4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 676.959228][ C0] RAX: ffffffffffffffda RBX: 00007fa1b0625fa0 RCX: 00007fa1b039e159 [ 676.967227][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 676.975203][ C0] RBP: 00007fa1b043506b R08: 0000000000000000 R09: 0000000000000000 [ 676.983182][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 676.991170][ C0] R13: 00007fa1b0626038 R14: 00007fa1b0625fa0 R15: 00007fff5a435c88 [ 676.999161][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)