last executing test programs: 8.288090209s ago: executing program 3 (id=3936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90624fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x80108906, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x4}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x621}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000140)=r4) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000080)=""/108) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000180)) 8.074587025s ago: executing program 4 (id=3939): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0xda, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x8005, 0x0, &(0x7f0000000000)='\a\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x4, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000008000000000000000900000073116b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9c}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x18000000000002a0, 0x2e, 0x0, &(0x7f0000000000)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03035ab130ebde34e9", 0x0, 0xffffeffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000040)) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x76, &(0x7f0000000000)=r9, 0x8) ioctl$TUNSETIFINDEX(r9, 0x400454da, &(0x7f00000005c0)=r1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 4.828241153s ago: executing program 3 (id=3941): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0500000012ee485d346e72713db516000000000000100026a9caca7ab65bfb9d375528c1a3fd1ee07905b0c27fccac7adcdf81fb14fb852064b46c1586eabfbb000000000000000236b930a85f752e4c8fe6416591d4348f884b2d813954ce0a3945577c7378e87601bc025720bc8f16a1da0c97dc5078ecc24e794b5e3ec9cc516607d71537e283a3e6841181be71c7522cec974ef2c81327133386793c816d82f89c55222b81b29bac6e52333c4ee0a42612783bad257af3bd42ca1c31d1c1d4bf754252368b7c65656dc91944033913", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000009cc1444fc8ca5dca53138cdb0104000000ff0f0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000900)=r3, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={0x0, 0x0, 0x4000}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x21, 0x0, 0x4000000, 0x6, 0x0, 0x200}, 0x0, 0x7, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) socket$kcm(0x2, 0x5, 0x84) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 4.823784553s ago: executing program 0 (id=3951): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000580)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000007c0)={r0, r1}, 0xc) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x47}, 0x80, 0x0}, 0x814) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r7], 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x36, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffff}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x43367ac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f00000009c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x8, '\x00', r3, 0x1b, r6, 0x8, &(0x7f0000000a00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0xb, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d8}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r5, 0x0, &(0x7f0000000440)=""/236}, 0x20) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x3, '\x00', r3, r8, 0x1, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a104000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff63, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0xffffffffffffffaf, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0x29, 0x5, 0x0) 4.751465535s ago: executing program 2 (id=3943): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (fail_nth: 15) 4.642538947s ago: executing program 4 (id=3944): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xce8, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.048030026s ago: executing program 2 (id=3945): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1, 0x0, 0x0, @void, @value=0x406}, 0x20) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc783, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, 0x0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0xffff}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r0, 0x20, &(0x7f00000005c0)={&(0x7f0000000540)=""/42, 0x2a, 0x0, &(0x7f0000000580)=""/26, 0x1a}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xa, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f00000006c0)='GPL\x00', 0xb0000000, 0x5a, &(0x7f0000000700)=""/90, 0x41000, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xe, 0x1, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000800)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000480)='GPL\x00', 0x6, 0xd6, &(0x7f0000000a00)=""/214, 0x40f00, 0x48, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x3, 0x5, 0xffffd1ed, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000b40)=[r3, r4, r3, r4, r4], &(0x7f0000000b80)=[{0x3, 0x1, 0xd, 0x2}, {0x4, 0x5, 0x5, 0x7}, {0xfc, 0x4, 0x7, 0xc}, {0x0, 0x3, 0x0, 0x1}], 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x10, 0x2b, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe3, 0x0, 0x0, 0x0, 0x6}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xa5}, @jmp={0x5, 0x1, 0x6, 0x8, 0x6, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @jmp={0x5, 0x1, 0x3, 0x1, 0x7, 0xfffffffffffffff0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0x18}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000440)='GPL\x00', 0x1ff, 0x0, &(0x7f0000000480), 0x41100, 0x40, '\x00', 0x0, @fallback=0x2e, r0, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xb, 0x2, 0x5}, 0x10, r5, r6, 0x3, 0x0, &(0x7f0000000900)=[{0x2, 0x4, 0xf, 0x8}, {0x4, 0x2, 0xe, 0x7}, {0x2, 0x4, 0x6, 0x7}], 0x10, 0xa33}, 0x94) 2.88067237s ago: executing program 3 (id=3947): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0x6}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc8, &(0x7f00000001c0)=""/200, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000001140)={&(0x7f0000000880)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)="77efc2f2f6444a09ab8860720737d8bf22fac9da12832ab59d0e3c99417a1a86eac6bf143268e21bc9d363280eccb946711b19b12bfb311f15e89ab61c2ec4cfab37ced5ace9750d4483c766f74e1801d1829a2a020b0f113ba98b2c914c67a1f9b0f6cc354a83ee6de25f98609e341c2d1189e462ba2a3e5a49f6828b9bd3e04a102b30139205e73c54552fcedf9d6ff684ef58d9f86f9eadda748818d8ce2d7f1adfcf88cdbc63d5d8e6a768f495f6112d1c231baae2965b521a1a568e7309911e460b739b66c50f10f22b3da140ef4b563ee3535fc2d673a90d04a9be33eedd442f4abb2005d40bd11ffc", 0xec}, {&(0x7f0000000a00)="781119a271bfd05a95b35f86898b54658fe82ca7494fe7d54400d9d96bd5b27061054707b19ad52538e023f846402f514423cecf4cddff0b3083da8933279f121f4ef0cbfb43cf92b844261a5ece7b74616400b1903c6ce166d4851c972e589a2a8bad9d9e1115c3f561835edc8dd41420869be6046c1b7ed44b8717b5869e2ed8125a614ef64f45e3ed75a45ce2ab4e93aa7f342d9836f63642bfd45ef8be4446b4fb43b36d09810806a049645fb7c8", 0xb0}], 0x2, &(0x7f0000000c40)=[{0x68, 0x116, 0x56, "e028ea957d6a100619b62160d672f274bcff7c77a5ad8c0d6264be08b99fab775dc3f50124782934b437da9578a9fc3d478fcd7614621b40afa6683573d4a20bbd6f084b8b9616aa719c59cabd855c136d69b79ff082"}, {0xb0, 0x119, 0x1, "096906b91812a96450a8ce0776a4064c773ee48b05066b9dad849b170516e8676e41d5c4eac43377348f5b61259421534de2b9f73f09bc30a1144a0090e8328d199dd2121170b5dd0aac7971e7fdf6c644121a4e9f93e35c1e6e7dc1f566136693361a4f75f98897d01be388215830a024189ed26f93b7d96a0eb7519eb2299cf2bfafc3315f29c9550b1fdc76f08dbc8df07e82d1f09ce217"}, {0x100, 0x10c, 0x9, "3f8f183cb9b7eb96eeda58fd83f8d9d9e061b2b594f5869981f836102790e910055b0768b74bbcadb48a443b7e57a7d32031370b2f1bf18c30c5468999ad3d14bccfee5a8adf5c80ddbe8cac70393d8ae81b1364d20d46743f722579f1097e97d3c20b2decd812695e3e45dab5a39b874dc58bad102a60b8c033b345463bc294236e59652d73212da91caed41b564c85040ea6e4384c40617a5e2d3bd2cc5ffc5c68ffda17c65474d18a1b3c971c02c9795b61578a210a8552ddbcaf6627495921ff3a690894ff927608369564abb705e99c53f893c853f66cbb48f842bf72096acdb2624a91ae34d2af"}, {0x40, 0x117, 0x10, "29913c74a44828e7199d1b21e3055fd77849e9a99415c7983e35d144fc34ba8d0272ada360f62b5c0b343a2f5802fa"}, {0x50, 0x10e, 0x3, "694432f43e5eed8d7b8213830280c40ca316d39e418c372192d59524fd520252a32aed78930977420a478dd9e38d9923d208522c1a7d892fa74ab2"}, {0x98, 0x0, 0x1, "4f188f50971a22feeabc3878989cabc5efc0624704f5316a2ff18dd50839a9868a9a15d4dc56a17dbeba928b5e98119b245055d5a50a1e00ba40a83c83feecdf7241902d0b79621eccb5460022bce18b05c5a832f012fbf7e30826a50cd55f286ad7178c2f17978df09d04a6807befadd0ca2d2323b51b01dd9c4524796948738a"}, {0x58, 0x102, 0x4, "3acf69d1d1094bd6b6a99b79396a6b8d3a01673caf043f23ce553a3f4fbdfaa9feb28eabcacc9404d6708b9306d4001b43fbdda4cee7326d0930349aef0677d41e6afe9aa45cbd"}, {0x80, 0x29, 0x1, "438e750770815852c3ef9816489cb6eced9132432a324af50d31e5a08b5ddb67730434ba08c10f0422b09f81c28b2b1f018b5244e906644cfe4ca5663a6814e04cb9cee3d01edc53d435ba77f4c99ecbe9c50998e015797154b9142d2a2ff3cf1646b424fff75e9b4ae57c4479ac4a27"}, {0xc8, 0x102, 0xfffffff7, "a7f88158e28870816d3916f008ebb145af3d2943e9393044b98d984b38bad83346610cf4512c858a969108176d849e13493db069a420d6d2484da1a958d3ae39e1f77816490349c53228936de03bfc7835e9d193d793236777180cd32260cc4275e522a661049c2bfec3605c58ccdc47dcfe16c08e4c65ab563131c31c3d02e3071da3752bddca53097066edbdfc49de96bbc828a90d5eb0580ccf59d09bac982d2c1034f421bed62f77e4bf4d67bbd54697b6b9e79bae34"}], 0x4e0}, 0x4850) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0x9, 0x1, 0x1, 0x9, 0x0, 0x400, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x4, 0x401, 0x80000001, 0x9, 0x2, 0x400, 0xfff, 0x0, 0x7091}, 0xffffffffffffffff, 0x3, r1, 0x4) (async) r8 = perf_event_open$cgroup(&(0x7f0000000300)={0x4, 0x80, 0x9, 0x1, 0x1, 0x9, 0x0, 0x400, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000002c0), 0x1}, 0x4, 0x401, 0x80000001, 0x9, 0x2, 0x400, 0xfff, 0x0, 0x7091}, 0xffffffffffffffff, 0x3, r1, 0x4) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}]}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0x6d, &(0x7f0000000540)=""/109, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x4, 0x2daa4b97, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r5, 0xffffffffffffffff], &(0x7f0000000680)=[{0x5, 0x1, 0x8, 0xe}, {0x2, 0x5, 0x9, 0x6}, {0x4, 0x2, 0xa, 0x1}], 0x10, 0x7f}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000840)='$&@^[\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4040}, 0x0, 0xffffffffffffffff, r1, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4040}, 0x0, 0xffffffffffffffff, r1, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8922, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8922, &(0x7f0000000080)) 2.88033886s ago: executing program 4 (id=3948): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32=0x0, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bf8e00000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x0, 0x0) gettid() 2.87964587s ago: executing program 0 (id=3949): r0 = syz_clone(0x98400, &(0x7f00000000c0)="cedb718c39e0f0d55097b7cab970a5b063dbc906e052a3fc051197e5711bf131b3419c5f9533290bbbd09a9b566428486611bba7e380454e8517fac1c6a53dd279d6f16958b6f214c6536a745e82d9fbbe984e60757d6e0901d67eceb4f57b063a29046647bdee5f40ba136091478137ead9b6a6f60e", 0x76, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="bc131594ceb023c4c2f576385e8f99c5fa5f106ccfce7e8864224057292bab3aa4") r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x9, 0x7, 0xc1, 0x0, 0x7f, 0x24000, 0xcbf566803da8ecf2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xae65, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x10, 0x400, 0x0, 0x9, 0x5, 0xffff, 0x1, 0x0, 0x4, 0x0, 0xff}, r0, 0xe, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x4) (async) r2 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x3a, 0xa, 0x10, 0x0, 0xa4e, 0xa1042, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000280), 0x4}, 0x10006, 0x6, 0x7, 0x8, 0x8, 0x620, 0x3ff, 0x0, 0x1ff, 0x0, 0xfffffffffffffff9}, 0xffffffffffffffff, 0x2, r1, 0x2) perf_event_open(&(0x7f0000000200)={0x7, 0x80, 0x0, 0x3, 0x4, 0x63, 0x0, 0x1, 0x830, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x2, 0x4fa}, 0x102200, 0x9, 0x2, 0x6, 0x9, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, r0, 0x8, r2, 0x8) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x2eb, 0x8000, 0x7, 0x62b28, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0xe}, 0x50) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x8a4, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x5}, 0xc) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f0000000340)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query, @generic={0x5, 0x7, 0x9, 0x8, 0xb627}, @generic={0x2, 0x8, 0x4, 0xfeff, 0xff6}, @generic={0xd, 0x5, 0x1, 0x0, 0xfb0}], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x4f, &(0x7f00000003c0)=""/79, 0x40f00, 0x3, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x6, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000006c0)=[r4, r5, r1, r6], &(0x7f0000000700)=[{0x5, 0x2, 0x9, 0x6}, {0x3, 0x1, 0x5, 0xb}, {0x2, 0x3, 0x10, 0x6}, {0x2, 0x3, 0x2, 0x1}, {0x5, 0x4, 0x5, 0x3}, {0x4, 0x3, 0x7, 0x5}, {0x0, 0x1, 0x8, 0xb}, {0x0, 0x5, 0x6}], 0x10, 0x1ff}, 0x94) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x709000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000880)={'vlan1\x00', 0x1}) (async, rerun: 32) socketpair(0x7, 0x6, 0x8001, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmsg(r10, &(0x7f0000001b40)={&(0x7f0000000900)=@sco={0x1f, @none}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/170, 0xaa}, {&(0x7f0000001a40)=""/91, 0x5b}, {&(0x7f0000001ac0)=""/53, 0x35}], 0x4}, 0x40000102) (async) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f0000001b80)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c40)={{r6, 0xffffffffffffffff}, &(0x7f0000001bc0), &(0x7f0000001c00)=r7}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001e80), 0x4) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_ext={0x1c, 0x11, &(0x7f0000001c80)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @ldst={0x1, 0x1, 0x2, 0x4, 0x9, 0xfffffffffffffff8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0xa, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}], &(0x7f0000001d40)='syzkaller\x00', 0x2, 0xf1, &(0x7f0000001d80)=""/241, 0x40f00, 0x18, '\x00', r3, 0x0, r12, 0x8, &(0x7f0000001ec0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001f00)={0x3, 0xd, 0x3, 0x8}, 0x10, 0x38fc, r7, 0x1, 0x0, &(0x7f0000001f40)=[{0x0, 0x4, 0x0, 0xc}], 0x10, 0x5}, 0x94) write$cgroup_pid(r5, &(0x7f0000002040)=r0, 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002080)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) ioctl$TUNGETSNDBUF(r8, 0x800454d3, &(0x7f00000020c0)) (async, rerun: 32) openat$cgroup(0xffffffffffffffff, &(0x7f0000002100)='syz0\x00', 0x200002, 0x0) (async) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000002180)={0x4, &(0x7f0000002140)=[{0x5, 0x1, 0x3, 0x4}, {0x6, 0x4, 0x3, 0x57aac85f}, {0x2, 0x9, 0xff, 0x80000001}, {0x6, 0xa1, 0x8, 0xfffffffa}]}) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000021c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async, rerun: 64) getpid() (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) (async, rerun: 64) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x10, 0x17, &(0x7f0000002200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3e}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, r11}, @map_idx_val={0x18, 0xb350606732182a, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000022c0)='syzkaller\x00', 0x4, 0x6f, &(0x7f0000002300)=""/111, 0x41100, 0x60, '\x00', r3, @sk_msg=0x7, r12, 0x8, &(0x7f0000002380)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000023c0)={0x5, 0x4, 0x6, 0x8c8}, 0x10, 0xffffffffffffffff, r13, 0x8, &(0x7f0000002400)=[r4, r6, r4, r4, r5], &(0x7f0000002440)=[{0x5, 0x5, 0x5, 0x6}, {0x3, 0x2, 0x5, 0x8}, {0x1, 0x5, 0x5, 0x4}, {0x1, 0x4, 0xb, 0x7}, {0x4, 0x1, 0x3, 0x1}, {0x3, 0x3, 0x8, 0xa}, {0x3, 0x5, 0x4, 0x1}, {0x5, 0x2, 0xb, 0xc}], 0x10, 0x8}, 0x94) (rerun: 64) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000002580)=r14, 0x4) ioctl$TUNGETVNETLE(r8, 0x800454dd, &(0x7f00000025c0)) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002740)={{}, &(0x7f00000026c0), &(0x7f0000002700)=r13}, 0x20) (rerun: 64) 2.427997541s ago: executing program 4 (id=3950): r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xa5, 0x7, 0x0, 0x0, 0x80000401, 0x18402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x9}, 0x11362, 0x800000000006, 0x40000, 0x6, 0xfffffffffffffffd, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xf, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1800}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x5b}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\\/,,%\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xa5, 0x7, 0x0, 0x0, 0x80000401, 0x18402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x9}, 0x11362, 0x800000000006, 0x40000, 0x6, 0xfffffffffffffffd, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xf, 0xffffffffffffffff, 0x2) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1800}}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x5b}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='\\/,,%\x00') (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) 2.331392844s ago: executing program 3 (id=3952): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000077919b8000000f16d30ddff9400000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0xb7, &(0x7f0000000080)=""/183}, 0x94) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000340)='.d\x00\x00\x00\x00j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x0f\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 E\xaaC\xc388\x13\xc6H\x0f \x03\x86\xb5\xbfq\'\xab!\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdf\xde\x91\xfd\xf1B*j\n\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001f", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfa307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa10000000099344827e1388045fee402000007010000f8ffffffb7020000080000000000000000000200850000000600000085000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(0x0, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) (async, rerun: 32) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') 2.154531368s ago: executing program 1 (id=3953): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x19, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)}], 0x1}, 0xfc) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x10140) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6b}, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socketpair(0xa, 0x1, 0x84, &(0x7f0000000280)={0xffffffffffffffff}) close(r4) r6 = socket$kcm(0xa, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000002280)={&(0x7f0000000080)=@in, 0x80, &(0x7f00000021c0)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f00000011c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002240)=""/42, 0x2a}, 0x8002) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 2.06389589s ago: executing program 2 (id=3954): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$unix(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) (async) recvmsg$unix(r2, 0x0, 0x40000020) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) recvmsg(r4, &(0x7f0000002880)={0x0, 0x0, 0x0}, 0x40010122) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) (rerun: 64) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x92}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd594, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async, rerun: 64) r8 = socket$kcm(0x2, 0x3, 0x106) (async, rerun: 64) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r9, 0x0, &(0x7f00000009c0)=""/215}, 0x20) (async) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000000)="fbd2b9ed29d8974a6ce7f7c0c56aed681686762a1b0c26a85f0891", 0x1b}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e", 0x15}], 0x2}, 0x0) 2.030056551s ago: executing program 4 (id=3955): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x6, 0x9}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x33fe0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0xffffffff}, @func_proto]}, {0x0, [0x61, 0x2e]}}, 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000500)="91", 0x1}], 0x1}, 0x4845) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="d80000001e0081054e81f782db020000001d080006007c09e8fe08a104000e800a00142603600e1208000fc01e000406a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f", 0x55}, {&(0x7f0000000100)="51285c29090e430cf95a04ba3225b53f3a277e6e80af5b3fe795eb01e1579dae66f1f8a48c66f137a86ae76703b8b9bf63bffae0b17bb8091f5c03add4b8ab20e514e49824494fa5cc77d96e302c710d583f3007d9d449bf7cb62f24c9c2e654e859da6e412d32e7e28304a518a7565b8ab950f89fa8906ec80afedb2d2a809cb425bc", 0x83}], 0x2}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x37) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) r8 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x5, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="1806000000d50f8d0833124400000000120000000000000000009506e84ce9040f9520622daf24c38ac9b41d478f75fabef3c138a1da09153f62f125200e285a8c5e89a4a2ef1564a53f755e3a28429bdb719b5266055d5b0eac0035056f2084a3727af6b6f5fcf7e4c65edbd97f5018fb3c906667fdbb546edca201a5183897b55ec1a0302eea7ece106f1728f5106893b12c66b01a0063e4f1"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)) recvmsg$kcm(r7, 0x0, 0x40000000) 1.888652494s ago: executing program 0 (id=3956): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = getpid() sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20}, 0x4040800) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x14, &(0x7f0000000500), 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000200)="ffffffff106c3e5e4c5a506bd990", 0x0, 0x6101, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000000000000000020000000002000000000000080200"/71], 0x0, 0x52}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x13, 0x1, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x8, 0x4, 0x21, 0xc1, 0x1}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000200000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 1.773576887s ago: executing program 1 (id=3958): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@random="60787fb5ed04"]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@random="60787fb5ed04"]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.62645772s ago: executing program 2 (id=3959): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r0 = socket$kcm(0x2, 0x2, 0x0) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e1c, @multicast2=0xe000000d}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r0, @ANYBLOB="ac1417bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x240008c4) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) (async) r1 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x4, 0x8, 0x9f, 0xce, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa72d, 0x1, @perf_bp={0x0, 0x1}, 0x806, 0xc8, 0x0, 0x4, 0x403, 0x3, 0x4, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x8) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x7aced8d0caeed8d2, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r4) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r6) (async) r8 = socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000240)) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904141d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.339847827s ago: executing program 0 (id=3960): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x4}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x0, 0x4}}}, 0x80, 0x0}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @var={0x9, 0x0, 0x0, 0xe, 0x3, 0x1}, @union={0x1, 0x1, 0x0, 0x5, 0x0, 0x3, [{0xd, 0x0, 0x5}]}]}, {0x0, [0x61, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000340)=""/238, 0x52, 0xee, 0x0, 0x80, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000500)=""/95, 0x5f, 0x0, &(0x7f0000000580)=""/132, 0x84}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000644db13000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000ddc75123c14c1d45f46980e0f8bebe74b64667a489aaf259f4cd35bdfd545ec3b053d50652e5bdd99f77906428b1f11996dfa9bb6a9a7bdc29ff23adeaa39c8028fb7580ceac6cadd035e6e10919d888a6eb47c7ea1b431ef99ca8caf58173e82714f55612cf79dc7468fba9675e7c3b1e2c96f0feecc0b71c1145f687eb6f29fde83cdc3349e80acfbc0543de2fb8b73dd22b1f63d4709d68c7ead46da9357620"], &(0x7f0000000780)='syzkaller\x00', 0xfffffffe, 0xa0, &(0x7f00000007c0)=""/160, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x7, 0x2, 0x80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x2, 0x3, 0x7}, {0x1, 0x2, 0x9, 0xc}, {0x1, 0x4, 0x7, 0x7}], 0x10, 0x4}, 0x94) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x20) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000cc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r12}, &(0x7f0000000000), &(0x7f0000001000)=r7}, 0x20) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r16) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%-010d \x00'}, 0x20) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x14, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc3ec, 0x0, 0x0, 0x0, 0x8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x8, 0xfb, &(0x7f00000001c0)=""/251, 0x40f00, 0x40, '\x00', r3, @fallback=0x35, r8, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0xfffffffb, 0x785}, 0x10, r9, r10, 0x8, &(0x7f0000000e80)=[r11, r12, r13, r14, r15, r16, r17, r18], &(0x7f0000000ec0)=[{0x5, 0x3, 0xe, 0xf}, {0x3, 0x5, 0xd, 0x7}, {0x0, 0x5, 0xb}, {0x5, 0x4, 0xd, 0x6}, {0x1, 0x1, 0x1, 0x4}, {0x1, 0x3, 0xf, 0x7}, {0x1, 0x4, 0x9, 0xb}, {0x1, 0x4, 0x2, 0xb}], 0x10, 0x8}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) 1.186454831s ago: executing program 1 (id=3961): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000015c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.096240423s ago: executing program 1 (id=3962): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000001dc0)=0x401, 0x12) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="c24dfffc166303b9b646d220098948d4aa9b5f599ef442d2dc136cf2c7b7ce33b144f0b8bb6520a10a45b015609a7b567d75a8d5b7898b0160a840e86ae2b2ce814512a400020000f081bf00"/86, 0xffffff1d}, {&(0x7f0000000140)="84437071c3725a0c13a1daad3e6c7739435e6ffd36ec08ef4a3bafdc87ddace25d78158e3dbd6bff164402fa0a828ed5399c93a89abceeb817a70c1e06b9f7bd4e37bce71b079c7d4636f87774929ca768f633d575adc950dec388b910e6a1c12c18279578683c7990c87ab933695fb9a44be7ad509d103ba3f18b4d2e4a9a3114746e77937be916f18d88c8e57d1c4c0b43bcbdd6a4dc8875d452b754afb6", 0x9f}], 0x2}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 920.002557ms ago: executing program 1 (id=3963): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0x8, 0x1080, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x1, 0x1, [@remote]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb4, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', r4, r6, 0x4, 0x1}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r5, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x75, 0x6000, &(0x7f0000000940)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236808dd10d88c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a914f94ca2935d9f30457a8ffb21aef4a95a155fab70a40b08605690f6333", 0x2, 0x0, 0x1000}, 0x2c) 625.393665ms ago: executing program 0 (id=3964): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8807, 0x0, 0x2, 0x8, 0x0, 0x76385604, 0xffff, 0x0, 0x2, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008af26c8b7b55f4", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r8, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0x1f, 0x33, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0xed1b, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 625.075425ms ago: executing program 4 (id=3965): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c1003ac1e000100000000ac1e000100000000ffffffff0008000000000000"], 0x30}, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x2b6a00d455e6cb8, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000080)) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r6}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x10000, 0x7fff, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000000c0)) 267.215123ms ago: executing program 2 (id=3966): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'net_cls'}]}, 0x9) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000180)="89934c343635ed4dc57e61fdbc12459bfaac9e571502835a58b46ae85bd55de6407d3b343ca019f4709dc11fe95bbb99a7488583899ee2cf030d77532b498ab4c35dfc35fb0e4e68fc9acd49fa99037d62ccd26fb5f966f80d54bc1b290206ea8bcb10845ab38894e1f3d26329242f80b47e5cd8ad7e449825b585a801822944191d66b696113b229ce490fa19af62171d9691620a7bbda201b01ea8cb209954979fbea37ae2b9d32902f4455b607cef95b5414c2a6f5ec13188d1241952694f9333842aacfd9562d650ae29262354fa88d84673", 0xd4}, {&(0x7f0000000280)="cf607ccb4d1086a6e0ee72ad4722790577e6df0c639db68f84aa819c8a6d7e28a5d2265dc858d253846f535977ab10211e10265a537e1a", 0x37}, {&(0x7f00000002c0)="ea85cfa0866c93d881a09bc16a67e1db9b091dbdbc8e7870273db892c3cfad288f1a4874ec3eaa450d2b71260b015b35ff43da07a6eda215d233e46d03063d9e8aaa3b07644fd7c958d0565319ce1f0057f56515fcc6048747c75ec0ccd91705343148d71102ad296e8c07598ea98d5934f58ae5beaec9556ca1e1597e1ce4a11de8828ea8b73cc949778e5f2c175b16d159ce212d04c2c974", 0x99}, {&(0x7f0000000380)="77898d75ddf86882a26319c99e84b98afbefb5d790e04d2d3dd988739bf55ac7e7f33c6656333be87ecd371ac86c4ab74c2741ddca09f39393d281c2e54ebdbed0405bc432b2ff1792c3f2f2ae1d624928be867d3fedeba548baaf5d90fd2093a4006489a9a1fbe6d6632b54b431de1435597a5e1f7f8971544c94bb4f9bf329026d3aa04367d7faef11533c6bd5f4757987d5123a7014168f0d834b126720918d4bfb77066e5914b8412f7be01240653dd890d1ebbee170f4b214552b568d6998b5c8cc9fae0a6899561eb9f13023341db31a9441686ee8f105734aeb8d", 0xde}, {&(0x7f0000000480)="2851d5dfb77e28c78db2d7cdbfcc2be432e0429e53", 0x15}], 0x5, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0xc080}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.empty_time\x00', 0x0, 0x0) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000600)=0x1) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'netpci0\x00', 0x1000}) (async) mkdir(&(0x7f0000000680)='./file0\x00', 0x60) (async) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000006c0)) sendmsg$sock(r2, &(0x7f0000000a40)={&(0x7f0000000700)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @empty, 0x4}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000780)="39397c03de5702682fe153a492d1e2a923ac11869dac7acfe35cad4e8a89510066f83348ce72aa05fd3256afc5de923e34dfa9a8dac0f2e412ba4ed17e1a6a35d75155d533915b772d717a56ba5e67dd878b96f6c718f7d0799064d5bc6cc7f611c745f7a9c3e603cadba9af89dc5b279b4a80765cb48264715e5019", 0x7c}, {&(0x7f0000000800)="166aa3840ab22dd03222d16aecda5a49e1b3d90ca8ece78bf682aad01d4e570b8e8dad59de", 0x25}, {&(0x7f0000000840)="bbfb68498ace39641eb860b399a25c3c8846d5d728bd4f4b7a3b2b6cdfda9d75f9d5ce2a42509a72056069b4933922b110757a17303d4e417313ff480ac16c9167e59ab4f3ec58d045ea2f8c79a07e75b17befe51b0bb855348b7c872d8a7cfe663a5aebcb49bcccc6b35402e84d96a42aa90cac5c982665b42ae6915f445b7dba2aa88e5f4da21b15f358a751ab179b698b7b71439a6a264dee9270a6c96e64f3499b64efcc65f1cd612b0687b448c6b4f28c91fae02bb2b47242db32eaf01b650b1ad3cbadb75bd94a4d321aec", 0xce}, {&(0x7f0000000940)="d8dd161ac49f6c68abe75ce896ee42cd5fe964bf72ce776645e683974b176aa9c2f3bc28ce4b4ffbf609046336558041bf4e497f28b7f062ac469f89021a6d81d690a9b2f9b72a6a91024c410f057265d91cb58fa7e517d92d12f92bac0681a8d9186d7e27e17782b938ff470561", 0x6e}], 0x4, &(0x7f0000000a00)=[@mark={{0x14, 0x1, 0x24, 0x51c}}, @txtime={{0x18}}], 0x30}, 0x4000000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) (async) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000a80)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r2, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], 0x0, 0x1c, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000e00)=0x1) (async) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x80000, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000e80)={'bond_slave_1\x00', 0x200}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0xc8001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000f00)={'bridge_slave_0\x00', 0x400}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000f40)={'ip6_vti0\x00', @broadcast}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f80)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x1ff, '\x00', r3, r2, 0x0, 0x0, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000001000)='bond_slave_1\x00') (async) write$cgroup_type(r2, &(0x7f0000001040), 0x9) (async) ioctl$TUNGETVNETBE(r5, 0x800454df, &(0x7f0000001080)=0x1) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r2, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0], 0x0, 0x2f, &(0x7f0000001200)=[{}], 0x8, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0xbc, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) sendmsg$inet(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000010c0)="e71f57258287b2b927b27a8b9ad167898d0a8a983d471818bc5d755db18e62df1a401f58a3a3e345b6b12afaacc1534ba2bca3a5b273adf2f5", 0x39}], 0x1, &(0x7f0000001440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0xf4, 0x0, 0x7, {[@noop, @cipso={0x86, 0x2a, 0x0, [{0x7, 0x8, "70ffef5b8225"}, {0x2, 0x6, "1962beeb"}, {0x0, 0xc, "a5eed0bd47c9f8505c0c"}, {0x2, 0xa, "9904d2fbbc8aad11"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x88, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x2f}]}, @cipso={0x86, 0x47, 0x1, [{0x7, 0x11, "5dc9df9c7dbc7fc5b4ce807750cc55"}, {0x0, 0x10, "fe59088b567ad52d679a6c7be1c3"}, {0x5, 0x11, "b621a9742ddefe07d65f5d5f201f65"}, {0x7, 0xd, "327407c6f18c1de0dc5ec3"}, {0x2, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x26, 0x1, 0x4, [{@multicast1, 0x2}, {@local, 0x4}, {@loopback, 0x7b1be56c}, {@private=0xa010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0xe}, 0xfa}, {@broadcast, 0x790a}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x30}}, @ip_retopts={{0x88, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xc0, [@remote]}, @rr={0x7, 0x2b, 0x1d, [@private=0xa010101, @broadcast, @private=0xa010100, @remote, @empty, @private=0xa010100, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @broadcast]}, @generic={0x89, 0xd, "c9975d7531de408c09d1ec"}, @timestamp={0x44, 0x28, 0x28, 0x0, 0xc, [0x1, 0xaa2, 0x5, 0xfffffff7, 0x7, 0xfffffff7, 0x100, 0x4471, 0x7fff]}, @rr={0x7, 0xf, 0xe2, [@dev={0xac, 0x14, 0x14, 0x2d}, @remote, @multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x200}, 0x800) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001780)={r6, &(0x7f0000001680)="d2a4a5f63a2fdbcf4d81605a35c68047aefba0454080763ab61879ab8c1be6d8bd75ba07251f87090be8346a1e1b356377cc3d02f2adf96f653ca5013505b4e4202515452875c3c13a780c98ca94b0007dd0bedb97eeaf17867cd6", &(0x7f0000001700)=""/82}, 0x20) (async) close(r0) (async) openat$cgroup_int(r2, &(0x7f00000017c0)='cpuset.memory_spread_page\x00', 0x2, 0x0) 117.820867ms ago: executing program 3 (id=3967): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000643b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89fc, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r4, @ANYRESHEX=r3, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r8, &(0x7f00000007c0)}, 0x20) openat$cgroup_int(r6, &(0x7f0000000640)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000500)="b90103600040f000009e0ff008001fffffe1000040004d3277fb86dd00017f02832d", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x29, 0x17, &(0x7f0000000100)=r0, 0x4) 98.510017ms ago: executing program 0 (id=3968): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x8, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000540)='(pu&00\t||') (async) socket$kcm(0x29, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28}, 0x28) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff52}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000080000000000000c05000000040000000000000c030000000904000000000010020000000000"], 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000940)={'a', ' *:* ', 'm\x00'}, 0x8) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 73.745678ms ago: executing program 1 (id=3969): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, &(0x7f0000000500)) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000680), &(0x7f0000000700)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000680), &(0x7f0000000700)=r2}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048811) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) close(r4) (async) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="26807800fb206f0100cf61e0b954", 0x0, 0x41ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=3970): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x3}, @alu={0x7, 0x1, 0x3, 0x4, 0x6, 0xffffffffffffffe0, 0xfffffffffffffffd}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd}, @ringbuf_query]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0xe, &(0x7f0000000100)=""/14, 0x41100, 0x31, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x2, 0x5, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0x3, 0x10, 0x4}]}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x10, 0x1, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a4, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000800), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc1}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r0, r1, 0x25, 0x22, 0xffffffffffffffff, @void, @void, @void, @value=r3, r2}, 0x20) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): __fdget_pos+0x2ae/0x360 [ 722.648811][T16303] ? ksys_read+0x70/0x260 [ 722.648842][T16303] ksys_read+0x14d/0x260 [ 722.648874][T16303] ? vfs_write+0x9a0/0x9a0 [ 722.648908][T16303] ? lockdep_hardirqs_on+0x94/0x140 [ 722.648936][T16303] do_syscall_64+0x4c/0xa0 [ 722.648963][T16303] ? clear_bhb_loop+0x60/0xb0 [ 722.648990][T16303] ? clear_bhb_loop+0x60/0xb0 [ 722.649019][T16303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.649044][T16303] RIP: 0033:0x7f8dbdb5e98e [ 722.649065][T16303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 722.649083][T16303] RSP: 002b:00007f8dbeb0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 722.649110][T16303] RAX: ffffffffffffffda RBX: 00007f8dbeb0d6c0 RCX: 00007f8dbdb5e98e [ 722.649127][T16303] RDX: 000000000000000f RSI: 00007f8dbeb0d0a0 RDI: 0000000000000005 [ 722.649142][T16303] RBP: 00007f8dbeb0d090 R08: 0000000000000000 R09: 0000000000000000 [ 722.649156][T16303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.649170][T16303] R13: 00007f8dbde26038 R14: 00007f8dbde25fa0 R15: 00007ffd427ce308 [ 722.649206][T16303] [ 723.031065][T16296] netlink: 'syz.4.2992': attribute type 8 has an invalid length. [ 723.092816][T16296] netlink: 'syz.4.2992': attribute type 7 has an invalid length. [ 723.124736][T16296] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.2992'. [ 723.594227][T16324] netlink: 'syz.0.2998': attribute type 29 has an invalid length. [ 723.712995][T12915] device hsr_slave_0 left promiscuous mode [ 723.723905][T12915] bridge0: port 4(hsr0) entered disabled state [ 723.746683][T12915] device bridge_slave_1 left promiscuous mode [ 723.769548][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.804881][T12915] device bridge_slave_0 left promiscuous mode [ 723.827402][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.887462][T12915] device veth1_vlan left promiscuous mode [ 723.895145][T12915] device veth0_vlan left promiscuous mode [ 724.379283][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 725.175738][T16324] netlink: 'syz.0.2998': attribute type 29 has an invalid length. [ 725.188455][T16330] netlink: 'syz.4.2999': attribute type 13 has an invalid length. [ 725.196870][T16330] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2999'. [ 725.267870][T16142] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 725.330907][T16142] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 725.364213][T16142] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 725.418965][T16142] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 725.578147][T16365] netlink: 'syz.4.3008': attribute type 8 has an invalid length. [ 725.642083][T16365] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.3008'. [ 725.956453][T16371] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 725.971102][T16361] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3006'. [ 726.290106][T16142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.390680][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 726.463986][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 726.500996][T16374] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3011'. [ 726.536307][T16142] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.585931][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 726.609125][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 726.640364][ T5428] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.647677][ T5428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.752695][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 726.790817][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 726.857511][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 726.951166][ T5428] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.958515][ T5428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.056953][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 727.201649][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 727.279596][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 727.324811][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 727.377303][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 727.436913][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 727.508545][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 727.558855][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 727.581142][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 727.622537][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 727.658130][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 727.752282][T16398] validate_nla: 6 callbacks suppressed [ 727.752304][T16398] netlink: 'syz.2.3016': attribute type 4 has an invalid length. [ 727.966624][T16398] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.3016'. [ 728.102942][T16142] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 728.284528][T16409] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.306001][T16409] device bridge_slave_0 left promiscuous mode [ 728.322374][T16409] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.976642][T16432] netlink: 'syz.4.3021': attribute type 8 has an invalid length. [ 729.010164][T16432] netlink: 'syz.4.3021': attribute type 4 has an invalid length. [ 729.018161][T16432] netlink: 'syz.4.3021': attribute type 7 has an invalid length. [ 729.076270][T16432] netlink: 'syz.4.3021': attribute type 8 has an invalid length. [ 729.119523][T16432] netlink: 'syz.4.3021': attribute type 7 has an invalid length. [ 729.156940][T16432] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.3021'. [ 729.356713][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 729.369392][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 729.403750][T16142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.537010][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 729.550156][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 729.612695][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 729.659625][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 729.744464][T16142] device veth0_vlan entered promiscuous mode [ 729.776198][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 729.815765][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 729.864449][T16142] device veth1_vlan entered promiscuous mode [ 729.897464][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 730.073776][T16459] device syzkaller0 entered promiscuous mode [ 730.103928][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 730.157987][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 730.199773][T16142] device veth0_macvtap entered promiscuous mode [ 730.212779][T16142] device veth1_macvtap entered promiscuous mode [ 735.517897][T16142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.528955][T16142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.540924][T16142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.559095][T16142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.571434][T16142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.582978][T16142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.593568][T16142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.603662][T16142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.614648][T16142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.641912][T16142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.667963][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 735.690050][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 735.698736][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 735.714181][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 735.725926][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 735.735397][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 735.745614][T16489] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3033'. [ 735.773059][T16142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.789386][T16142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.798170][T16142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.811919][T16142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.989565][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 735.997538][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.051624][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 736.091341][T16508] netlink: 'syz.2.3036': attribute type 8 has an invalid length. [ 736.107198][T16067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.124935][T16067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.139360][T16508] netlink: 'syz.2.3036': attribute type 4 has an invalid length. [ 736.158018][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 736.167629][T16508] netlink: 'syz.2.3036': attribute type 7 has an invalid length. [ 736.221415][T16508] netlink: 'syz.2.3036': attribute type 8 has an invalid length. [ 736.279847][T16508] netlink: 'syz.2.3036': attribute type 7 has an invalid length. [ 736.325493][T16508] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.3036'. [ 738.562295][T16565] netlink: 'syz.4.3051': attribute type 8 has an invalid length. [ 738.642717][T16565] netlink: 'syz.4.3051': attribute type 4 has an invalid length. [ 738.719855][T16565] netlink: 'syz.4.3051': attribute type 7 has an invalid length. [ 738.739654][T16565] netlink: 'syz.4.3051': attribute type 8 has an invalid length. [ 738.789572][T16565] netlink: 'syz.4.3051': attribute type 7 has an invalid length. [ 738.806290][T16565] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.3051'. [ 739.326036][T12915] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.406466][T12277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 739.428351][T12277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 739.462793][T12277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 739.478884][T12277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 739.489473][T12277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 739.497824][T12277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.544817][T12915] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.033826][T12915] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.218400][T12915] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.434608][T16611] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.3062'. [ 740.593347][T12915] device .*! left promiscuous mode [ 740.763692][T12915] device ip6gretap0 left promiscuous mode [ 740.770693][T12915] : port 1(ip6gretap0) entered disabled state [ 740.787211][T16584] chnl_net:caif_netlink_parms(): no params data found [ 740.848891][T16584] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.873429][T16584] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.882257][T16584] device bridge_slave_0 entered promiscuous mode [ 740.891730][T16584] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.898855][T16584] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.907530][T16584] device bridge_slave_1 entered promiscuous mode [ 740.969428][T16584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.982120][T16584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.045523][T16584] team0: Port device team_slave_0 added [ 741.054147][T16584] team0: Port device team_slave_1 added [ 741.081075][T16584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.089899][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.170162][T16584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.297130][T16584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.325129][T16584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.599501][T12277] Bluetooth: hci1: command 0x0409 tx timeout [ 741.893446][T16584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.035608][T16584] device hsr_slave_0 entered promiscuous mode [ 743.044405][T16584] device hsr_slave_1 entered promiscuous mode [ 743.061422][T16584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.079259][T16584] Cannot create hsr debugfs directory [ 743.103648][T16650] validate_nla: 7 callbacks suppressed [ 743.103667][T16650] netlink: 'syz.4.3067': attribute type 40 has an invalid length. [ 743.119396][T16648] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.3065'. [ 743.290405][T16664] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.3069'. [ 743.327879][T16664] openvswitch: netlink: Message has 48126 unknown bytes. [ 743.447480][T16666] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3071'. [ 743.553647][T16666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.588332][T16666] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 743.618222][T16666] bond0 (unregistering): Released all slaves [ 743.628297][T16667] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3071'. [ 743.659198][ T4285] Bluetooth: hci1: command 0x041b tx timeout [ 743.773595][T16667] team0: Port device team_slave_0 removed [ 744.584064][T16689] netlink: 'syz.4.3075': attribute type 8 has an invalid length. [ 744.619245][T16689] netlink: 'syz.4.3075': attribute type 4 has an invalid length. [ 744.663318][T16689] netlink: 'syz.4.3075': attribute type 7 has an invalid length. [ 744.707688][T16689] netlink: 'syz.4.3075': attribute type 8 has an invalid length. [ 744.735815][T16689] netlink: 'syz.4.3075': attribute type 7 has an invalid length. [ 744.784625][T16689] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.3075'. [ 745.000129][T16699] netlink: 'syz.1.3086': attribute type 8 has an invalid length. [ 745.007943][T16699] netlink: 'syz.1.3086': attribute type 4 has an invalid length. [ 745.129657][T16699] netlink: 'syz.1.3086': attribute type 7 has an invalid length. [ 745.138022][T16699] netlink: 'syz.1.3086': attribute type 8 has an invalid length. [ 745.196176][T16699] netlink: 125876 bytes leftover after parsing attributes in process `syz.1.3086'. [ 745.404287][T16714] netlink: 'syz.0.3080': attribute type 11 has an invalid length. [ 745.429600][T16714] netlink: 184220 bytes leftover after parsing attributes in process `syz.0.3080'. [ 745.739314][ T4285] Bluetooth: hci1: command 0x040f tx timeout [ 746.378017][T16584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.457972][T16713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.481921][T16584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 746.842437][T16584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.872656][T16584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 747.640682][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.647317][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.786525][T12915] device hsr_slave_0 left promiscuous mode [ 747.823887][T12915] device hsr_slave_1 left promiscuous mode [ 747.829241][ T4285] Bluetooth: hci1: command 0x0419 tx timeout [ 747.866429][T12915] bridge0: port 4(hsr0) entered disabled state [ 747.909784][T12915] device bridge_slave_1 left promiscuous mode [ 747.916203][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.027636][T12915] device bridge_slave_0 left promiscuous mode [ 748.036598][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.094936][T12915] device veth1_vlan left promiscuous mode [ 748.552450][T16787] validate_nla: 1 callbacks suppressed [ 748.552472][T16787] netlink: 'syz.1.3091': attribute type 8 has an invalid length. [ 748.654354][T16787] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3091'. [ 750.662132][T16584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 750.783702][T16812] netlink: 'syz.1.3095': attribute type 1 has an invalid length. [ 750.824037][T16584] 8021q: adding VLAN 0 to HW filter on device team0 [ 750.824995][T16812] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3095'. [ 750.893075][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 750.902295][ T5428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 751.077159][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 751.188497][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 751.345024][T12909] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.352318][T12909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.539510][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 751.590839][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 751.620134][T12909] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.627454][T12909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.729468][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 751.774579][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 751.814391][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 751.837071][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 751.856510][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 751.875782][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 751.905290][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 751.937870][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 751.957351][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 751.976673][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 751.999710][T16584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 752.072120][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 752.159421][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 752.739374][T16839] netlink: 'syz.0.3098': attribute type 6 has an invalid length. [ 752.747584][T16839] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3098'. [ 753.389462][T16864] netlink: 'syz.4.3102': attribute type 8 has an invalid length. [ 753.436962][T16864] netlink: 'syz.4.3102': attribute type 1 has an invalid length. [ 753.441740][T16867] netlink: 'syz.2.3103': attribute type 8 has an invalid length. [ 753.495898][T16864] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.3102'. [ 753.541682][T16867] netlink: 'syz.2.3103': attribute type 4 has an invalid length. [ 753.589435][T16867] netlink: 'syz.2.3103': attribute type 7 has an invalid length. [ 753.608913][T16873] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.3105'. [ 753.649202][T16867] netlink: 'syz.2.3103': attribute type 8 has an invalid length. [ 753.655864][T16873] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 753.657269][T16867] netlink: 'syz.2.3103': attribute type 7 has an invalid length. [ 753.776876][T16867] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.3103'. [ 753.946942][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 753.960022][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 754.002609][T16584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.031084][T16881] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3106'. [ 754.045555][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 754.078052][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 754.253105][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 754.265209][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 754.295435][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 754.307971][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 754.338571][T16584] device veth0_vlan entered promiscuous mode [ 754.393922][T16584] device veth1_vlan entered promiscuous mode [ 754.512671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 754.552990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 754.606917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 754.638533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.691776][T16584] device veth0_macvtap entered promiscuous mode [ 754.703430][T16584] device veth1_macvtap entered promiscuous mode [ 754.743956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 754.761018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 754.871895][T16584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.924363][T16584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.968464][T16584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.989155][T16584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.010824][T16584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 755.056408][T16919] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.3115'. [ 755.090006][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 755.122065][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 755.185756][T16584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.241165][T16584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.288137][T16584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.334414][T16584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.399162][T16584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.437227][T16584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.479720][T16584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 755.519435][T16584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 755.560620][T16584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 755.599407][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 755.651470][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 755.688818][T16584] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.759114][T16584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.768001][T16584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.817048][T16584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.904479][T16941] netlink: 'syz.2.3118': attribute type 8 has an invalid length. [ 755.965882][T16941] netlink: 'syz.2.3118': attribute type 4 has an invalid length. [ 756.041669][T16941] netlink: 'syz.2.3118': attribute type 7 has an invalid length. [ 756.070080][T16941] netlink: 'syz.2.3118': attribute type 8 has an invalid length. [ 756.097581][T12909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.120842][T16941] netlink: 'syz.2.3118': attribute type 7 has an invalid length. [ 756.129417][T12909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.139183][T16941] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.3118'. [ 756.161897][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 756.347863][T12909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.397924][T12909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.408477][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 756.755933][T16964] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3123'. [ 757.886654][T16991] device lo entered promiscuous mode [ 757.923777][T16991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 758.051757][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.082465][T12277] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 758.092746][T12277] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 758.101015][T12277] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 758.137058][T12277] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 758.148151][T12277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 758.156561][T12277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 758.360078][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.394265][T17007] netlink: 'syz.3.3132': attribute type 8 has an invalid length. [ 758.451558][T17007] netlink: 'syz.3.3132': attribute type 4 has an invalid length. [ 758.479553][T17007] netlink: 125876 bytes leftover after parsing attributes in process `syz.3.3132'. [ 758.999507][T17025] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3136'. [ 759.330812][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.361506][T17015] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3134'. [ 759.453665][ T9] device netdevsim0 left promiscuous mode [ 759.461834][ T9] bridge0: port 3(netdevsim0) entered disabled state [ 759.473528][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.864463][T17038] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.3140'. [ 760.109710][T17000] chnl_net:caif_netlink_parms(): no params data found [ 760.219411][ T4285] Bluetooth: hci3: command 0x0409 tx timeout [ 760.320324][ T9] device ip6gretap0 left promiscuous mode [ 760.326183][ T9] bridge0: port 2(ip6gretap0) entered disabled state [ 760.745474][T17000] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.763728][T17000] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.801984][T17000] device bridge_slave_0 entered promiscuous mode [ 760.947549][T17000] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.969282][T17000] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.999567][T17000] device bridge_slave_1 entered promiscuous mode [ 761.206938][T17000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.251055][T17000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.273110][T17084] validate_nla: 3 callbacks suppressed [ 761.273134][T17084] netlink: 'syz.1.3149': attribute type 8 has an invalid length. [ 761.339956][T17084] netlink: 'syz.1.3149': attribute type 4 has an invalid length. [ 761.348014][T17084] netlink: 'syz.1.3149': attribute type 7 has an invalid length. [ 761.382441][T17084] netlink: 'syz.1.3149': attribute type 8 has an invalid length. [ 761.394335][T17087] FAULT_INJECTION: forcing a failure. [ 761.394335][T17087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.404684][T17000] team0: Port device team_slave_0 added [ 761.409276][T17084] netlink: 'syz.1.3149': attribute type 7 has an invalid length. [ 761.425950][T17087] CPU: 0 PID: 17087 Comm: syz.3.3150 Not tainted syzkaller #0 [ 761.433530][T17087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 761.443804][T17087] Call Trace: [ 761.447122][T17087] [ 761.450090][T17087] dump_stack_lvl+0x188/0x24e [ 761.454834][T17087] ? show_regs_print_info+0x12/0x12 [ 761.460175][T17087] ? load_image+0x410/0x410 [ 761.464741][T17087] ? __lock_acquire+0x7c40/0x7c40 [ 761.469829][T17087] should_fail_ex+0x390/0x4c0 [ 761.475100][T17087] _copy_from_user+0x2c/0x170 [ 761.479837][T17087] ___sys_sendmsg+0x1c3/0x360 [ 761.484566][T17087] ? __sys_sendmsg+0x2a0/0x2a0 [ 761.489384][T17087] ? __lock_acquire+0x7c40/0x7c40 [ 761.494628][T17087] __se_sys_sendmsg+0x1c3/0x2b0 [ 761.499500][T17087] ? ct_nmi_exit+0x145/0x1c0 [ 761.504141][T17087] ? __x64_sys_sendmsg+0x80/0x80 [ 761.509120][T17087] ? lockdep_hardirqs_on+0x94/0x140 [ 761.514337][T17087] do_syscall_64+0x4c/0xa0 [ 761.518771][T17087] ? clear_bhb_loop+0x60/0xb0 [ 761.523550][T17087] ? clear_bhb_loop+0x60/0xb0 [ 761.528336][T17087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 761.534251][T17087] RIP: 0033:0x7efe93d9e159 [ 761.538708][T17087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 761.558436][T17087] RSP: 002b:00007efe94baa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.566869][T17087] RAX: ffffffffffffffda RBX: 00007efe94025fa0 RCX: 00007efe93d9e159 [ 761.574943][T17087] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 761.582926][T17087] RBP: 00007efe94baa090 R08: 0000000000000000 R09: 0000000000000000 [ 761.590925][T17087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.599013][T17087] R13: 00007efe94026038 R14: 00007efe94025fa0 R15: 00007fffcd537a58 [ 761.607111][T17087] [ 761.622324][T17084] netlink: 125876 bytes leftover after parsing attributes in process `syz.1.3149'. [ 761.710160][T17000] team0: Port device team_slave_1 added [ 761.836021][T17000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.860227][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.917525][T17000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.932944][T17000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.940643][T17000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.973476][T17000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.016508][T17096] netlink: 'syz.3.3153': attribute type 10 has an invalid length. [ 762.134187][T17096] device veth0_vlan left promiscuous mode [ 762.153610][T17096] device veth0_vlan entered promiscuous mode [ 762.180103][T17096] team0: Device veth0_vlan failed to register rx_handler [ 762.300154][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 762.363533][T17000] device hsr_slave_0 entered promiscuous mode [ 762.377814][T17000] device hsr_slave_1 entered promiscuous mode [ 762.989507][T17108] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3156'. [ 763.581791][T17122] netlink: 'syz.1.3159': attribute type 8 has an invalid length. [ 763.609234][T17122] netlink: 'syz.1.3159': attribute type 4 has an invalid length. [ 763.617045][T17122] netlink: 'syz.1.3159': attribute type 7 has an invalid length. [ 763.648285][T17122] netlink: 'syz.1.3159': attribute type 8 has an invalid length. [ 763.682076][T17122] netlink: 125876 bytes leftover after parsing attributes in process `syz.1.3159'. [ 764.379093][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 766.452398][T17138] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3161'. [ 766.474394][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 766.545142][T17146] validate_nla: 1 callbacks suppressed [ 766.545164][T17146] netlink: 'syz.0.3163': attribute type 8 has an invalid length. [ 766.559333][T17146] netlink: 'syz.0.3163': attribute type 4 has an invalid length. [ 766.567581][T17146] netlink: 'syz.0.3163': attribute type 7 has an invalid length. [ 766.580024][T17146] netlink: 'syz.0.3163': attribute type 8 has an invalid length. [ 766.588409][T17146] netlink: 'syz.0.3163': attribute type 7 has an invalid length. [ 766.598325][T17146] netlink: 125876 bytes leftover after parsing attributes in process `syz.0.3163'. [ 767.114308][T17155] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3166'. [ 767.126599][T17152] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.134185][T17152] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.202490][T17159] device veth1_macvtap left promiscuous mode [ 767.249423][T17164] device bridge0 entered promiscuous mode [ 767.577781][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.650723][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.685917][ T9] device bridge_slave_0 left promiscuous mode [ 767.701821][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.512346][T17186] netlink: 'syz.1.3173': attribute type 27 has an invalid length. [ 769.555550][T17186] netlink: 'syz.1.3173': attribute type 25 has an invalid length. [ 769.617657][T17188] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 769.671352][T17188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 769.881106][T17198] netlink: 'syz.0.3177': attribute type 3 has an invalid length. [ 769.888924][T17198] netlink: 'syz.0.3177': attribute type 181 has an invalid length. [ 769.921598][T17000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 769.963386][T17000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 769.995767][T17000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 770.043701][T17000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 770.389526][T17000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.441598][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 770.476146][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 770.534849][T17000] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.550563][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 770.593087][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 770.626492][T16068] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.633843][T16068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.667260][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 770.695674][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 770.724808][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 770.753019][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.760271][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.825320][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 770.857303][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 770.875324][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 770.910641][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 770.931100][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 770.951846][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 770.983611][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 771.027369][T17000] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 771.113253][T17000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.160075][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 771.171973][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 771.230074][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 771.265468][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 771.278699][ T4285] Bluetooth: hci5: unexpected event 0x0b length: 151 > 11 [ 771.295670][T17235] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3182'. [ 771.310857][T12915] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 772.109247][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.159809][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.169041][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.178249][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.187593][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.196779][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.206652][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.216192][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.225459][T17250] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 772.591152][T17262] netlink: 'syz.2.3187': attribute type 3 has an invalid length. [ 772.630901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 772.645893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 772.685589][T17000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.698812][T17262] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3187'. [ 773.672733][T17281] netlink: 'syz.2.3192': attribute type 2 has an invalid length. [ 773.761257][T17281] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3192'. [ 773.840885][T17280] netlink: 'syz.2.3192': attribute type 2 has an invalid length. [ 774.001719][T17280] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3192'. [ 774.724843][T17305] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3194'. [ 774.894972][T17305] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 775.269532][T17316] netlink: 'syz.1.3196': attribute type 3 has an invalid length. [ 775.299455][T17316] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3196'. [ 775.484213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 775.516157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 775.648296][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 775.672226][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 775.696363][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 775.715060][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 775.755831][T17000] device veth0_vlan entered promiscuous mode [ 775.779682][T17326] netlink: 'syz.2.3199': attribute type 1 has an invalid length. [ 775.787580][T17326] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3199'. [ 775.795833][T17000] device veth1_vlan entered promiscuous mode [ 775.931514][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 775.955127][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 776.017735][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 776.057737][T16068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 776.201877][T17000] device veth0_macvtap entered promiscuous mode [ 776.429961][T17000] device veth1_macvtap entered promiscuous mode [ 776.570650][T17347] netlink: 'syz.2.3202': attribute type 10 has an invalid length. [ 776.788156][T17347] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.795783][T17347] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.992103][T17347] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.999565][T17347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.008745][T17347] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.016015][T17347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.048690][T17347] team0: Port device bridge0 added [ 777.061217][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 777.075530][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 777.131776][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.157224][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.177911][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.207116][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.237046][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 777.276907][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.318032][T17000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.374561][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 777.400018][T12909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 777.468852][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.498857][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.530295][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.589195][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.629492][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.704943][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.737402][T17000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 777.789342][T17000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.829074][T17000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.882631][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 777.903300][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 777.926219][T17000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.941020][T17000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.965735][T17000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.991704][T17000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.027133][T17389] IPv6: pim6reg1: Disabled Multicast RS [ 778.209540][T16068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.217429][T16068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.226319][T12911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.247626][T12911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.285906][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 778.311128][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 778.800493][T17407] net_ratelimit: 1144 callbacks suppressed [ 778.800515][T17407] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 778.828722][T17404] netlink: 'syz.2.3213': attribute type 22 has an invalid length. [ 778.854732][T17404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3213'. [ 779.424091][T17418] netlink: 'syz.2.3213': attribute type 3 has an invalid length. [ 779.655611][T17418] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3213'. [ 780.098832][ T4285] Bluetooth: hci1: unexpected event 0x0b length: 151 > 11 [ 780.773645][T17438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 780.789386][T17438] IPv6: NLM_F_CREATE should be set when creating new route [ 780.797568][T17438] IPv6: NLM_F_CREATE should be set when creating new route [ 780.805577][T17438] IPv6: NLM_F_CREATE should be set when creating new route [ 780.812596][T17443] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3225'. [ 781.194781][T17457] netlink: 'syz.3.3227': attribute type 8 has an invalid length. [ 781.239629][T17457] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3227'. [ 781.298656][T17453] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3226'. [ 783.382220][T17492] netlink: 'syz.2.3234': attribute type 2 has an invalid length. [ 787.654092][T17508] device lo entered promiscuous mode [ 788.169334][T17530] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3243'. [ 788.267629][T17533] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3243'. [ 789.303861][T17548] netlink: 'syz.0.3248': attribute type 2 has an invalid length. [ 789.330524][T17548] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3248'. [ 789.375468][T17550] netlink: 'syz.4.3249': attribute type 10 has an invalid length. [ 789.500550][T17550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.514323][T17550] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 789.533513][T17548] tipc: Started in network mode [ 789.539421][T17548] tipc: Node identity 9215a268, cluster identity 4711 [ 789.546328][T17548] tipc: Node number set to 2450891368 [ 789.698719][T17548] netlink: 'syz.0.3248': attribute type 8 has an invalid length. [ 789.750973][T17548] netlink: 'syz.0.3248': attribute type 4 has an invalid length. [ 789.758892][T17548] netlink: 'syz.0.3248': attribute type 7 has an invalid length. [ 789.795067][T17557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 789.802996][T17557] IPv6: NLM_F_CREATE should be set when creating new route [ 789.811799][T17557] IPv6: NLM_F_CREATE should be set when creating new route [ 789.820013][T17557] IPv6: NLM_F_CREATE should be set when creating new route [ 789.868209][T17548] netlink: 'syz.0.3248': attribute type 8 has an invalid length. [ 789.919515][T17548] netlink: 'syz.0.3248': attribute type 7 has an invalid length. [ 789.967822][T17548] netlink: 125876 bytes leftover after parsing attributes in process `syz.0.3248'. [ 790.881344][T17589] device pim6reg1 entered promiscuous mode [ 790.991839][T17602] netlink: 'syz.4.3260': attribute type 29 has an invalid length. [ 792.373222][T17602] netlink: 'syz.4.3260': attribute type 29 has an invalid length. [ 792.933798][ T4285] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 792.933880][ T4285] Bluetooth: hci3: Malformed LE Event: 0x02 [ 792.958050][T17630] netlink: 'syz.3.3266': attribute type 8 has an invalid length. [ 793.030117][T17630] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3266'. [ 793.204457][T17625] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3265'. [ 793.324798][T17635] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3267'. [ 793.411658][T17635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 793.836581][T17644] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3271'. [ 793.894369][T17641] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3270'. [ 793.903528][T17648] raw_sendmsg: syz.3.3273 forgot to set AF_INET. Fix it! [ 794.036184][T17648] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3273'. [ 794.256750][T17653] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3273'. [ 794.309965][T17654] delete_channel: no stack [ 794.357227][T17654] delete_channel: no stack [ 794.546669][T17653] device pim6reg1 entered promiscuous mode [ 795.410187][T17665] validate_nla: 6 callbacks suppressed [ 795.410218][T17665] netlink: 'syz.1.3276': attribute type 21 has an invalid length. [ 795.440750][T17665] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3276'. [ 795.488317][T17665] netlink: 'syz.1.3276': attribute type 5 has an invalid length. [ 795.543185][T17662] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3276'. [ 796.172421][T17694] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3285'. [ 799.207033][T17681] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 799.222506][T17681] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 799.235231][T17681] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 799.422248][T17701] sctp: [Deprecated]: syz.0.3286 (pid 17701) Use of struct sctp_assoc_value in delayed_ack socket option. [ 799.422248][T17701] Use struct sctp_sack_info instead [ 807.484647][T17738] netlink: 'syz.4.3293': attribute type 21 has an invalid length. [ 807.625623][T17741] netlink: 'syz.4.3294': attribute type 21 has an invalid length. [ 807.634461][T17741] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3294'. [ 807.647902][T17741] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3294'. [ 807.688450][T17741] netlink: 'syz.4.3294': attribute type 17 has an invalid length. [ 807.730269][T17741] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3294'. [ 807.748033][T17741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 808.414910][T17752] netlink: 'syz.1.3297': attribute type 8 has an invalid length. [ 808.550862][T17752] netlink: 'syz.1.3297': attribute type 4 has an invalid length. [ 808.661386][T17752] netlink: 'syz.1.3297': attribute type 7 has an invalid length. [ 808.770999][T17752] netlink: 'syz.1.3297': attribute type 8 has an invalid length. [ 808.852016][T17752] netlink: 'syz.1.3297': attribute type 7 has an invalid length. [ 809.029648][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.036159][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.097619][T17752] netlink: 125876 bytes leftover after parsing attributes in process `syz.1.3297'. [ 809.926210][T17764] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3299'. [ 810.420043][T17772] netlink: 'syz.2.3300': attribute type 21 has an invalid length. [ 810.648241][T17772] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3300'. [ 810.759237][T17772] netlink: 'syz.2.3300': attribute type 5 has an invalid length. [ 810.782791][T17777] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3301'. [ 811.802499][T17773] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3300'. [ 815.915047][T17798] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 815.924682][T17798] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 815.935565][T17798] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 816.279770][T17818] device syzkaller0 entered promiscuous mode [ 819.391627][T17846] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3316'. [ 819.935808][T17859] ¥: port 1(erspan0) entered blocking state [ 820.019417][T17859] ¥: port 1(erspan0) entered disabled state [ 820.055823][T17859] device erspan0 entered promiscuous mode [ 820.075459][T17860] netlink: 'syz.0.3321': attribute type 21 has an invalid length. [ 820.088124][T17860] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3321'. [ 820.100964][T17860] netlink: 'syz.0.3321': attribute type 4 has an invalid length. [ 820.109822][T17860] netlink: 'syz.0.3321': attribute type 3 has an invalid length. [ 820.122139][T17860] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3321'. [ 820.152582][T17860] netlink: 'syz.0.3321': attribute type 21 has an invalid length. [ 820.180776][T17860] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3321'. [ 820.230760][T17860] netlink: 'syz.0.3321': attribute type 4 has an invalid length. [ 820.276401][T17860] netlink: 'syz.0.3321': attribute type 3 has an invalid length. [ 820.300822][T17860] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3321'. [ 820.315115][T17871] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3324'. [ 821.099355][ T4285] Bluetooth: hci5: command 0x0406 tx timeout [ 821.187724][T17854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 821.205283][T17860] netlink: 'syz.0.3321': attribute type 21 has an invalid length. [ 821.249262][T17860] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3321'. [ 821.263780][T17860] netlink: 'syz.0.3321': attribute type 4 has an invalid length. [ 821.302572][T17860] netlink: 'syz.0.3321': attribute type 3 has an invalid length. [ 821.319122][T17860] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3321'. [ 821.481865][T17889] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3328'. [ 821.802892][T17897] netlink: 'syz.3.3331': attribute type 27 has an invalid length. [ 822.383415][T17892] delete_channel: no stack [ 822.790427][T17913] tc_dump_action: action bad kind [ 823.040567][T17925] device vcan0 entered promiscuous mode [ 823.046456][T17925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 824.451069][T17941] cgroup: fork rejected by pids controller in /syz0 [ 824.943448][T17936] __nla_validate_parse: 7 callbacks suppressed [ 824.943469][T17936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 827.493701][T18085] device sit0 entered promiscuous mode [ 828.389866][ T5166] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.582007][ T5166] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.737212][ T5166] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.875234][ T5166] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.975777][T18118] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 829.071638][T18118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.851555][ T5166] tipc: Left network mode [ 830.214330][T18143] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3362'. [ 830.295626][ T4286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 830.306001][ T4286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 830.315284][ T4286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 830.323949][ T4286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 830.332268][ T4286] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 830.340008][ T4286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 830.565168][T18158] validate_nla: 5 callbacks suppressed [ 830.565187][T18158] netlink: 'syz.2.3374': attribute type 2 has an invalid length. [ 830.589530][T18158] netlink: 'syz.2.3374': attribute type 8 has an invalid length. [ 830.615290][T18158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3374'. [ 830.971341][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3364'. [ 831.093755][T18147] delete_channel: no stack [ 832.387367][ T4286] Bluetooth: hci4: command 0x0409 tx timeout [ 833.405737][T18183] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3366'. [ 833.710021][T18192] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3369'. [ 833.727292][T18190] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3368'. [ 833.767339][T18190] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 833.921387][ T5166] device erspan0 left promiscuous mode [ 833.926999][ T5166] ¥: port 1(erspan0) entered disabled state [ 834.058376][T18203] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3371'. [ 834.408385][T18145] chnl_net:caif_netlink_parms(): no params data found [ 834.459383][ T4286] Bluetooth: hci4: command 0x041b tx timeout [ 835.406557][T18145] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.439214][T18145] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.469130][T18145] device bridge_slave_0 entered promiscuous mode [ 835.501027][T18145] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.508806][T18145] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.628312][T18145] device bridge_slave_1 entered promiscuous mode [ 835.811769][ T5166] device hsr_slave_0 left promiscuous mode [ 835.822021][ T5166] device hsr_slave_1 left promiscuous mode [ 835.860865][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.868360][ T5166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.895701][ T5166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.920331][ T5166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.087314][ T5166] device veth1_macvtap left promiscuous mode [ 836.098669][ T5166] device veth0_macvtap left promiscuous mode [ 836.129372][ T5166] device veth1_vlan left promiscuous mode [ 836.135340][ T5166] device veth0_vlan left promiscuous mode [ 836.539319][ T4285] Bluetooth: hci4: command 0x040f tx timeout [ 837.894842][ T5166] team0 (unregistering): Port device team_slave_1 removed [ 838.019732][ T5166] team0 (unregistering): Port device team_slave_0 removed [ 838.112655][ T5166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.188861][ T5166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.629428][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 838.936151][ T5166] bond0 (unregistering): Released all slaves [ 839.057095][T18145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.079773][T18239] netlink: 'syz.1.3379': attribute type 27 has an invalid length. [ 839.215817][T18145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.355985][T18145] team0: Port device team_slave_0 added [ 839.377038][T18145] team0: Port device team_slave_1 added [ 839.547090][T18145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.589007][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.689493][T18145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.711226][T18145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.718252][T18145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.821159][T18145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.030711][T18145] device hsr_slave_0 entered promiscuous mode [ 840.056645][T18145] device hsr_slave_1 entered promiscuous mode [ 840.188656][T18145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.257938][T18145] Cannot create hsr debugfs directory [ 840.407873][T18294] netlink: 'syz.1.3391': attribute type 13 has an invalid length. [ 840.459553][T18294] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3391'. [ 840.470660][T18294] syz_tun: refused to change device tx_queue_len [ 840.477063][T18294] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 841.579305][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 841.658189][T18323] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3397'. [ 841.695664][T18323] netlink: zone id is out of range [ 841.719093][T18323] netlink: get zone limit has 8 unknown bytes [ 841.901513][T18322] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3397'. [ 842.950931][T18145] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 843.008374][T18145] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 843.032335][T18145] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 843.062085][T18145] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 843.345770][T18145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.409680][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 843.468659][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 843.523220][T18145] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.558893][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 843.580582][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 843.603706][T12916] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.611307][T12916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.634625][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 843.653186][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 843.668562][ T5166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 843.698496][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.706143][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.737462][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 843.816763][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 843.859470][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 843.921026][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 843.969951][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 844.011989][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 844.118062][T18145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 844.136712][T18145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 844.174438][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 844.193455][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 844.256243][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 844.316703][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 844.375783][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 844.449974][T12916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 845.386274][T18395] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3413'. [ 845.425129][T18395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 845.976801][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 846.008527][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 846.057892][T18145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.340181][T18434] netlink: 'syz.3.3421': attribute type 8 has an invalid length. [ 846.360298][T18434] netlink: 'syz.3.3421': attribute type 4 has an invalid length. [ 846.382937][T18434] netlink: 'syz.3.3421': attribute type 7 has an invalid length. [ 846.402489][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 846.435302][T18434] netlink: 'syz.3.3421': attribute type 8 has an invalid length. [ 846.474736][T18434] netlink: 'syz.3.3421': attribute type 7 has an invalid length. [ 846.484908][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 846.517279][T18434] netlink: 125876 bytes leftover after parsing attributes in process `syz.3.3421'. [ 846.629889][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 846.647749][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 846.680922][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 847.146687][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 847.177760][T18145] device veth0_vlan entered promiscuous mode [ 847.261461][T18145] device veth1_vlan entered promiscuous mode [ 847.422357][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 847.441965][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 847.488013][T18145] device veth0_macvtap entered promiscuous mode [ 847.541027][T18145] device veth1_macvtap entered promiscuous mode [ 847.657315][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.709352][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.739154][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.769672][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.828822][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 847.869501][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 847.916448][T18145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 847.966919][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 848.000084][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 848.041043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 848.179762][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 848.252683][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.258479][T18467] netlink: 126612 bytes leftover after parsing attributes in process `syz.1.3424'. [ 848.269452][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.284358][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.296034][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.310527][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.350095][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.360767][T18145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.371759][T18145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.379431][T18467] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3424'. [ 848.383891][T18145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.437112][T18145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.481469][T18145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.528888][T18145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.568714][T18145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.643464][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 848.677169][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 848.925288][T12915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.977228][T12915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.015541][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 849.057741][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.076753][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.150380][ T6836] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 849.162566][T18478] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 849.189432][T18478] syzkaller1: linktype set to 825 [ 849.858934][T18506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.095556][T18518] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3437'. [ 850.115277][T18517] netlink: 'syz.4.3438': attribute type 46 has an invalid length. [ 850.124758][T18518] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3437'. [ 850.137587][T18517] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3438'. [ 850.390460][T18526] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3440'. [ 850.446498][T18526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 850.509342][T18529] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3439'. [ 850.624427][T18534] netlink: 'syz.4.3441': attribute type 10 has an invalid length. [ 850.810214][T18534] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 851.443235][T18571] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3448'. [ 851.686753][T18587] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3450'. [ 851.735148][T18590] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3451'. [ 854.557751][T18636] netlink: 'syz.1.3456': attribute type 19 has an invalid length. [ 854.603361][T18636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3456'. [ 854.683287][T18640] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3455'. [ 855.044685][T18650] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3460'. [ 855.087641][T18652] netlink: 'syz.1.3459': attribute type 10 has an invalid length. [ 855.110271][T18651] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3460'. [ 855.613377][T18652] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 855.659433][T18651] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3460'. [ 855.857656][T18668] netlink: 'syz.2.3463': attribute type 8 has an invalid length. [ 855.927924][T18668] netlink: 'syz.2.3463': attribute type 4 has an invalid length. [ 855.966616][T18668] netlink: 'syz.2.3463': attribute type 7 has an invalid length. [ 855.998897][T18668] netlink: 'syz.2.3463': attribute type 8 has an invalid length. [ 856.045177][T18668] netlink: 'syz.2.3463': attribute type 7 has an invalid length. [ 856.092254][T18668] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.3463'. [ 857.048296][T18704] netlink: 'syz.2.3474': attribute type 16 has an invalid length. [ 857.076768][T18704] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3474'. [ 857.130468][T18704] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 857.167860][T18713] netlink: 'syz.0.3475': attribute type 10 has an invalid length. [ 857.229668][T18704] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.3474'. [ 857.413396][T18713] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 858.020666][T18728] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3478'. [ 858.290300][T18733] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3479'. [ 861.875637][T18772] tipc: Started in network mode [ 861.880947][T18772] tipc: Node identity 9215a268, cluster identity 4711 [ 861.887758][T18772] tipc: Node number set to 2450891368 [ 862.073001][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 862.164774][T18781] tun0: tun_chr_ioctl cmd 1074812118 [ 862.204974][T18786] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.3496'. [ 862.536073][T18799] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3498'. [ 862.589777][T18799] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 862.613711][T18799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 862.756531][T18808] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 862.883143][T18808] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 862.949629][T18810] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 863.017268][T18812] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 863.166219][T18812] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 863.250084][T18812] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 863.311147][T18812] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 863.365249][T18812] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3499'. [ 864.101035][T18834] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 864.111788][T18833] Ÿë: port 1(veth0_to_team) entered blocking state [ 864.119166][T18833] Ÿë: port 1(veth0_to_team) entered disabled state [ 864.132417][T18833] device veth0_to_team entered promiscuous mode [ 866.819110][T18889] validate_nla: 7 callbacks suppressed [ 866.819134][T18889] netlink: 'syz.1.3522': attribute type 16 has an invalid length. [ 870.224014][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.230415][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.384735][T18935] __nla_validate_parse: 5 callbacks suppressed [ 871.384773][T18935] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3533'. [ 871.853009][T18948] netlink: 'syz.1.3537': attribute type 1 has an invalid length. [ 871.885405][T18948] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.3537'. [ 872.677762][T18976] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3544'. [ 872.888387][T18991] netlink: 'syz.1.3547': attribute type 2 has an invalid length. [ 872.983158][T18991] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3547'. [ 873.066454][T18995] netlink: 'syz.0.3549': attribute type 46 has an invalid length. [ 873.168850][T18995] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3549'. [ 873.552239][T19001] netlink: 'syz.4.3550': attribute type 10 has an invalid length. [ 873.596254][T19001] netlink: 'syz.4.3550': attribute type 19 has an invalid length. [ 873.636714][T19001] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.3550'. [ 876.439556][T19038] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 876.463391][T19039] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 876.530481][T19041] netlink: 'syz.2.3562': attribute type 16 has an invalid length. [ 876.569445][T19041] netlink: 'syz.2.3562': attribute type 3 has an invalid length. [ 876.603063][T19041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3562'. [ 876.780973][T19039] netlink: 'syz.4.3561': attribute type 29 has an invalid length. [ 876.791501][T19042] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3560'. [ 877.804207][T19042] bond0: (slave dummy0): Releasing backup interface [ 877.810465][T19070] netlink: 'syz.2.3565': attribute type 29 has an invalid length. [ 877.929329][T19055] netlink: 'syz.0.3560': attribute type 21 has an invalid length. [ 877.949642][T19055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3560'. [ 878.031034][T19070] netlink: 'syz.2.3565': attribute type 29 has an invalid length. [ 878.969087][T19070] netlink: 'syz.2.3565': attribute type 29 has an invalid length. [ 879.672909][T19099] netlink: 'syz.4.3569': attribute type 16 has an invalid length. [ 879.730565][T19099] netlink: 'syz.4.3569': attribute type 3 has an invalid length. [ 879.860873][T19099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3569'. [ 880.625422][T19105] netlink: 'syz.1.3570': attribute type 10 has an invalid length. [ 880.723414][T19105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 881.803824][T19138] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 882.499662][T19151] netlink: 'syz.4.3582': attribute type 21 has an invalid length. [ 882.539612][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 882.589947][T19151] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3582'. [ 882.855890][T19160] device pim6reg1 entered promiscuous mode [ 883.043476][T19167] netlink: 'syz.3.3585': attribute type 29 has an invalid length. [ 883.081842][T19167] netlink: 'syz.3.3585': attribute type 29 has an invalid length. [ 883.180840][T19171] netlink: 'syz.0.3587': attribute type 21 has an invalid length. [ 883.259822][T19171] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3587'. [ 883.474253][T19171] netlink: 6526 bytes leftover after parsing attributes in process `syz.0.3587'. [ 884.467915][T19167] netlink: 'syz.3.3585': attribute type 29 has an invalid length. [ 884.772250][T19194] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.3591'. [ 888.639277][T19238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3603'. [ 888.648788][T19238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3603'. [ 888.714833][T19238] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3603'. [ 889.862282][T19269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3609'. [ 890.065683][T19274] netlink: 'syz.3.3611': attribute type 11 has an invalid length. [ 890.129889][T19281] netlink: 'syz.4.3610': attribute type 29 has an invalid length. [ 890.174245][T19274] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3611'. [ 890.199270][T19281] netlink: 'syz.4.3610': attribute type 29 has an invalid length. [ 890.249678][T19276] netlink: 'syz.3.3611': attribute type 11 has an invalid length. [ 890.296348][T19276] netlink: 190948 bytes leftover after parsing attributes in process `syz.3.3611'. [ 890.317777][T19275] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3611'. [ 890.382726][T19272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 890.413813][T19286] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3612'. [ 890.510458][T19286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.517823][T19286] IPv6: NLM_F_CREATE should be set when creating new route [ 890.525422][T19286] IPv6: NLM_F_CREATE should be set when creating new route [ 890.533008][T19286] IPv6: NLM_F_CREATE should be set when creating new route [ 890.647386][T19288] device veth1_macvtap left promiscuous mode [ 890.729286][T19288] device macsec0 entered promiscuous mode [ 890.881722][T19289] device veth1_macvtap entered promiscuous mode [ 891.136025][T19282] netlink: 'syz.4.3610': attribute type 29 has an invalid length. [ 894.633750][T19311] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3618'. [ 894.976879][T19326] netlink: 'syz.4.3622': attribute type 10 has an invalid length. [ 897.884605][T19326] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.939866][T19326] device bridge_slave_1 left promiscuous mode [ 897.946661][T19326] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.960583][T19326] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 897.971138][T19333] bridge0: port 3(batadv0) entered blocking state [ 897.983169][T19333] bridge0: port 3(batadv0) entered disabled state [ 898.001738][T19333] device batadv0 entered promiscuous mode [ 898.015032][T19333] bridge0: port 3(batadv0) entered blocking state [ 898.021766][T19333] bridge0: port 3(batadv0) entered forwarding state [ 898.180637][T19341] netlink: 'syz.1.3626': attribute type 3 has an invalid length. [ 898.219911][ T5433] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 898.220591][T19341] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3626'. [ 898.229583][ T5433] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 898.367831][T19344] netlink: 'syz.0.3627': attribute type 3 has an invalid length. [ 898.411833][T19344] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3627'. [ 898.453795][T19344] netlink: 'syz.0.3627': attribute type 3 has an invalid length. [ 898.481125][T19344] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3627'. [ 899.107859][T19372] netlink: 4239 bytes leftover after parsing attributes in process `syz.1.3632'. [ 899.619210][ T4286] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 [ 899.667729][T19378] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.3634'. [ 901.659644][ T4286] Bluetooth: hci3: command 0x2021 tx timeout [ 902.699456][T19402] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3638'. [ 902.840375][T19406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3641'. [ 903.055076][T19412] device syzkaller0 entered promiscuous mode [ 903.081143][T19425] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3641'. [ 903.095144][T19422] netlink: 'syz.4.3642': attribute type 21 has an invalid length. [ 903.642261][T19438] netlink: 'syz.1.3647': attribute type 39 has an invalid length. [ 904.085289][T19441] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3648'. [ 906.533518][T19441] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3648'. [ 906.940911][T19462] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3661'. [ 908.489388][T19442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3648'. [ 908.500248][T19460] netlink: 4239 bytes leftover after parsing attributes in process `syz.4.3651'. [ 908.642497][T19465] netlink: 'syz.3.3652': attribute type 29 has an invalid length. [ 908.684146][T19465] netlink: 'syz.3.3652': attribute type 29 has an invalid length. [ 908.746009][T19471] netlink: 'syz.3.3652': attribute type 29 has an invalid length. [ 909.069283][T19480] netlink: 'syz.2.3657': attribute type 21 has an invalid length. [ 909.188492][T19480] netlink: 'syz.2.3657': attribute type 6 has an invalid length. [ 909.282191][T19480] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3657'. [ 909.376522][T19488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.389571][T19488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 909.400088][T19488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 909.414989][T19488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.577894][T19512] netlink: 'syz.2.3667': attribute type 3 has an invalid length. [ 910.639531][T19512] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3667'. [ 910.669872][T19515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3666'. [ 910.767009][T19515] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3666'. [ 910.860842][T19516] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3666'. [ 911.299388][T19538] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3672'. [ 913.177611][T19545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3673'. [ 913.204268][T19542] netlink: 'syz.1.3674': attribute type 41 has an invalid length. [ 913.342710][T19568] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 913.987973][T19587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3686'. [ 914.116888][T19599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3686'. [ 914.314559][T19587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3686'. [ 914.419501][T19589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3686'. [ 915.035529][T19609] netlink: 'syz.0.3690': attribute type 3 has an invalid length. [ 915.060535][T19611] netlink: 'syz.0.3690': attribute type 3 has an invalid length. [ 915.069413][T19611] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3690'. [ 915.119319][T19609] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3690'. [ 915.721821][T19620] netlink: 'syz.1.3693': attribute type 10 has an invalid length. [ 916.553828][T19631] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3692'. [ 917.945228][T19664] netlink: 'syz.3.3704': attribute type 17 has an invalid length. [ 917.959463][T19664] netlink: 'syz.3.3704': attribute type 16 has an invalid length. [ 917.967371][T19664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3704'. [ 918.007809][T19668] netlink: 'syz.3.3704': attribute type 2 has an invalid length. [ 918.052000][T19668] netlink: 'syz.3.3704': attribute type 1 has an invalid length. [ 918.076865][T19668] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3704'. [ 918.588490][T19686] netlink: 'syz.3.3710': attribute type 11 has an invalid length. [ 918.629142][T19686] __nla_validate_parse: 2 callbacks suppressed [ 918.629158][T19686] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3710'. [ 918.646288][T19678] delete_channel: no stack [ 918.780877][T19690] netlink: 'syz.1.3711': attribute type 2 has an invalid length. [ 918.817728][T19690] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3711'. [ 919.072109][T19698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3712'. [ 919.109779][T19700] netlink: 'syz.0.3715': attribute type 10 has an invalid length. [ 919.662948][T19723] netlink: 130181 bytes leftover after parsing attributes in process `syz.1.3719'. [ 919.735375][T19728] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3720'. [ 919.771371][T19728] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3720'. [ 919.848518][T19728] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3720'. [ 919.916409][T19728] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3720'. [ 919.965107][T19728] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3720'. [ 919.976170][T19728] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.3720'. [ 920.041790][T19728] validate_nla: 31 callbacks suppressed [ 920.041819][T19728] netlink: 'syz.4.3720': attribute type 27 has an invalid length. [ 920.158761][T19728] netlink: 'syz.4.3720': attribute type 27 has an invalid length. [ 920.201499][T19728] netlink: 'syz.4.3720': attribute type 27 has an invalid length. [ 920.251050][T19728] netlink: 'syz.4.3720': attribute type 27 has an invalid length. [ 920.258244][T19736] team0: Device gre0 is of different type [ 920.286168][T19728] netlink: 'syz.4.3720': attribute type 27 has an invalid length. [ 920.380446][T19728] netlink: 'syz.4.3720': attribute type 27 has an invalid length. [ 920.407960][T19735] netlink: 'syz.1.3725': attribute type 10 has an invalid length. [ 920.408502][T19728] netlink: 'syz.4.3720': attribute type 27 has an invalid length. [ 921.097379][T19735] team0: Device gre0 is of different type [ 921.261951][T19762] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 921.309345][T19762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 925.613774][T19870] ¥: port 1(team0) entered blocking state [ 925.699595][T19870] ¥: port 1(team0) entered disabled state [ 925.752538][T19870] device team0 entered promiscuous mode [ 925.759322][T19870] device team_slave_1 entered promiscuous mode [ 925.790445][T19870] device bridge0 entered promiscuous mode [ 925.823940][T19872] device team0 left promiscuous mode [ 925.861880][T19872] device team_slave_1 left promiscuous mode [ 925.951071][T19872] device bridge0 left promiscuous mode [ 925.959575][T19872] ¥: port 1(team0) entered disabled state [ 926.122863][T19885] netlink: 'syz.4.3749': attribute type 2 has an invalid length. [ 926.156614][T19885] __nla_validate_parse: 30 callbacks suppressed [ 926.156634][T19885] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3749'. [ 926.413255][T19889] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3752'. [ 926.538061][T19899] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3756'. [ 927.643061][T19941] netlink: 'syz.4.3766': attribute type 10 has an invalid length. [ 927.816295][T19941] team0: Port device wlan1 added [ 927.839464][T19946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3766'. [ 928.234972][T19959] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 928.306938][T19959] device bridge_slave_1 left promiscuous mode [ 928.329550][T19959] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.645657][T19965] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3770'. [ 928.871884][T19965] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 928.908464][T19965] CPU: 1 PID: 19965 Comm: syz.2.3770 Not tainted syzkaller #0 [ 928.916007][T19965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 928.926083][T19965] Call Trace: [ 928.929377][T19965] [ 928.932348][T19965] dump_stack_lvl+0x188/0x24e [ 928.937065][T19965] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 928.943269][T19965] ? show_regs_print_info+0x12/0x12 [ 928.948797][T19965] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 928.955100][T19965] sysfs_warn_dup+0x8a/0xa0 [ 928.959636][T19965] sysfs_do_create_link_sd+0xc0/0x110 [ 928.965032][T19965] device_add+0x83b/0x1050 [ 928.969561][T19965] wiphy_register+0x1d8b/0x2aa0 [ 928.974456][T19965] ? cfg80211_event_work+0x40/0x40 [ 928.979594][T19965] ? ieee80211_register_hw+0x2871/0x39f0 [ 928.985250][T19965] ? ieee80211_register_hw+0x2914/0x39f0 [ 928.990910][T19965] ? kasan_check_range+0x1af/0x290 [ 928.996431][T19965] ieee80211_register_hw+0x2d48/0x39f0 [ 929.001974][T19965] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 929.008173][T19965] ? ieee80211_register_hw+0xf71/0x39f0 [ 929.013741][T19965] ? ieee80211_register_hw+0xe71/0x39f0 [ 929.019328][T19965] ? ieee80211_tasklet_handler+0x20/0x20 [ 929.024979][T19965] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 929.030913][T19965] ? __debug_object_init+0xed/0x440 [ 929.036132][T19965] ? memset+0x1e/0x40 [ 929.040653][T19965] ? __hrtimer_init+0x189/0x270 [ 929.045526][T19965] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 929.051386][T19965] ? memcpy+0x3c/0x60 [ 929.055391][T19965] hwsim_new_radio_nl+0xab7/0xc90 [ 929.060541][T19965] genl_family_rcv_msg_doit+0x22f/0x350 [ 929.066116][T19965] ? end_current_label_crit_section+0x170/0x170 [ 929.072476][T19965] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 929.078481][T19965] ? bpf_lsm_capable+0x5/0x10 [ 929.083295][T19965] ? security_capable+0x85/0xb0 [ 929.088288][T19965] genl_rcv_msg+0x601/0x790 [ 929.092899][T19965] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 929.099088][T19965] ? genl_bind+0x360/0x360 [ 929.103752][T19965] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 929.110586][T19965] ? lock_acquire+0x225/0x4a0 [ 929.115313][T19965] netlink_rcv_skb+0x1ef/0x440 [ 929.120107][T19965] ? genl_bind+0x360/0x360 [ 929.124568][T19965] ? netlink_ack+0x1160/0x1160 [ 929.129458][T19965] ? down_read+0x1a8/0x2d0 [ 929.133915][T19965] genl_rcv+0x24/0x40 [ 929.137915][T19965] netlink_unicast+0x7ad/0x920 [ 929.142803][T19965] netlink_sendmsg+0x8ad/0xbd0 [ 929.147779][T19965] ? netlink_getsockopt+0x550/0x550 [ 929.153094][T19965] ? apparmor_socket_sendmsg+0x8a/0x330 [ 929.158664][T19965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 929.164488][T19965] ? security_socket_sendmsg+0x7c/0xa0 [ 929.169974][T19965] ? netlink_getsockopt+0x550/0x550 [ 929.175192][T19965] ____sys_sendmsg+0x5ed/0x9a0 [ 929.180181][T19965] ? __sys_sendmsg_sock+0x30/0x30 [ 929.185233][T19965] ? __import_iovec+0x306/0x510 [ 929.190121][T19965] ? import_iovec+0x6f/0xa0 [ 929.194652][T19965] ___sys_sendmsg+0x2a2/0x360 [ 929.199360][T19965] ? __sys_sendmsg+0x2a0/0x2a0 [ 929.204169][T19965] ? ktime_get+0x7b/0x270 [ 929.208573][T19965] __se_sys_sendmsg+0x1c3/0x2b0 [ 929.213456][T19965] ? __x64_sys_sendmsg+0x80/0x80 [ 929.218452][T19965] ? syscall_enter_from_user_mode+0x2a/0x80 [ 929.224378][T19965] do_syscall_64+0x4c/0xa0 [ 929.228812][T19965] ? clear_bhb_loop+0x60/0xb0 [ 929.233574][T19965] ? clear_bhb_loop+0x60/0xb0 [ 929.238376][T19965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 929.244319][T19965] RIP: 0033:0x7f6fa259e159 [ 929.248751][T19965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.268476][T19965] RSP: 002b:00007f6fa34a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.276916][T19965] RAX: ffffffffffffffda RBX: 00007f6fa2825fa0 RCX: 00007f6fa259e159 [ 929.284989][T19965] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 929.293078][T19965] RBP: 00007f6fa2635024 R08: 0000000000000000 R09: 0000000000000000 [ 929.301097][T19965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.309083][T19965] R13: 00007f6fa2826038 R14: 00007f6fa2825fa0 R15: 00007ffc02642648 [ 929.317094][T19965] [ 930.045358][T19992] netlink: 'syz.3.3777': attribute type 2 has an invalid length. [ 930.074837][T19992] netlink: 183876 bytes leftover after parsing attributes in process `syz.3.3777'. [ 930.099119][T19999] IPv6: NLM_F_CREATE should be specified when creating new route [ 930.181401][T19992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3777'. [ 930.358784][T20007] FAULT_INJECTION: forcing a failure. [ 930.358784][T20007] name failslab, interval 1, probability 0, space 0, times 0 [ 930.379508][T20007] CPU: 1 PID: 20007 Comm: syz.0.3784 Not tainted syzkaller #0 [ 930.387142][T20007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 930.397241][T20007] Call Trace: [ 930.400581][T20007] [ 930.403543][T20007] dump_stack_lvl+0x188/0x24e [ 930.408300][T20007] ? show_regs_print_info+0x12/0x12 [ 930.413560][T20007] ? load_image+0x410/0x410 [ 930.418115][T20007] ? __might_sleep+0xd0/0xd0 [ 930.423030][T20007] ? __lock_acquire+0x7c40/0x7c40 [ 930.428102][T20007] ? __might_sleep+0xd0/0xd0 [ 930.432831][T20007] should_fail_ex+0x390/0x4c0 [ 930.437569][T20007] should_failslab+0x5/0x20 [ 930.442110][T20007] slab_pre_alloc_hook+0x59/0x300 [ 930.447280][T20007] kmem_cache_alloc_lru+0x49/0x2e0 [ 930.452443][T20007] ? sock_alloc_inode+0x24/0xc0 [ 930.458060][T20007] sock_alloc_inode+0x24/0xc0 [ 930.463585][T20007] ? sockfs_init_fs_context+0xa0/0xa0 [ 930.469108][T20007] new_inode_pseudo+0x5f/0x1c0 [ 930.473931][T20007] __sock_create+0x129/0x940 [ 930.478679][T20007] __sys_socketpair+0x232/0x540 [ 930.483582][T20007] __x64_sys_socketpair+0x97/0xb0 [ 930.488630][T20007] do_syscall_64+0x4c/0xa0 [ 930.493848][T20007] ? clear_bhb_loop+0x60/0xb0 [ 930.498548][T20007] ? clear_bhb_loop+0x60/0xb0 [ 930.503337][T20007] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.509253][T20007] RIP: 0033:0x7f43d6f9e159 [ 930.513709][T20007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.533383][T20007] RSP: 002b:00007f43d7dbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 930.541818][T20007] RAX: ffffffffffffffda RBX: 00007f43d7225fa0 RCX: 00007f43d6f9e159 [ 930.550008][T20007] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 930.558045][T20007] RBP: 00007f43d7dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 930.566041][T20007] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 930.574028][T20007] R13: 00007f43d7226038 R14: 00007f43d7225fa0 R15: 00007ffcf7566398 [ 930.582035][T20007] [ 930.672978][T20013] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3785'. [ 930.703937][T20020] netlink: 'syz.1.3788': attribute type 2 has an invalid length. [ 930.857162][T20024] delete_channel: no stack [ 930.872160][T20007] socket: no more sockets [ 931.489565][T20043] can: request_module (can-proto-0) failed. [ 931.724324][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.730872][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.816296][T20049] netlink: 'syz.3.3794': attribute type 12 has an invalid length. [ 931.834541][T20046] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3793'. [ 932.389873][T20072] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3800'. [ 933.141280][T20093] FAULT_INJECTION: forcing a failure. [ 933.141280][T20093] name failslab, interval 1, probability 0, space 0, times 0 [ 933.154988][T20093] CPU: 1 PID: 20093 Comm: syz.4.3804 Not tainted syzkaller #0 [ 933.163358][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 933.173453][T20093] Call Trace: [ 933.176745][T20093] [ 933.179777][T20093] dump_stack_lvl+0x188/0x24e [ 933.184569][T20093] ? show_regs_print_info+0x12/0x12 [ 933.189794][T20093] ? load_image+0x410/0x410 [ 933.194323][T20093] ? __might_sleep+0xd0/0xd0 [ 933.198928][T20093] ? __lock_acquire+0x7c40/0x7c40 [ 933.203993][T20093] should_fail_ex+0x390/0x4c0 [ 933.208745][T20093] should_failslab+0x5/0x20 [ 933.213276][T20093] slab_pre_alloc_hook+0x59/0x300 [ 933.218320][T20093] ? lockdep_softirqs_off+0x430/0x430 [ 933.223741][T20093] kmem_cache_alloc+0x56/0x2f0 [ 933.228538][T20093] ? security_inode_alloc+0x30/0x110 [ 933.233858][T20093] security_inode_alloc+0x30/0x110 [ 933.238995][T20093] inode_init_always+0x910/0xc90 [ 933.243948][T20093] new_inode_pseudo+0x91/0x1c0 [ 933.248727][T20093] __sock_create+0x129/0x940 [ 933.253342][T20093] __sys_socketpair+0x232/0x540 [ 933.258220][T20093] __x64_sys_socketpair+0x97/0xb0 [ 933.263261][T20093] do_syscall_64+0x4c/0xa0 [ 933.267868][T20093] ? clear_bhb_loop+0x60/0xb0 [ 933.272559][T20093] ? clear_bhb_loop+0x60/0xb0 [ 933.277744][T20093] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 933.283664][T20093] RIP: 0033:0x7f918899e159 [ 933.288220][T20093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.308013][T20093] RSP: 002b:00007f91898fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 933.316445][T20093] RAX: ffffffffffffffda RBX: 00007f9188c26090 RCX: 00007f918899e159 [ 933.324604][T20093] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 933.332769][T20093] RBP: 00007f91898fb090 R08: 0000000000000000 R09: 0000000000000000 [ 933.340785][T20093] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 933.348889][T20093] R13: 00007f9188c26128 R14: 00007f9188c26090 R15: 00007ffe6933ea38 [ 933.356913][T20093] [ 933.380818][T20093] socket: no more sockets [ 933.526361][T20087] netlink: 'syz.1.3803': attribute type 19 has an invalid length. [ 933.737751][T20101] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3807'. [ 934.007341][T20104] netlink: 'syz.3.3811': attribute type 27 has an invalid length. [ 934.295492][T20115] netlink: 'syz.4.3812': attribute type 21 has an invalid length. [ 934.900134][T20131] FAULT_INJECTION: forcing a failure. [ 934.900134][T20131] name failslab, interval 1, probability 0, space 0, times 0 [ 934.925503][T20131] CPU: 1 PID: 20131 Comm: syz.1.3819 Not tainted syzkaller #0 [ 934.933131][T20131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 934.943212][T20131] Call Trace: [ 934.946499][T20131] [ 934.949463][T20131] dump_stack_lvl+0x188/0x24e [ 934.954339][T20131] ? show_regs_print_info+0x12/0x12 [ 934.959553][T20131] ? load_image+0x410/0x410 [ 934.964073][T20131] ? __might_sleep+0xd0/0xd0 [ 934.968673][T20131] ? __lock_acquire+0x7c40/0x7c40 [ 934.973806][T20131] should_fail_ex+0x390/0x4c0 [ 934.978512][T20131] should_failslab+0x5/0x20 [ 934.983024][T20131] slab_pre_alloc_hook+0x59/0x300 [ 934.988062][T20131] kmem_cache_alloc+0x56/0x2f0 [ 934.992863][T20131] ? sk_prot_alloc+0x57/0x210 [ 934.997583][T20131] sk_prot_alloc+0x57/0x210 [ 935.002222][T20131] ? sk_alloc+0x20/0x330 [ 935.006689][T20131] sk_alloc+0x36/0x330 [ 935.010799][T20131] tipc_sk_create+0xe6/0x2930 [ 935.015561][T20131] ? rcu_read_unlock+0x8c/0xa0 [ 935.020355][T20131] ? __lock_acquire+0x7c40/0x7c40 [ 935.025416][T20131] __sock_create+0x49a/0x940 [ 935.030165][T20131] __sys_socketpair+0x232/0x540 [ 935.035084][T20131] __x64_sys_socketpair+0x97/0xb0 [ 935.040187][T20131] do_syscall_64+0x4c/0xa0 [ 935.044641][T20131] ? clear_bhb_loop+0x60/0xb0 [ 935.049438][T20131] ? clear_bhb_loop+0x60/0xb0 [ 935.054158][T20131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 935.060211][T20131] RIP: 0033:0x7efc4dd9e159 [ 935.064834][T20131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.085623][T20131] RSP: 002b:00007efc4ec88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 935.094239][T20131] RAX: ffffffffffffffda RBX: 00007efc4e026090 RCX: 00007efc4dd9e159 [ 935.102242][T20131] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 935.110588][T20131] RBP: 00007efc4ec88090 R08: 0000000000000000 R09: 0000000000000000 [ 935.118573][T20131] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 935.126749][T20131] R13: 00007efc4e026128 R14: 00007efc4e026090 R15: 00007ffd18503ed8 [ 935.134935][T20131] [ 935.993414][T20141] device sit0 left promiscuous mode [ 936.674548][T20163] device syzkaller0 left promiscuous mode [ 936.738238][T20165] netlink: 'syz.2.3829': attribute type 21 has an invalid length. [ 936.796526][T20168] netlink: 'syz.0.3830': attribute type 28 has an invalid length. [ 936.834388][T20168] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3830'. [ 937.182522][T20179] netlink: 'syz.2.3832': attribute type 16 has an invalid length. [ 937.214023][T20179] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3832'. [ 937.225843][T20180] netlink: 'syz.2.3832': attribute type 16 has an invalid length. [ 937.288505][T20180] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3832'. [ 937.298757][T20182] sock: sock_set_timeout: `syz.0.3833' (pid 20182) tries to set negative timeout [ 937.623896][T20186] FAULT_INJECTION: forcing a failure. [ 937.623896][T20186] name failslab, interval 1, probability 0, space 0, times 0 [ 937.687205][T20184] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3834'. [ 937.703481][T20186] CPU: 0 PID: 20186 Comm: syz.2.3835 Not tainted syzkaller #0 [ 937.711074][T20186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.721182][T20186] Call Trace: [ 937.724506][T20186] [ 937.727471][T20186] dump_stack_lvl+0x188/0x24e [ 937.732205][T20186] ? show_regs_print_info+0x12/0x12 [ 937.737456][T20186] ? load_image+0x410/0x410 [ 937.742006][T20186] ? __might_sleep+0xd0/0xd0 [ 937.746617][T20186] ? __lock_acquire+0x7c40/0x7c40 [ 937.751682][T20186] should_fail_ex+0x390/0x4c0 [ 937.756395][T20186] should_failslab+0x5/0x20 [ 937.760920][T20186] slab_pre_alloc_hook+0x59/0x300 [ 937.765964][T20186] ? __lock_acquire+0x7c40/0x7c40 [ 937.771010][T20186] ? security_sk_alloc+0x47/0x130 [ 937.776050][T20186] __kmem_cache_alloc_node+0x4f/0x270 [ 937.781458][T20186] ? security_sk_alloc+0x47/0x130 [ 937.786498][T20186] __kmalloc+0xa3/0x240 [ 937.790677][T20186] security_sk_alloc+0x47/0x130 [ 937.795587][T20186] sk_prot_alloc+0x101/0x210 [ 937.800216][T20186] sk_alloc+0x36/0x330 [ 937.804658][T20186] tipc_sk_create+0xe6/0x2930 [ 937.809440][T20186] ? rcu_read_unlock+0x8c/0xa0 [ 937.814226][T20186] ? __lock_acquire+0x7c40/0x7c40 [ 937.819276][T20186] __sock_create+0x49a/0x940 [ 937.824455][T20186] __sys_socketpair+0x232/0x540 [ 937.829328][T20186] __x64_sys_socketpair+0x97/0xb0 [ 937.834372][T20186] do_syscall_64+0x4c/0xa0 [ 937.838830][T20186] ? clear_bhb_loop+0x60/0xb0 [ 937.843615][T20186] ? clear_bhb_loop+0x60/0xb0 [ 937.848318][T20186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 937.854404][T20186] RIP: 0033:0x7f6fa259e159 [ 937.858838][T20186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.878572][T20186] RSP: 002b:00007f6fa34a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 937.887092][T20186] RAX: ffffffffffffffda RBX: 00007f6fa2825fa0 RCX: 00007f6fa259e159 [ 937.895078][T20186] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 937.903320][T20186] RBP: 00007f6fa34a3090 R08: 0000000000000000 R09: 0000000000000000 [ 937.911301][T20186] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 937.919280][T20186] R13: 00007f6fa2826038 R14: 00007f6fa2825fa0 R15: 00007ffc02642648 [ 937.927275][T20186] [ 938.323023][T20190] netlink: 'syz.1.3834': attribute type 25 has an invalid length. [ 938.403594][T20190] netlink: 'syz.1.3834': attribute type 6 has an invalid length. [ 938.538707][T20204] device ipvlan0 entered promiscuous mode [ 939.924714][T20221] netlink: 'syz.4.3844': attribute type 2 has an invalid length. [ 939.989432][T20221] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3844'. [ 940.123308][T20219] netlink: 'syz.0.3843': attribute type 21 has an invalid length. [ 940.194338][T20219] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 940.359565][T20219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.281731][T20240] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3848'. [ 941.427493][T20240] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3848'. [ 941.827499][T20250] netlink: 'syz.2.3853': attribute type 3 has an invalid length. [ 941.915479][T20250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3853'. [ 942.186795][T20275] dvmrp1: tun_chr_ioctl cmd 1074025694 [ 943.098471][T20296] netlink: 279 bytes leftover after parsing attributes in process `syz.4.3863'. [ 943.306482][T20291] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3863'. [ 943.724312][T20311] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3867'. [ 944.471352][T20342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3870'. [ 944.636321][T20345] netlink: 'syz.1.3872': attribute type 11 has an invalid length. [ 944.736073][T20345] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3872'. [ 944.926092][T20344] netlink: 'syz.1.3872': attribute type 11 has an invalid length. [ 944.946618][T20344] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3872'. [ 945.693966][T20361] netlink: 'syz.2.3875': attribute type 3 has an invalid length. [ 945.739385][T20361] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3875'. [ 946.031509][T20343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 946.350024][T20368] FAULT_INJECTION: forcing a failure. [ 946.350024][T20368] name failslab, interval 1, probability 0, space 0, times 0 [ 946.396547][T20368] CPU: 1 PID: 20368 Comm: syz.3.3879 Not tainted syzkaller #0 [ 946.404202][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 946.414307][T20368] Call Trace: [ 946.417881][T20368] [ 946.420882][T20368] dump_stack_lvl+0x188/0x24e [ 946.425600][T20368] ? show_regs_print_info+0x12/0x12 [ 946.430819][T20368] ? load_image+0x410/0x410 [ 946.435361][T20368] ? __might_sleep+0xd0/0xd0 [ 946.439966][T20368] ? __lock_acquire+0x7c40/0x7c40 [ 946.445117][T20368] should_fail_ex+0x390/0x4c0 [ 946.449934][T20368] should_failslab+0x5/0x20 [ 946.454557][T20368] slab_pre_alloc_hook+0x59/0x300 [ 946.459643][T20368] kmem_cache_alloc+0x56/0x2f0 [ 946.464526][T20368] ? security_file_alloc+0x30/0x110 [ 946.469847][T20368] security_file_alloc+0x30/0x110 [ 946.475023][T20368] __alloc_file+0xc2/0x230 [ 946.479601][T20368] alloc_empty_file+0x90/0x180 [ 946.484628][T20368] alloc_file+0x5b/0x5f0 [ 946.488907][T20368] alloc_file_pseudo+0x180/0x200 [ 946.494046][T20368] ? alloc_empty_file_noaccount+0x80/0x80 [ 946.500079][T20368] ? tipc_node_get_capabilities+0xea/0x120 [ 946.505915][T20368] sock_alloc_file+0xb3/0x240 [ 946.510624][T20368] __sys_socketpair+0x2cc/0x540 [ 946.515951][T20368] __x64_sys_socketpair+0x97/0xb0 [ 946.521022][T20368] do_syscall_64+0x4c/0xa0 [ 946.525526][T20368] ? clear_bhb_loop+0x60/0xb0 [ 946.530256][T20368] ? clear_bhb_loop+0x60/0xb0 [ 946.534981][T20368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.541329][T20368] RIP: 0033:0x7efe93d9e159 [ 946.545763][T20368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.565644][T20368] RSP: 002b:00007efe94baa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 946.574163][T20368] RAX: ffffffffffffffda RBX: 00007efe94025fa0 RCX: 00007efe93d9e159 [ 946.582162][T20368] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 946.590329][T20368] RBP: 00007efe94baa090 R08: 0000000000000000 R09: 0000000000000000 [ 946.598311][T20368] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000002 [ 946.606638][T20368] R13: 00007efe94026038 R14: 00007efe94025fa0 R15: 00007fffcd537a58 [ 946.614648][T20368] [ 947.249798][T20388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3885'. [ 947.297686][T20388] netlink: 'syz.3.3885': attribute type 10 has an invalid length. [ 947.634803][T20388] team0: Device vxcan1 is of different type [ 948.921945][T20424] netlink: 'syz.3.3902': attribute type 1 has an invalid length. [ 949.920536][T20436] FAULT_INJECTION: forcing a failure. [ 949.920536][T20436] name failslab, interval 1, probability 0, space 0, times 0 [ 949.967372][T20436] CPU: 0 PID: 20436 Comm: syz.2.3895 Not tainted syzkaller #0 [ 949.975349][T20436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.985544][T20436] Call Trace: [ 949.988865][T20436] [ 949.991832][T20436] dump_stack_lvl+0x188/0x24e [ 949.997005][T20436] ? show_regs_print_info+0x12/0x12 [ 950.002256][T20436] ? load_image+0x410/0x410 [ 950.006819][T20436] ? __might_sleep+0xd0/0xd0 [ 950.011450][T20436] ? __lock_acquire+0x7c40/0x7c40 [ 950.016619][T20436] should_fail_ex+0x390/0x4c0 [ 950.021356][T20436] should_failslab+0x5/0x20 [ 950.025904][T20436] slab_pre_alloc_hook+0x59/0x300 [ 950.031022][T20436] kmem_cache_alloc_lru+0x49/0x2e0 [ 950.036197][T20436] ? __d_alloc+0x2e/0x6e0 [ 950.040649][T20436] ? alloc_file+0x84/0x5f0 [ 950.045193][T20436] __d_alloc+0x2e/0x6e0 [ 950.049391][T20436] ? d_alloc_pseudo+0xe/0x70 [ 950.054017][T20436] d_alloc_pseudo+0x19/0x70 [ 950.058654][T20436] alloc_file_pseudo+0xe0/0x200 [ 950.063558][T20436] ? alloc_empty_file_noaccount+0x80/0x80 [ 950.069317][T20436] ? tipc_node_get_capabilities+0xea/0x120 [ 950.075199][T20436] sock_alloc_file+0xb3/0x240 [ 950.080890][T20436] __sys_socketpair+0x372/0x540 [ 950.085828][T20436] __x64_sys_socketpair+0x97/0xb0 [ 950.090913][T20436] do_syscall_64+0x4c/0xa0 [ 950.095634][T20436] ? clear_bhb_loop+0x60/0xb0 [ 950.100712][T20436] ? clear_bhb_loop+0x60/0xb0 [ 950.105446][T20436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 950.111473][T20436] RIP: 0033:0x7f6fa259e159 [ 950.115934][T20436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.135677][T20436] RSP: 002b:00007f6fa34a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 950.144216][T20436] RAX: ffffffffffffffda RBX: 00007f6fa2825fa0 RCX: 00007f6fa259e159 [ 950.152591][T20436] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 950.160783][T20436] RBP: 00007f6fa34a3090 R08: 0000000000000000 R09: 0000000000000000 [ 950.168887][T20436] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000002 [ 950.176919][T20436] R13: 00007f6fa2826038 R14: 00007f6fa2825fa0 R15: 00007ffc02642648 [ 950.185119][T20436] [ 950.354620][T20452] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3899'. [ 951.555969][T20494] FAULT_INJECTION: forcing a failure. [ 951.555969][T20494] name failslab, interval 1, probability 0, space 0, times 0 [ 951.596617][T20494] CPU: 1 PID: 20494 Comm: syz.4.3912 Not tainted syzkaller #0 [ 951.604256][T20494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.614355][T20494] Call Trace: [ 951.617677][T20494] [ 951.620652][T20494] dump_stack_lvl+0x188/0x24e [ 951.625394][T20494] ? show_regs_print_info+0x12/0x12 [ 951.630646][T20494] ? load_image+0x410/0x410 [ 951.635206][T20494] ? __might_sleep+0xd0/0xd0 [ 951.639842][T20494] ? __lock_acquire+0x7c40/0x7c40 [ 951.645113][T20494] should_fail_ex+0x390/0x4c0 [ 951.650021][T20494] should_failslab+0x5/0x20 [ 951.654581][T20494] slab_pre_alloc_hook+0x59/0x300 [ 951.659651][T20494] kmem_cache_alloc+0x56/0x2f0 [ 951.664457][T20494] ? __alloc_file+0x25/0x230 [ 951.669166][T20494] __alloc_file+0x25/0x230 [ 951.673694][T20494] alloc_empty_file+0x90/0x180 [ 951.678605][T20494] alloc_file+0x5b/0x5f0 [ 951.682913][T20494] alloc_file_pseudo+0x180/0x200 [ 951.688083][T20494] ? alloc_empty_file_noaccount+0x80/0x80 [ 951.693880][T20494] ? tipc_node_get_capabilities+0xea/0x120 [ 951.699771][T20494] sock_alloc_file+0xb3/0x240 [ 951.705052][T20494] __sys_socketpair+0x372/0x540 [ 951.709955][T20494] __x64_sys_socketpair+0x97/0xb0 [ 951.715028][T20494] do_syscall_64+0x4c/0xa0 [ 951.719490][T20494] ? clear_bhb_loop+0x60/0xb0 [ 951.724191][T20494] ? clear_bhb_loop+0x60/0xb0 [ 951.728913][T20494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.734909][T20494] RIP: 0033:0x7f918899e159 [ 951.739343][T20494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.759850][T20494] RSP: 002b:00007f918991c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 951.768455][T20494] RAX: ffffffffffffffda RBX: 00007f9188c25fa0 RCX: 00007f918899e159 [ 951.776464][T20494] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 951.784481][T20494] RBP: 00007f918991c090 R08: 0000000000000000 R09: 0000000000000000 [ 951.792512][T20494] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000002 [ 951.800552][T20494] R13: 00007f9188c26038 R14: 00007f9188c25fa0 R15: 00007ffe6933ea38 [ 951.808626][T20494] [ 951.937095][T20508] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3915'. [ 952.411929][T20518] netlink: 'syz.2.3917': attribute type 1 has an invalid length. [ 952.475684][T20518] netlink: 6710 bytes leftover after parsing attributes in process `syz.2.3917'. [ 953.186691][T20531] netlink: 'syz.1.3922': attribute type 11 has an invalid length. [ 953.333870][T20531] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3922'. [ 953.377821][T20531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 953.627685][T20544] FAULT_INJECTION: forcing a failure. [ 953.627685][T20544] name failslab, interval 1, probability 0, space 0, times 0 [ 953.654981][T20544] CPU: 1 PID: 20544 Comm: syz.2.3926 Not tainted syzkaller #0 [ 953.662610][T20544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.672713][T20544] Call Trace: [ 953.676026][T20544] [ 953.678980][T20544] dump_stack_lvl+0x188/0x24e [ 953.683803][T20544] ? show_regs_print_info+0x12/0x12 [ 953.689084][T20544] ? load_image+0x410/0x410 [ 953.693627][T20544] ? __might_sleep+0xd0/0xd0 [ 953.698258][T20544] ? __lock_acquire+0x7c40/0x7c40 [ 953.703420][T20544] should_fail_ex+0x390/0x4c0 [ 953.708143][T20544] should_failslab+0x5/0x20 [ 953.712673][T20544] slab_pre_alloc_hook+0x59/0x300 [ 953.717719][T20544] kmem_cache_alloc+0x56/0x2f0 [ 953.722526][T20544] ? security_file_alloc+0x30/0x110 [ 953.727865][T20544] security_file_alloc+0x30/0x110 [ 953.733048][T20544] __alloc_file+0xc2/0x230 [ 953.737505][T20544] alloc_empty_file+0x90/0x180 [ 953.742293][T20544] alloc_file+0x5b/0x5f0 [ 953.746554][T20544] alloc_file_pseudo+0x180/0x200 [ 953.751519][T20544] ? alloc_empty_file_noaccount+0x80/0x80 [ 953.757276][T20544] ? tipc_node_get_capabilities+0xea/0x120 [ 953.763160][T20544] sock_alloc_file+0xb3/0x240 [ 953.767857][T20544] __sys_socketpair+0x372/0x540 [ 953.772769][T20544] __x64_sys_socketpair+0x97/0xb0 [ 953.777819][T20544] do_syscall_64+0x4c/0xa0 [ 953.782437][T20544] ? clear_bhb_loop+0x60/0xb0 [ 953.787139][T20544] ? clear_bhb_loop+0x60/0xb0 [ 953.791837][T20544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 953.797792][T20544] RIP: 0033:0x7f6fa259e159 [ 953.802292][T20544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.822195][T20544] RSP: 002b:00007f6fa3482028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 953.830653][T20544] RAX: ffffffffffffffda RBX: 00007f6fa2826090 RCX: 00007f6fa259e159 [ 953.838748][T20544] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 953.846772][T20544] RBP: 00007f6fa3482090 R08: 0000000000000000 R09: 0000000000000000 [ 953.854866][T20544] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000002 [ 953.862852][T20544] R13: 00007f6fa2826128 R14: 00007f6fa2826090 R15: 00007ffc02642648 [ 953.870852][T20544] [ 953.881535][T20547] netlink: 'syz.3.3927': attribute type 3 has an invalid length. [ 953.889417][T20547] netlink: 'syz.3.3927': attribute type 1 has an invalid length. [ 953.898648][T20547] netlink: 'syz.3.3927': attribute type 2 has an invalid length. [ 953.942024][T20547] netlink: 'syz.3.3927': attribute type 4 has an invalid length. [ 953.952025][T20547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3927'. [ 953.963836][T20549] netlink: 'syz.4.3928': attribute type 10 has an invalid length. [ 953.983418][T20549] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3928'. [ 954.004127][T20549] batman_adv: batadv0: Adding interface: virt_wifi0 [ 954.019075][T20549] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 954.066672][T20549] batman_adv: batadv0: Interface activated: virt_wifi0 [ 954.219291][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 954.276882][T20557] netlink: 'syz.3.3933': attribute type 3 has an invalid length. [ 954.285743][T20557] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3933'. [ 954.346490][T20562] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3930'. [ 954.568637][T20571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3932'. [ 954.593522][T20570] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3932'. [ 954.816398][T20577] netlink: 'syz.3.3936': attribute type 3 has an invalid length. [ 954.838843][T20577] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 954.859410][T20577] syzkaller1: persist enabled [ 955.062544][T20597] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 955.158614][T20600] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 955.197761][T20591] syzkaller1: tun_chr_ioctl cmd 2147767519 [ 955.265244][T20604] netlink: 'syz.1.3940': attribute type 10 has an invalid length. [ 955.284144][T20604] openvswitch: netlink: Flow key attr not present in new flow. [ 958.339754][T20616] FAULT_INJECTION: forcing a failure. [ 958.339754][T20616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.401416][T20616] CPU: 1 PID: 20616 Comm: syz.2.3943 Not tainted syzkaller #0 [ 958.408963][T20616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 958.415806][T20611] netlink: 'syz.0.3951': attribute type 1 has an invalid length. [ 958.419040][T20616] Call Trace: [ 958.419054][T20616] [ 958.419063][T20616] dump_stack_lvl+0x188/0x24e [ 958.419106][T20616] ? show_regs_print_info+0x12/0x12 [ 958.419136][T20616] ? load_image+0x410/0x410 [ 958.419165][T20616] ? __lock_acquire+0x7c40/0x7c40 [ 958.419214][T20616] ? snprintf+0xe5/0x140 [ 958.419247][T20616] should_fail_ex+0x390/0x4c0 [ 958.419283][T20616] _copy_to_user+0x2c/0x130 [ 958.419308][T20616] simple_read_from_buffer+0xe3/0x150 [ 958.419336][T20616] proc_fail_nth_read+0x1a6/0x220 [ 958.476927][T20616] ? proc_fault_inject_write+0x310/0x310 [ 958.483141][T20616] ? fsnotify_perm+0x248/0x550 [ 958.487945][T20616] ? proc_fault_inject_write+0x310/0x310 [ 958.493705][T20616] vfs_read+0x2db/0x960 [ 958.497964][T20616] ? kernel_read+0x1e0/0x1e0 [ 958.502785][T20616] ? __fget_files+0x28/0x460 [ 958.507446][T20616] ? __fget_files+0x3fc/0x460 [ 958.512191][T20616] ? __fdget_pos+0x2ae/0x360 [ 958.516997][T20616] ? ksys_read+0x70/0x260 [ 958.521368][T20616] ksys_read+0x14d/0x260 [ 958.525653][T20616] ? vfs_write+0x9a0/0x9a0 [ 958.530154][T20616] ? lockdep_hardirqs_on+0x94/0x140 [ 958.535564][T20616] do_syscall_64+0x4c/0xa0 [ 958.540017][T20616] ? clear_bhb_loop+0x60/0xb0 [ 958.544729][T20616] ? clear_bhb_loop+0x60/0xb0 [ 958.549900][T20616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 958.555854][T20616] RIP: 0033:0x7f6fa255e98e [ 958.560301][T20616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 958.580205][T20616] RSP: 002b:00007f6fa34a2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.588658][T20616] RAX: ffffffffffffffda RBX: 00007f6fa34a36c0 RCX: 00007f6fa255e98e [ 958.596656][T20616] RDX: 000000000000000f RSI: 00007f6fa34a30a0 RDI: 0000000000000004 [ 958.604915][T20616] RBP: 00007f6fa34a3090 R08: 0000000000000000 R09: 0000000000000000 [ 958.613317][T20616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 958.621408][T20616] R13: 00007f6fa2826038 R14: 00007f6fa2825fa0 R15: 00007ffc02642648 [ 958.629435][T20616] [ 958.705939][T20620] netlink: 'syz.1.3942': attribute type 3 has an invalid length. [ 958.726591][T20620] __nla_validate_parse: 2 callbacks suppressed [ 958.726615][T20620] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3942'. [ 960.726805][T20648] netlink: 'syz.4.3950': attribute type 3 has an invalid length. [ 960.738220][T20648] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3950'. [ 961.004270][T20667] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3953'. [ 961.250891][T20683] device lo entered promiscuous mode [ 961.287818][T20683] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 961.425198][T20682] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3955'. [ 961.616487][T20702] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3959'. [ 961.700327][T20689] netlink: 'syz.3.3957': attribute type 21 has an invalid length. [ 961.701281][T20703] netlink: 'syz.2.3959': attribute type 1 has an invalid length. [ 961.711697][T20689] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3957'. [ 961.743839][T20689] netlink: 'syz.3.3957': attribute type 4 has an invalid length. [ 961.769340][T20689] netlink: 'syz.3.3957': attribute type 5 has an invalid length. [ 961.776023][T20703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3959'. [ 961.801904][T20689] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3957'. [ 963.134485][T20741] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 963.142382][T20741] #PF: supervisor instruction fetch in kernel mode [ 963.148915][T20741] #PF: error_code(0x0010) - not-present page [ 963.154924][T20741] PGD 4c857067 P4D 4c857067 PUD 0 [ 963.160089][T20741] Oops: 0010 [#1] PREEMPT SMP KASAN [ 963.165633][T20741] CPU: 1 PID: 20741 Comm: syz.1.3969 Not tainted syzkaller #0 [ 963.173307][T20741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.183400][T20741] RIP: 0010:0x0 [ 963.186902][T20741] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 963.194364][T20741] RSP: 0018:ffffc900052d7498 EFLAGS: 00010246 [ 963.200465][T20741] RAX: 1ffffffff1629da7 RBX: 1ffff92000a5aea4 RCX: 0000000000000001 [ 963.208451][T20741] RDX: ffffc900052d7540 RSI: 0000000000000001 RDI: ffff888059966000 [ 963.216432][T20741] RBP: ffffc900052d75b0 R08: ffff88805996603f R09: 1ffff1100b32cc07 [ 963.224434][T20741] R10: dffffc0000000000 R11: ffffed100b32cc08 R12: ffffe8ffffd58f20 [ 963.232512][T20741] R13: ffffffff8b14ed38 R14: 0000000000000000 R15: ffff888059966000 [ 963.240496][T20741] FS: 00007efc4eca96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 963.249435][T20741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.256024][T20741] CR2: ffffffffffffffd6 CR3: 0000000031057000 CR4: 00000000003506e0 [ 963.264201][T20741] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 963.272198][T20741] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 963.280185][T20741] Call Trace: [ 963.283558][T20741] [ 963.286496][T20741] bond_xdp_xmit+0x31e/0x550 [ 963.291186][T20741] ? bond_xdp_xmit+0x94/0x550 [ 963.295878][T20741] ? bond_xdp+0x8c0/0x8c0 [ 963.300219][T20741] bq_xmit_all+0xca9/0x1120 [ 963.305130][T20741] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 963.310890][T20741] ? perf_trace_preemptirq_template+0x268/0x320 [ 963.317189][T20741] ? irqentry_enter+0x33/0x50 [ 963.321897][T20741] ? __dev_flush+0x1b0/0x1b0 [ 963.326503][T20741] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 963.332496][T20741] ? lock_chain_count+0x20/0x20 [ 963.337361][T20741] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 963.343526][T20741] ? lockdep_hardirqs_on+0x94/0x140 [ 963.348735][T20741] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 963.354990][T20741] __dev_flush+0xbf/0x1b0 [ 963.359340][T20741] xdp_do_flush+0xa/0x20 [ 963.363638][T20741] bpf_test_run_xdp_live+0x1549/0x1a90 [ 963.369132][T20741] ? 0xffffffffa0004440 [ 963.373293][T20741] ? text_poke_copy+0x7b/0x90 [ 963.378022][T20741] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 963.384194][T20741] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 963.389853][T20741] ? xdp_convert_md_to_buff+0x330/0x330 [ 963.395434][T20741] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 963.401703][T20741] ? xdp_convert_md_to_buff+0x5b/0x330 [ 963.407169][T20741] bpf_prog_test_run_xdp+0x757/0xf80 [ 963.412467][T20741] ? __lock_acquire+0x7c40/0x7c40 [ 963.417513][T20741] ? dev_put+0x80/0x80 [ 963.421598][T20741] ? dev_put+0x80/0x80 [ 963.425848][T20741] bpf_prog_test_run+0x31c/0x390 [ 963.430892][T20741] __sys_bpf+0x62b/0x780 [ 963.435153][T20741] ? bpf_link_show_fdinfo+0x380/0x380 [ 963.440544][T20741] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 963.446805][T20741] __x64_sys_bpf+0x78/0x90 [ 963.451230][T20741] do_syscall_64+0x4c/0xa0 [ 963.455744][T20741] ? clear_bhb_loop+0x60/0xb0 [ 963.460433][T20741] ? clear_bhb_loop+0x60/0xb0 [ 963.465127][T20741] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.471048][T20741] RIP: 0033:0x7efc4dd9e159 [ 963.475472][T20741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.495189][T20741] RSP: 002b:00007efc4eca9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 963.503735][T20741] RAX: ffffffffffffffda RBX: 00007efc4e025fa0 RCX: 00007efc4dd9e159 [ 963.511801][T20741] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 963.519870][T20741] RBP: 00007efc4de35024 R08: 0000000000000000 R09: 0000000000000000 [ 963.527846][T20741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.535823][T20741] R13: 00007efc4e026038 R14: 00007efc4e025fa0 R15: 00007ffd18503ed8 [ 963.543808][T20741] [ 963.546882][T20741] Modules linked in: [ 963.550953][T20741] CR2: 0000000000000000 [ 963.555122][T20741] ---[ end trace 0000000000000000 ]--- [ 963.560584][T20741] RIP: 0010:0x0 [ 963.564067][T20741] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 963.571438][T20741] RSP: 0018:ffffc900052d7498 EFLAGS: 00010246 [ 963.577518][T20741] RAX: 1ffffffff1629da7 RBX: 1ffff92000a5aea4 RCX: 0000000000000001 [ 963.585499][T20741] RDX: ffffc900052d7540 RSI: 0000000000000001 RDI: ffff888059966000 [ 963.593498][T20741] RBP: ffffc900052d75b0 R08: ffff88805996603f R09: 1ffff1100b32cc07 [ 963.601498][T20741] R10: dffffc0000000000 R11: ffffed100b32cc08 R12: ffffe8ffffd58f20 [ 963.609499][T20741] R13: ffffffff8b14ed38 R14: 0000000000000000 R15: ffff888059966000 [ 963.617476][T20741] FS: 00007efc4eca96c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 963.626416][T20741] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 963.633010][T20741] CR2: ffffffffffffffd6 CR3: 0000000031057000 CR4: 00000000003506e0 [ 963.640996][T20741] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 963.648978][T20741] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 963.656998][T20741] Kernel panic - not syncing: Fatal exception in interrupt [ 963.664312][T20741] Kernel Offset: disabled [ 963.668634][T20741] Rebooting in 86400 seconds..