last executing test programs: 1m53.330631618s ago: executing program 1 (id=2758): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 1m52.744097347s ago: executing program 1 (id=2760): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1m51.460066318s ago: executing program 1 (id=2769): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000336ca73ff35e329fe910"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e030000000000"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) socket$kcm(0x1e, 0x1, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 1m50.378968643s ago: executing program 1 (id=2775): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x20008000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000118120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1m48.192068153s ago: executing program 1 (id=2776): socket$kcm(0x10, 0x2, 0x4) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) sendmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) (async) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000, @rand_addr=0x2}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x88}]}}}, @ip_tos_u8={{0x11}}], 0x88}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001d00)={&(0x7f0000000b00)="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", &(0x7f0000001b00)=""/63, &(0x7f0000001b40)="e905a332092309bcb0bbd42e3eae595c2a2c75c6f0125c1c61a37432ab83b7ea4653c54a0fa33a0e0cd3910bed59f676e35085e0dc2b3569d7ad636f2f9b32ae2ee1c1e819ca714936ef88460ac1aabb6bd600df65cc27516accdc764ec61e807363d8aa4a470c44ea524177b722c3d9655b51f01b2868db9db4c5aa3bcf0eca8cacb03679d37359d96b6e7490efac513af4ab2adbc5eb6cfb1bd541732cdd36f5dc5e28bced1ec6bcdf27e642", &(0x7f0000001c00)="191c59ec6c444207275b394ae4ffbd3519bf7ef306bb39fe4eb1793dc8eb4102e20cab949f85e3a38436d297fdf810491b22aa677be4350ce9f3b39fbe6c4cb0aa811b232fe5add7e15a6d2d96083ecafec0ec3231538c8d96637182b77b805aafe17ae4eec1ca814a988b69dd7ebf4c488dad500ac2f4c2855a9dbf13386967ca4c3c8dc1a291f8da023fd478bfef9bd9d376ea4a8242af2e04612de1a28642d1659c1dc22f4ca1ddb6f52ddd2b59168ab6ff3432c9a617dd37b9d89fffc4e74cb91a2b90ddb1d697f01fe0a1bf5a2358a9fc89292cbcb18284517f11c0f7dbed45383e6de7225fff6acf04", 0x9, r0, 0x4}, 0x38) 1m47.932131841s ago: executing program 1 (id=2781): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3ee901"], 0x9a) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m32.551434736s ago: executing program 32 (id=2781): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11200, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8000, 0x1}, 0x50) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3ee901"], 0x9a) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r6, 0x8004745a, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m0.98664051s ago: executing program 0 (id=2970): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x200, 0x3, 0x8, 0x2, 0x4b9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x6}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="00693cda000028eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$kcm(0xa, 0x1, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="0000000000004bd3f65eac70359a0000000003a20000000072", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) 1m0.887925613s ago: executing program 3 (id=2971): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x0, 0x3fff8002}, 0x5025, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000ff030000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000028523c05d3577972f4ac4f8b44029107b6f51270c4eab3e1af6df72441e"], 0x4f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) r2 = socket$kcm(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01aa6f0000000000000018000008000000000200000000a90000000000000a0300"/51], 0x0, 0x32, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x9, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x894c, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r9, &(0x7f0000000100)=0x1, 0x12) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 1m0.708893749s ago: executing program 0 (id=2973): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x10, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}, {0x85, 0x0, 0x0, 0x58}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xed, &(0x7f0000000c00)=""/237, 0x41000, 0x3}, 0x94) 1m0.624195512s ago: executing program 4 (id=2974): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c908505000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 1m0.231318334s ago: executing program 2 (id=2975): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r1], 0x9a) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000700)=0x3) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func={0x7, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x5, 0x9}]}, {0x0, [0x30, 0x2e]}}, &(0x7f00000001c0)=""/21, 0x38, 0x15, 0x0, 0x7ff}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0xcd, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0x6, &(0x7f0000000000)=@raw=[@generic={0x4, 0x1, 0x8, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f00000000c0)='GPL\x00', 0x2, 0x54, &(0x7f0000000100)=""/84, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, r3, 0x8, &(0x7f0000000240)={0xfffffbff, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x8, 0xb, 0x7fff}, 0x10, r4, r5, 0x4, 0x0, &(0x7f00000005c0)=[{0x5, 0x1, 0x3, 0x7}, {0x0, 0x4, 0xf, 0xc}, {0x5, 0x4, 0x10}, {0x3, 0x4, 0x2, 0x3}], 0x10, 0x8}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(0x3) 1m0.033032701s ago: executing program 0 (id=2976): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 59.284153375s ago: executing program 4 (id=2977): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfc, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 59.167197568s ago: executing program 3 (id=2978): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 58.709852743s ago: executing program 2 (id=2979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) (fail_nth: 13) 58.677648705s ago: executing program 0 (id=2980): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a5ded7e4f9f680e865698", 0x14}], 0x1}, 0x20000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000003040)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000540)=[0x0], 0x0, 0xa2, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x10, 0x0, 0x0, 0xe, 0x2, 0x2}]}, {0x0, [0x0, 0x61, 0x51, 0x30]}}, &(0x7f0000000900)=""/211, 0x2e, 0xd3, 0x1, 0x88ed, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0x6c, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, 0x0, 0x400c044) bpf$PROG_LOAD(0x5, 0x0, 0x0) 58.533767099s ago: executing program 4 (id=2981): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x99, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x9, 0x7, 0x2, 0x44200, r0, 0xc717, '\x00', r1, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x7000000, '\x00', 0x0, @sock_ops}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 58.084186603s ago: executing program 2 (id=2982): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000, 0x0, 0x1, 0xf22fff7f}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) 58.045899704s ago: executing program 3 (id=2983): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f0000000240)=""/146, 0x92}, {&(0x7f0000000300)=""/203, 0xcb}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x3}, 0x2002) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r3, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1d, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000010200)={r9, &(0x7f0000000380)="f0b038", 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f90b", 0x11}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_subtree(r11, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc, 0x40}, 0x50) write$cgroup_subtree(r12, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 57.919496209s ago: executing program 4 (id=2984): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r1, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32, @ANYBLOB="00000000000000336ca73ff35e329fe910"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r2) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 57.87208679s ago: executing program 2 (id=2985): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000011000007"], 0x30}, 0x40890) 57.689708876s ago: executing program 2 (id=2986): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$kcm(0x10, 0x400000002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) sendmsg$tipc(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x24000840}, 0x20040089) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000eaffffff00000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x4, 0x1, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 57.666490587s ago: executing program 0 (id=2987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x42, 0x1000, 0x5, 0xe, 0x52200, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x5, [@enum64={0xd, 0x6, 0x0, 0x13, 0x0, 0x0, [{0xb, 0x3, 0x45}, {0x8, 0x9385, 0xa0ea}, {0x1, 0xffff0000, 0x15c5}, {0x8, 0xff}, {0xa, 0x4, 0x2}, {0xb, 0x777, 0x6}]}, @struct={0x10, 0x4, 0x0, 0x4, 0x0, 0x7, [{0xa, 0x1, 0x7}, {0x9, 0x0, 0x9}, {0x4, 0x3, 0xe}, {0x1, 0x1, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30]}}, &(0x7f0000000140)=""/26, 0xad, 0x1a, 0x0, 0x6, 0x10000}, 0x28) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x80000001, 0x4, 0x7, 0x4c061, r0, 0x9, '\x00', 0x0, r1, 0x3, 0x2, 0x3, 0x0, @value=r2}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000280)=@raw=[@generic={0x4, 0x5, 0xd, 0x3b, 0xc}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f0000000300)='syzkaller\x00', 0xc5, 0x7e, &(0x7f0000000340)=""/126, 0x41100, 0x6, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[r0, r3, r3], &(0x7f0000000440)=[{0x5, 0x5, 0xa, 0x6}, {0x4, 0x1, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xc}, {0x3, 0x3, 0xa, 0x4}, {0x5, 0x1, 0xe, 0xa}, {0x3, 0x5, 0xe, 0xd}], 0x10, 0x6}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r4, r0}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000002a80)={&(0x7f0000000600)=@l2tp6, 0x80, &(0x7f0000002a00)=[{&(0x7f0000000680)=""/161, 0xa1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/215, 0xd7}, {&(0x7f0000002840)=""/235, 0xeb}, {&(0x7f0000002940)=""/156, 0x9c}], 0x6}, 0x22) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002bc0)={&(0x7f0000002ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x5f, 0x0, 0x61, 0x47008506c529acf, 0x30]}}, &(0x7f0000002b00)=""/147, 0x2c, 0x93, 0x0, 0x200}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={r6, 0x0, 0x45, 0xb2, &(0x7f0000002c00)="39a20db9781ece506b8a4dbf5d5386a62743c74744e4662b39faebeb0a08220719ace78b7aa040d5b783abae9bbbf494850545c5d7da7688a0402a5e941f6f12714f7bcfae", &(0x7f0000002c80)=""/178, 0x9, 0x0, 0x0, 0xee, &(0x7f0000002d40), &(0x7f0000002d80)="3bb6b9d3317df7e05f004a1d4a8092cf855a3558ff790dbcd5afe51e56c2b49a2992e9ad960f148c45514f0499dfb2f7ad71bf9f1ac9751241ebc80cfec92aecfa8af3b2e1f85ab18a0a65c399af02669c339a968b89178764598b168733d94ec7ad54b652bf2f5884ac28f4cf909661177bd58253d2ce2f9b06cec12cfa25bcf8db331eabc59f0f438099737e22c5bbc910a80ba9baeadd256ddb9d9162bba06c3668c13877f530d10fa9cc4d39635459eb438dfb3f5b0f2e6e021bdaa1a886d81ea45f7904a75ccf3d58101c7a7f82897036fb9ce48c1de3476e575d0fed327195c9b79d50964afbe686d35d9b", 0x2, 0x0, 0xff}, 0x50) r8 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r8, &(0x7f0000004400)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000002f00)=""/52, 0x34}, {&(0x7f0000002f40)=""/235, 0xeb}, {&(0x7f0000003040)=""/139, 0x8b}, {&(0x7f0000003100)=""/38, 0x26}, {&(0x7f0000003140)=""/187, 0xbb}, {&(0x7f0000003200)=""/78, 0x4e}, {&(0x7f0000003280)=""/154, 0x9a}, {&(0x7f0000003340)=""/4096, 0x1000}], 0x8, &(0x7f00000043c0)=""/3, 0x3}, 0x40010000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000004440), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000004480)={'syz_tun\x00', @broadcast}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000044c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005680)={r0, 0x58, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005780)={0x6, 0x18, &(0x7f0000004500)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x676}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}], &(0x7f00000045c0)='syzkaller\x00', 0x2e, 0x1000, &(0x7f0000004600)=""/4096, 0x41000, 0x0, '\x00', r11, 0x25, r2, 0x8, &(0x7f00000056c0)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000005700)=[r0, r3, r0, r0, r0], &(0x7f0000005740)=[{0x5, 0x7fffffff, 0xc, 0xf}, {0x4, 0x1, 0x5, 0x6}, {0x3, 0x4, 0x0, 0xc}, {0x2, 0x4, 0x3, 0x5}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000005840)={r4, r3}, 0xc) ioctl$TUNDETACHFILTER(r9, 0x401054d6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005980)={@ifindex=r11, 0x31, 0x1, 0x10, &(0x7f0000005880)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000058c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000005940)=[0x0, 0x0, 0x0]}, 0x40) r13 = perf_event_open(&(0x7f0000005a40)={0x5, 0x80, 0x3c, 0x9, 0x1, 0x80, 0x0, 0x4, 0x4000, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_config_ext={0xac, 0xffffffffffffffff}, 0x4848, 0x892, 0xfffffff9, 0x1, 0x5, 0x7fff, 0x0, 0x0, 0xfffffff7, 0x0, 0x4}, 0xffffffffffffffff, 0x2, r8, 0x5) perf_event_open(&(0x7f00000059c0)={0x1, 0x80, 0x9, 0x6, 0x5, 0x0, 0x0, 0x200, 0x82000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10, 0x1, @perf_config_ext={0x5, 0x2}, 0x10902, 0x6, 0x7, 0x5, 0x6, 0x3ff, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0xf, r13, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005b40)={{r3}, &(0x7f0000005ac0), &(0x7f0000005b00)=r4}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006e80)={r7, 0x20, &(0x7f0000006e40)={&(0x7f0000006c80)=""/215, 0xd7, 0x0, &(0x7f0000006d80)=""/155, 0x9b}}, 0x10) r15 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000006ec0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000006f40)={0x11, 0x4, &(0x7f0000005b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x2, 0xf, 0x1, 0x0, 0xfffffffffffffffc, 0x10}]}, &(0x7f0000005bc0)='syzkaller\x00', 0xd, 0x1000, &(0x7f0000005c00)=""/4096, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x17, r2, 0x8, &(0x7f0000006c00)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000006c40)={0x2, 0x6, 0x3, 0xd}, 0x10, r14, r15, 0x0, &(0x7f0000006f00)=[r3, r0, r3], 0x0, 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000007000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r16, &(0x7f0000007400)={&(0x7f0000007040), 0x6e, &(0x7f0000007300)=[{&(0x7f00000070c0)=""/99, 0x63}, {&(0x7f0000007140)=""/43, 0x2b}, {&(0x7f0000007180)=""/219, 0xdb}, {&(0x7f0000007280)=""/114, 0x72}], 0x4, &(0x7f0000007340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x10000) bpf$TOKEN_CREATE(0x24, &(0x7f0000007440)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000007780)={0x16, 0x1d, &(0x7f0000007480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r18}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdd}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000007580)='GPL\x00', 0x8, 0x21, &(0x7f00000075c0)=""/33, 0x41100, 0x4a, '\x00', r12, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000007600)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000007640)={0x1, 0x5, 0x0, 0x1}, 0x10, r14, 0xffffffffffffffff, 0x6, &(0x7f00000076c0)=[r0, r22, r19, 0xffffffffffffffff, r22, r17, r20, r21, r10], &(0x7f0000007700)=[{0x3, 0x3, 0xd, 0xc}, {0x1, 0x4, 0xd, 0xb}, {0x3, 0x5, 0x0, 0x1}, {0x2, 0x2, 0xc, 0x6}, {0x0, 0x5, 0x1, 0xb}, {0x2, 0x2, 0x5, 0x8}], 0x10, 0x2}, 0x94) 57.447422924s ago: executing program 3 (id=2988): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x53}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xfd, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x64}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xffff, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c00fe08000e40000200875a65969ff57b00ff020000000000000000000000000002"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socket$kcm(0xa, 0x1, 0x0) 55.976571001s ago: executing program 0 (id=2989): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 50.682563301s ago: executing program 4 (id=2990): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfc, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 50.568111745s ago: executing program 3 (id=2991): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2000, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000080)="89", 0x1}, {&(0x7f00000005c0)="63500e281e0380387c4a06ae9cbc187d6936ae70626acc911e727986872ee610778c70925cd01a0f", 0x28}], 0x2, 0x0, 0x0, 0x900}, 0x20046389) 50.390948351s ago: executing program 2 (id=2992): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 50.0955538s ago: executing program 3 (id=2993): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x8, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b74e3d095ced5b2e283fbff39000000000000fbffff04e3f6651f5d9d24", @ANYRES32, @ANYBLOB='u\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000500"/28], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0xf0, 0x0, 0x1, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000056000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4045) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) 49.642395005s ago: executing program 4 (id=2994): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x5d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f6ffffffb704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 31.816617428s ago: executing program 33 (id=2989): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 28.896449122s ago: executing program 34 (id=2994): r0 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x5d) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x5}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000f6ffffffb704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.478034245s ago: executing program 35 (id=2992): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xa836, 0x6}, 0x0, 0x2, 0xfffffffe, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0x8000000000000001}, 0x100084, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x9a) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0xf95e14e53a759b5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000001c0)="e1c068a4c7bf140aba2f8a7b5687a722937cc99854464be486fb5c16dd751713d561c1ee93b2ad2f8c9e3123d067d06a9c9de21cb4668afb536a1f9de54bf9535c38e0c84e99c62bfc1a6df22ded2516869b46bd51f10b857c7e8e90bb4852fc0d0eb5ac33", 0x65}, {0x0}, {&(0x7f0000001300)="4e44ec86818385c7ea3ad7d7", 0xc}, {&(0x7f0000000300)="1c84c7eb72039960c31c63426d83f474cc0607fbd69f2e729d24d1333cf822751d794a55f97db53acca89761cae3481e432117fd607d758f82e73307512ea145c0772c77bf7b7a88d88f5b170d75d7c354972cb064468e611a2613155e5be84adf64dcc29d7ac484472a5d85a507ae6730564aed08b8148d65fd66dede30b5e41d7341b479967ae2452752ddaf3086f9ad91d48c1aab5ef45c2b3e6a281342ffdb52e09a7f92c3dea362fab18942f31b5a4868ae60b9359a433bc5a7a3b5453de4a0a048b2edeb", 0xc7}, {&(0x7f00000013c0)="78c8a9914c9d", 0x6}], 0x5, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) 28.477867795s ago: executing program 36 (id=2993): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x8, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b74e3d095ced5b2e283fbff39000000000000fbffff04e3f6651f5d9d24", @ANYRES32, @ANYBLOB='u\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000500"/28], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0xf0, 0x0, 0x1, 0x4}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000056000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4045) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) 6.445336873s ago: executing program 5 (id=3012): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x1, 0x5, 0xf, 0xe0, 0x0, 0x1, 0x4000, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x1102, 0x9, 0x7fffffff, 0x0, 0x5, 0x25, 0x8000, 0x0, 0x1, 0x0, 0xfffffffffffffbbc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.256312159s ago: executing program 6 (id=3013): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000000", 0x10}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459120ec82c600374", 0x18}], 0x2}, 0x20000884) 5.984231648s ago: executing program 6 (id=3015): socketpair(0x22, 0x3, 0x5, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c35fe80000000002c00dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 4.120816588s ago: executing program 6 (id=3018): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x20008000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000004c0), 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000918120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.916589294s ago: executing program 5 (id=3020): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 3.878452426s ago: executing program 7 (id=3021): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 3.539256767s ago: executing program 7 (id=3022): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 3.538980307s ago: executing program 8 (id=3023): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) (fail_nth: 16) 3.455250849s ago: executing program 5 (id=3024): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x7, @mcast1, 0x7}, 0x80, &(0x7f0000000480)=[{&(0x7f0000001540)="f4000900062b3325fe80000000000000", 0x10}, {&(0x7f0000000240)="45f289a31a11d10c1101fb2cc62ff73459120ec82c600374", 0x18}], 0x2}, 0x20000884) 2.914273227s ago: executing program 6 (id=3025): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="00000048000000001a00001d020000000000001115f8eb08acc5345a00", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x1, 0x4000, r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x7f, 0x7b, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r2, &(0x7f0000000000), 0x0}, 0x20) perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x0, &(0x7f00000000c0), 0x0, 0x1, 0xb8, &(0x7f0000000780)=""/184, 0x40f00, 0x35, '\x00', r8, 0x0, r7, 0x8, &(0x7f00000008c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xc, 0x8001, 0xae}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x349}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f00000018c0)=ANY=[@ANYBLOB="9feb01001800000000736abe8e340000000c0000000c0000000a00000004000000000000020500008e00003000303061613000512d21e023a773c3eca34fdaf2e424be2a00681e8f7d185b6ee5cc770ad5"], &(0x7f0000000980)=""/97, 0x2e, 0x61, 0x1, 0x10001, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@bloom_filter={0x1e, 0x3, 0x10000, 0x7fffffff, 0x4802, r2, 0x1, '\x00', r8, r9, 0x5, 0x1, 0x4, 0xc}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@fallback=r3, 0x3, 0x0, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000800)={0x4, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@ifindex=r12, r6, 0x1, 0x20, r10, @void, @void, @void, @value=r13, r11}, 0x20) r14 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc600d0003af0a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r15 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) 2.81206955s ago: executing program 8 (id=3026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pim6reg0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) r3 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000040)={r4}) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x400, 0xffffffffffffec23, 0x0, 0x7, 0x1c3b0979, 0x0, 0x10, 0x0, 0x0, 0x0, 0x959}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) sendmsg$kcm(r4, &(0x7f0000000d80)={&(0x7f0000000300)=@generic={0x1d, "628acdfe19fe9b82cfcbd32cc6303f67f557cb11ae0634a72d7665df87aecaba87c762c0ff1c94616646f4e96001a1cbbd2773cb8c63254062587afc342e1475e77b4055b4bb278b1096fae7bbfd425dba91ca3f87dbbf7a61cab3269c0012ab83b9759adafb86f199a40c506ed85b2ac042f9010ab1f5889436c57bd8f4"}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="f84a0a21a24728dbaff87703806353a505", 0x11}, {&(0x7f0000000480)="58816823a1cbf5746627347af0c05ebaa50d8d340232c740100a50006a26690d80e46cd5df0a4bbb9b9fa537f2fc70b5ef06b703fed04ff83492d46f1bf1469187d37b4f064106309fdb11eedc31754287fa63c9554cfb8a056f2e25eb933c8f843a2a033b56a55476e8a24976e5337c4c9e44535e20111392c048605bdfbc82744fa5d3a720a5f722a5f5b01a1da12fc60c8b01e089537148c6967ddbbe2f4cc75e58f786661012a11ff7926213339f3fd1e5352a5c3f0a7e61f7b5", 0xbc}, {&(0x7f0000000540)="34f4da101e1af2fa4400d08bc11087586dfcb68668beaeb0ab22d49c263be69790111550c0168b073830a87e964aae6f5ff805ed8c87346f30c1bde8d1518c72ccddc11a52fa45d0edfadc73ea9b29665b307a0b0d49186e72badcc7b52959f5524e47948f9746d62b84a9576229ed5ef77eb0f9945f2669214ef41f590ba8e8a969b1f74b86d5779ac4ec1d0cbefead07799e5007d591a3ce7ca890102458a1b8aa4522534e", 0xa6}, {&(0x7f0000000640)="fbc24fe1237960e9b9e5a42a5985fe9f184a8ce4dfd7751c47cff3345cf08f7fe12b4fae1a50ca139db5a380a71a0a7a40b00bac026472c1fc43e59dbd4fa691e93a8623442c36c1fb6ddf457a93a16ba6e19f818feeb6436c33593feb80cb076c082ef6ce8ac42904c0ad3ce54b32613a579b9d7016bb009a731c65ef6d786b32ea375c25587bf8f658093921182dd2f6571b4922add3b0c15180e9c1b648e4183cfe", 0xa3}, {&(0x7f0000000700)="b4fedd74bc020ef8882da88c", 0xc}], 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x5b0}, 0x24048080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000100000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000010c0)=@generic={&(0x7f0000001080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x1b, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000007000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181b0000", @ANYRES32=0x1, @ANYBLOB="00bb0000000000006dffff8520000003000000075910001000000000340000020000000000000000000000181100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000006cd080003000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0xf8, &(0x7f0000000f00)=""/248, 0x40f00, 0x2e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x5, 0x0, 0xff800000, 0xe16f}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001140)=[r6, 0xffffffffffffffff, r7], &(0x7f0000001180)=[{0x3, 0x1, 0xe, 0x3}, {0x1, 0x4, 0x5, 0x89af7473411695f3}], 0x10, 0xb646}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2.81067071s ago: executing program 5 (id=3034): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001040), 0x12) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x2000000) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=r7, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) 2.665508535s ago: executing program 7 (id=3027): socketpair(0x22, 0x3, 0x5, 0x0) socket$kcm(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c35fe80000000002c00dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 2.308487246s ago: executing program 6 (id=3028): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x1, 0x5, 0xf, 0xe0, 0x0, 0x1, 0x4000, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x100, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x1102, 0x9, 0x7fffffff, 0x0, 0x5, 0x25, 0x8000, 0x0, 0x1, 0x0, 0xfffffffffffffbbc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.460730774s ago: executing program 5 (id=3029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001140)={0xffffffffffffffff, 0x9, 0x18}, 0xc) socketpair(0x5, 0x800, 0x200, &(0x7f0000001300)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0xc51, 0x0, r3, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x1, 0x2, 0x0, 0x13, 0x1, 0x2, [{0x3, 0x1, 0x4}, {0x4, 0x1, 0x3b}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x30, 0x5f]}}, 0x0, 0x44, 0x0, 0x1, 0xfffffff1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000003000), 0x0, 0x0, 0x0, 0x7400}, 0x24000018) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200001400004bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001340)={r2, r3}, 0xc) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4001000) r7 = socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82903, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080)) socketpair(0x5, 0x4, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a1, &(0x7f0000000080)) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffc}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd", 0x26}], 0x2}, 0x0) 1.325373807s ago: executing program 8 (id=3030): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xad, 0xad, 0x4, [@const={0xe}, @fwd={0x3}, @datasec={0x6, 0x8, 0x0, 0xf, 0x1, [{0x5, 0x2, 0xa4fc}, {0x1, 0x3, 0xf78b}, {0x1, 0x6, 0x3}, {0x2, 0x7, 0x8}, {0x4, 0x5, 0x5}, {0x1, 0x9, 0x4}, {0x1, 0xa, 0x2}, {0x3, 0x0, 0x1000}], '\n'}, @func={0x9, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x5, 0x4}, @typedef={0x6, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0xcc, 0x0, 0x0, 0x40}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x81, '\x00', 0x0, r1, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="200000000000fdffffff000007000000071006"], 0x20}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r0, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x8, 0x1, 0x9, 0x800, 0x1000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) 1.275412809s ago: executing program 7 (id=3031): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 766.840436ms ago: executing program 7 (id=3032): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 721.143387ms ago: executing program 8 (id=3033): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 322.15927ms ago: executing program 8 (id=3035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x2000, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 169.246305ms ago: executing program 5 (id=3036): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 168.766215ms ago: executing program 7 (id=3037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x69, 0x2, 0x7, 0x0, 0xd, 0x4800, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x10000, 0x1}, 0x2000, 0x3, 0x7, 0x5, 0x47, 0x5, 0x100, 0x0, 0x9, 0x0, 0xbb8b}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x4, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x10041c, 0x0, 0xfffffffe, 0x6, 0x5, 0x4, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="000000000000000095000000dfffffff44"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r6, 0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r4, @ANYRESDEC, @ANYRESHEX], 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000280), 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{r8, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%ps \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x20, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeea, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x4, 0x4, 0x6, 0xffffffffffffffc0}, @map_val={0x18, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800}, @generic={0x8, 0xf, 0xc, 0xcc4e, 0x9}, @call={0x85, 0x0, 0x0, 0x52}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffe}, @tail_call, @call={0x85, 0x0, 0x0, 0xd0}, @map_val={0x18, 0x9, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x3}, @ldst={0x0, 0x1, 0x2, 0xb, 0xa, 0x100}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x40, 0xd4, &(0x7f0000000940)=""/212, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x10, 0x0, 0xfff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r9, r6, r11, 0xffffffffffffffff, r12, 0xffffffffffffffff, 0xffffffffffffffff, r6], &(0x7f0000000cc0), 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x8002, 0x2, 0x1c, {0xa, 0x6e23, 0x997, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) r14 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r14, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x4000) setsockopt$sock_attach_bpf(r14, 0x84, 0x1f, &(0x7f0000000100), 0x120) sendmsg$inet(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000dc0)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="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", @ANYRESOCT=r9], 0xf}, 0x40) 12.29273ms ago: executing program 8 (id=3038): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0xf1) socket$kcm(0xa, 0x2, 0x3a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x37}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 0s ago: executing program 6 (id=3039): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) kernel console output (not intermixed with test programs): .390695][T11712] simple_read_from_buffer+0xe7/0x150 [ 383.396152][T11712] proc_fail_nth_read+0x1e8/0x260 [ 383.401230][T11712] ? proc_fault_inject_write+0x360/0x360 [ 383.406882][T11712] ? fsnotify_perm+0x271/0x5e0 [ 383.411681][T11712] ? proc_fault_inject_write+0x360/0x360 [ 383.417328][T11712] vfs_read+0x28b/0x970 [ 383.421522][T11712] ? kernel_read+0x1e0/0x1e0 [ 383.426126][T11712] ? __fget_files+0x28/0x4b0 [ 383.430732][T11712] ? __fget_files+0x28/0x4b0 [ 383.435334][T11712] ? __fget_files+0x43d/0x4b0 [ 383.440035][T11712] ? __fdget_pos+0x2a3/0x330 [ 383.444637][T11712] ? ksys_read+0x75/0x260 [ 383.448984][T11712] ksys_read+0x150/0x260 [ 383.453245][T11712] ? vfs_write+0x990/0x990 [ 383.457681][T11712] ? syscall_enter_from_user_mode+0x2e/0x80 [ 383.463601][T11712] do_syscall_64+0x55/0xb0 [ 383.468037][T11712] ? clear_bhb_loop+0x40/0x90 [ 383.472806][T11712] ? clear_bhb_loop+0x40/0x90 [ 383.477503][T11712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.483535][T11712] RIP: 0033:0x7ff62a75d68e [ 383.487986][T11712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 383.507710][T11712] RSP: 002b:00007ff62b5e7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 383.516183][T11712] RAX: ffffffffffffffda RBX: 00007ff62b5e86c0 RCX: 00007ff62a75d68e [ 383.524164][T11712] RDX: 000000000000000f RSI: 00007ff62b5e80a0 RDI: 0000000000000008 [ 383.532147][T11712] RBP: 00007ff62b5e8090 R08: 0000000000000000 R09: 0000000000000000 [ 383.540315][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.548297][T11712] R13: 00007ff62aa16038 R14: 00007ff62aa15fa0 R15: 00007ffd37041b08 [ 383.556299][T11712] [ 383.956194][T11728] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2142'. [ 383.999258][T11724] netlink: 'syz.1.2128': attribute type 9 has an invalid length. [ 384.028706][T11724] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2128'. [ 384.448579][T11726] netlink: 'syz.3.2132': attribute type 9 has an invalid length. [ 384.459539][T11726] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2132'. [ 385.034763][T11737] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 385.059886][T11735] netlink: 'syz.0.2144': attribute type 9 has an invalid length. [ 385.072667][T11737] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 385.130467][T11735] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2144'. [ 385.619306][ T5780] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 386.297237][T11759] netlink: 'syz.2.2148': attribute type 9 has an invalid length. [ 386.305704][T11759] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2148'. [ 386.813424][T11767] netlink: 'syz.3.2150': attribute type 29 has an invalid length. [ 386.991180][T11767] netlink: 'syz.3.2150': attribute type 29 has an invalid length. [ 387.348327][ T5780] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 387.735730][T11783] Dead loop on virtual device ip6_vti0, fix it urgently! [ 387.968021][T11789] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2161'. [ 388.106385][T11789] can: request_module (can-proto-5) failed. [ 388.173330][T11793] netlink: 'syz.0.2162': attribute type 9 has an invalid length. [ 388.202635][T11793] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2162'. [ 388.629077][ T5780] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 389.257981][T11818] netlink: 'syz.1.2168': attribute type 29 has an invalid length. [ 389.266341][T11818] netlink: 'syz.1.2168': attribute type 29 has an invalid length. [ 389.933502][ T5780] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 390.778719][ T5780] Bluetooth: hci0: unexpected event 0x36 length: 15 > 7 [ 391.037810][T11863] sctp: [Deprecated]: syz.2.2185 (pid 11863) Use of int in max_burst socket option deprecated. [ 391.037810][T11863] Use struct sctp_assoc_value instead [ 391.378875][ T5780] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 391.682722][T11873] netlink: 'syz.0.2187': attribute type 29 has an invalid length. [ 391.701937][T11873] netlink: 'syz.0.2187': attribute type 29 has an invalid length. [ 392.019983][T11875] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2190'. [ 392.170842][T11883] netlink: 'syz.1.2192': attribute type 28 has an invalid length. [ 392.488153][T11890] sctp: [Deprecated]: syz.3.2194 (pid 11890) Use of int in maxseg socket option. [ 392.488153][T11890] Use struct sctp_assoc_value instead [ 393.067138][ T5780] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 393.194992][T11912] netlink: 'syz.1.2203': attribute type 5 has an invalid length. [ 393.246816][T11912] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2203'. [ 393.429287][T11918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2206'. [ 393.538236][T11920] sctp: [Deprecated]: syz.1.2208 (pid 11920) Use of int in maxseg socket option. [ 393.538236][T11920] Use struct sctp_assoc_value instead [ 393.865500][T11931] netlink: 'syz.0.2210': attribute type 10 has an invalid length. [ 393.890874][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2210'. [ 393.930797][ T5780] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 393.982159][T11930] netlink: 'syz.2.2211': attribute type 28 has an invalid length. [ 394.874309][T11961] sctp: [Deprecated]: syz.2.2222 (pid 11961) Use of int in maxseg socket option. [ 394.874309][T11961] Use struct sctp_assoc_value instead [ 395.629435][T11983] netlink: 'syz.0.2232': attribute type 28 has an invalid length. [ 396.286852][T11987] delete_channel: no stack [ 396.638438][T12001] netlink: 'syz.3.2242': attribute type 19 has an invalid length. [ 396.698939][T11999] sctp: [Deprecated]: syz.1.2240 (pid 11999) Use of int in maxseg socket option. [ 396.698939][T11999] Use struct sctp_assoc_value instead [ 396.842957][T12004] netlink: 'syz.3.2242': attribute type 10 has an invalid length. [ 397.129730][T12004] team0: Device wg1 is of different type [ 397.662385][T12022] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2249'. [ 397.674759][T12022] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 397.864688][T12028] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2251'. [ 397.883087][ T5780] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 397.953337][T12029] netlink: 'syz.3.2250': attribute type 28 has an invalid length. [ 398.019810][T12033] netlink: 'syz.0.2252': attribute type 3 has an invalid length. [ 398.019866][T12033] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2252'. [ 398.839831][ T5780] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 398.987068][T12057] netlink: 'syz.1.2265': attribute type 10 has an invalid length. [ 398.999255][T12057] team0: Device hsr_slave_0 failed to register rx_handler [ 399.218404][T12068] FAULT_INJECTION: forcing a failure. [ 399.218404][T12068] name failslab, interval 1, probability 0, space 0, times 0 [ 399.233658][T12068] CPU: 1 PID: 12068 Comm: syz.3.2270 Not tainted syzkaller #0 [ 399.241193][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 399.251267][T12068] Call Trace: [ 399.254555][T12068] [ 399.257500][T12068] dump_stack_lvl+0x18c/0x250 [ 399.262197][T12068] ? show_regs_print_info+0x20/0x20 [ 399.267406][T12068] ? load_image+0x420/0x420 [ 399.271928][T12068] ? __might_sleep+0xe0/0xe0 [ 399.276667][T12068] ? __lock_acquire+0x7d40/0x7d40 [ 399.281710][T12068] ? finish_task_switch+0x265/0x8f0 [ 399.286925][T12068] should_fail_ex+0x39d/0x4d0 [ 399.291626][T12068] should_failslab+0x9/0x20 [ 399.296159][T12068] slab_pre_alloc_hook+0x59/0x310 [ 399.301220][T12068] kmem_cache_alloc_node+0x60/0x320 [ 399.306442][T12068] ? __alloc_skb+0x103/0x2c0 [ 399.311126][T12068] __alloc_skb+0x103/0x2c0 [ 399.315557][T12068] alloc_skb_with_frags+0xca/0x7b0 [ 399.320702][T12068] ? preempt_schedule_irq+0xea/0x150 [ 399.326045][T12068] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 399.333274][T12068] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 399.339283][T12068] sock_alloc_send_pskb+0x883/0x9a0 [ 399.344514][T12068] ? sock_kzfree_s+0x50/0x50 [ 399.349109][T12068] ? lockdep_hardirqs_on+0x98/0x150 [ 399.354320][T12068] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.360496][T12068] rawv6_send_hdrinc+0x2fc/0x1640 [ 399.365639][T12068] ? txopt_get+0x7a/0x3f0 [ 399.369978][T12068] ? txopt_get+0x3f0/0x3f0 [ 399.374414][T12068] ? txopt_get+0x344/0x3f0 [ 399.378842][T12068] ? fl6_sock_lookup+0xc0/0xc0 [ 399.383622][T12068] rawv6_sendmsg+0x12cc/0x1770 [ 399.388457][T12068] ? compat_rawv6_ioctl+0x70/0x70 [ 399.393507][T12068] ? aa_sk_perm+0x83c/0x970 [ 399.398029][T12068] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 399.404464][T12068] ? inet_sendmsg+0x7c/0x2f0 [ 399.409104][T12068] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 399.414414][T12068] ? security_socket_sendmsg+0x80/0xa0 [ 399.419884][T12068] ? inet_send_prepare+0x260/0x260 [ 399.425008][T12068] ____sys_sendmsg+0x5ba/0x960 [ 399.429800][T12068] ? iovec_from_user+0x183/0x240 [ 399.434759][T12068] ? __asan_memset+0x22/0x40 [ 399.439385][T12068] ? __sys_sendmsg_sock+0x30/0x30 [ 399.444435][T12068] ? __import_iovec+0x3fa/0x850 [ 399.449300][T12068] ? import_iovec+0x73/0xa0 [ 399.453817][T12068] ___sys_sendmsg+0x2a6/0x360 [ 399.458520][T12068] ? __sys_sendmsg+0x2a0/0x2a0 [ 399.463310][T12068] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 399.469586][T12068] __se_sys_sendmsg+0x1c2/0x2b0 [ 399.474448][T12068] ? __x64_sys_sendmsg+0x80/0x80 [ 399.479421][T12068] ? lockdep_hardirqs_on+0x98/0x150 [ 399.484649][T12068] do_syscall_64+0x55/0xb0 [ 399.489079][T12068] ? clear_bhb_loop+0x40/0x90 [ 399.493764][T12068] ? clear_bhb_loop+0x40/0x90 [ 399.498451][T12068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.504373][T12068] RIP: 0033:0x7fc3d159ce59 [ 399.508802][T12068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.528442][T12068] RSP: 002b:00007fc3d239f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.536868][T12068] RAX: ffffffffffffffda RBX: 00007fc3d1815fa0 RCX: 00007fc3d159ce59 [ 399.544847][T12068] RDX: 0000000020000884 RSI: 0000200000000000 RDI: 0000000000000005 [ 399.552830][T12068] RBP: 00007fc3d239f090 R08: 0000000000000000 R09: 0000000000000000 [ 399.560807][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.568790][T12068] R13: 00007fc3d1816038 R14: 00007fc3d1815fa0 R15: 00007ffc07e88c68 [ 399.576787][T12068] [ 399.988385][ T5780] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 401.534922][T12099] netlink: 'syz.3.2282': attribute type 10 has an invalid length. [ 401.572194][T12099] team0: Device hsr_slave_0 failed to register rx_handler [ 401.742459][T12101] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 401.802915][T12101] team0: Device hsr_slave_0 failed to register rx_handler [ 402.095995][T12117] netlink: 'syz.3.2287': attribute type 9 has an invalid length. [ 402.108228][T12117] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2287'. [ 402.130871][T12118] netlink: 'syz.3.2287': attribute type 10 has an invalid length. [ 402.163901][T12117] netlink: 'syz.3.2287': attribute type 10 has an invalid length. [ 402.238438][ T5780] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 402.357515][T12126] netlink: 'syz.3.2292': attribute type 21 has an invalid length. [ 402.365409][T12126] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2292'. [ 402.411163][T12126] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2292'. [ 403.198490][T12136] netlink: 'syz.0.2296': attribute type 10 has an invalid length. [ 403.235444][T12136] team0: Device hsr_slave_0 failed to register rx_handler [ 403.822871][ T5780] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 403.896537][T12158] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 403.905075][T12158] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 403.914426][T12158] netlink: 'syz.0.2303': attribute type 29 has an invalid length. [ 404.711655][ T5780] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 406.178046][ T5780] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 406.416481][T12221] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 406.571297][T12213] netlink: 'syz.0.2327': attribute type 10 has an invalid length. [ 406.592798][T12213] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2327'. [ 406.630860][T12223] netlink: 'syz.3.2332': attribute type 2 has an invalid length. [ 406.652841][T12223] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2332'. [ 406.997922][T12237] netlink: 'syz.0.2337': attribute type 33 has an invalid length. [ 407.023044][T12235] netlink: 'syz.3.2336': attribute type 9 has an invalid length. [ 407.034404][T12237] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2337'. [ 407.034447][T12235] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2336'. [ 407.585766][ T5780] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 407.839970][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.858348][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.868555][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.878021][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.890110][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.897981][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.173701][T12243] chnl_net:caif_netlink_parms(): no params data found [ 408.531600][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.544845][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.563179][T12243] bridge_slave_0: entered allmulticast mode [ 408.592906][T12243] bridge_slave_0: entered promiscuous mode [ 408.609860][T12260] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2345'. [ 408.650426][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.670284][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.686419][T12243] bridge_slave_1: entered allmulticast mode [ 408.706577][T12243] bridge_slave_1: entered promiscuous mode [ 408.805872][T12263] netlink: 'syz.2.2347': attribute type 10 has an invalid length. [ 408.827206][T12263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2347'. [ 408.926151][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.982532][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.050091][T12267] FAULT_INJECTION: forcing a failure. [ 409.050091][T12267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.082960][T12243] team0: Port device team_slave_0 added [ 409.099564][T12267] CPU: 1 PID: 12267 Comm: syz.0.2349 Not tainted syzkaller #0 [ 409.107100][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.117197][T12267] Call Trace: [ 409.120508][T12267] [ 409.123470][T12267] dump_stack_lvl+0x18c/0x250 [ 409.128190][T12267] ? show_regs_print_info+0x20/0x20 [ 409.133424][T12267] ? load_image+0x420/0x420 [ 409.137964][T12267] ? __might_fault+0xaa/0x120 [ 409.142679][T12267] should_fail_ex+0x39d/0x4d0 [ 409.147409][T12267] copyin+0x1a/0x90 [ 409.151269][T12267] _copy_from_iter+0x404/0x12e0 [ 409.156185][T12267] ? __virt_addr_valid+0x18c/0x540 [ 409.161462][T12267] ? __lock_acquire+0x7d40/0x7d40 [ 409.166542][T12267] ? copyout_mc+0x70/0x70 [ 409.170913][T12267] ? __virt_addr_valid+0x18c/0x540 [ 409.176063][T12267] ? __virt_addr_valid+0x18c/0x540 [ 409.181217][T12267] ? __virt_addr_valid+0x469/0x540 [ 409.186377][T12267] ? __check_object_size+0x506/0xa20 [ 409.191706][T12267] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 409.197465][T12267] ? skb_put+0x11b/0x210 [ 409.201750][T12267] unix_stream_sendmsg+0x562/0xbf0 [ 409.206947][T12267] ? unix_show_fdinfo+0x270/0x270 [ 409.212015][T12267] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 409.218483][T12267] ? __might_fault+0xaa/0x120 [ 409.223189][T12267] ? aa_sock_msg_perm+0x94/0x150 [ 409.228170][T12267] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 409.233496][T12267] ? security_socket_sendmsg+0x80/0xa0 [ 409.238989][T12267] ? unix_show_fdinfo+0x270/0x270 [ 409.244230][T12267] ____sys_sendmsg+0x5ba/0x960 [ 409.249037][T12267] ? __sys_sendmsg_sock+0x30/0x30 [ 409.254095][T12267] ? __import_iovec+0x3fa/0x850 [ 409.258986][T12267] ? import_iovec+0x73/0xa0 [ 409.263525][T12267] ___sys_sendmsg+0x2a6/0x360 [ 409.268259][T12267] ? get_pid_task+0x20/0x1e0 [ 409.272892][T12267] ? __sys_sendmsg+0x2a0/0x2a0 [ 409.277717][T12267] ? __lock_acquire+0x7d40/0x7d40 [ 409.282803][T12267] __se_sys_sendmsg+0x1c2/0x2b0 [ 409.287692][T12267] ? __x64_sys_sendmsg+0x80/0x80 [ 409.292686][T12267] ? lockdep_hardirqs_on+0x98/0x150 [ 409.297929][T12267] do_syscall_64+0x55/0xb0 [ 409.302380][T12267] ? clear_bhb_loop+0x40/0x90 [ 409.307086][T12267] ? clear_bhb_loop+0x40/0x90 [ 409.311844][T12267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.317789][T12267] RIP: 0033:0x7f636179ce59 [ 409.322246][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.341892][T12267] RSP: 002b:00007f636274b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.350345][T12267] RAX: ffffffffffffffda RBX: 00007f6361a15fa0 RCX: 00007f636179ce59 [ 409.358348][T12267] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000005 [ 409.366360][T12267] RBP: 00007f636274b090 R08: 0000000000000000 R09: 0000000000000000 [ 409.374401][T12267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.382405][T12267] R13: 00007f6361a16038 R14: 00007f6361a15fa0 R15: 00007ffd34e6b358 [ 409.390419][T12267] [ 409.399680][T12243] team0: Port device team_slave_1 added [ 409.441966][T12243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.458540][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.494103][T12243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.601343][T12243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.642067][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.678393][T12243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.714542][ T5783] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 409.784529][T12243] hsr_slave_0: entered promiscuous mode [ 409.823349][T12243] hsr_slave_1: entered promiscuous mode [ 409.839061][T12243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.849210][T12243] Cannot create hsr debugfs directory [ 409.997092][ T5783] Bluetooth: hci4: command tx timeout [ 410.155911][T12243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.163398][T12284] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.2357'. [ 410.360302][T12243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.562510][T12243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.605880][T12290] netlink: 'syz.3.2360': attribute type 21 has an invalid length. [ 410.647086][ T5783] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 410.743606][T12290] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2360'. [ 410.831659][T12298] netlink: 'syz.3.2360': attribute type 10 has an invalid length. [ 410.840631][T12298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2360'. [ 410.850027][T12298] batadv0: entered promiscuous mode [ 410.855598][T12298] batadv0: entered allmulticast mode [ 410.864508][T12298] bridge0: port 3(batadv0) entered blocking state [ 410.871387][T12298] bridge0: port 3(batadv0) entered disabled state [ 410.880764][T12298] bridge0: port 3(batadv0) entered blocking state [ 410.887454][T12298] bridge0: port 3(batadv0) entered forwarding state [ 410.937395][T12243] bond0: (slave netdevsim0): Releasing backup interface [ 410.964499][T12243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.028428][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 411.038094][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 411.364728][T12243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.395137][T12243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.428697][T12243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.479407][T12243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.663977][T12319] Dead loop on virtual device ip6_vti0, fix it urgently! [ 411.742417][T12243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.795467][T12243] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.859163][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.867348][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.924504][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.931754][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.003946][ T5780] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 412.072195][ T5780] Bluetooth: hci4: command tx timeout [ 412.278518][T12340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2377'. [ 412.666011][T12243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.714573][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 412.764305][T12243] veth0_vlan: entered promiscuous mode [ 412.799559][T12243] veth1_vlan: entered promiscuous mode [ 412.921702][ T5783] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 412.936898][T12243] veth0_macvtap: entered promiscuous mode [ 412.974285][T12243] veth1_macvtap: entered promiscuous mode [ 412.990647][ T5783] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 413.051069][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.087096][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.112980][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.146460][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.176941][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.193113][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.213477][T12243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.225223][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.242047][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.261556][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.288034][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.303093][T12243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.315349][T12243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.332527][T12243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.414688][T12243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.425524][T12243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.441640][T12243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.450842][T12243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.711072][ T9130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.740347][ T9130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.819149][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.837144][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.151256][ T5780] Bluetooth: hci4: command tx timeout [ 414.337547][T12397] Dead loop on virtual device ip6_vti0, fix it urgently! [ 414.663084][T12404] netlink: 'syz.1.2402': attribute type 10 has an invalid length. [ 414.696958][T12404] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2402'. [ 415.038669][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 415.233842][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.244120][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.255809][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.276078][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.287609][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 415.328900][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.575388][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.716567][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.908403][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.080848][ T49] batman_adv: batadv0: Removing interface: netdevsim0 [ 416.122526][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.227214][ T5780] Bluetooth: hci4: command tx timeout [ 416.412886][T12414] chnl_net:caif_netlink_parms(): no params data found [ 416.844580][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.894673][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.920366][T12414] bridge_slave_0: entered allmulticast mode [ 416.948557][T12414] bridge_slave_0: entered promiscuous mode [ 416.994182][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.059081][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.118204][T12414] bridge_slave_1: entered allmulticast mode [ 417.184256][T12414] bridge_slave_1: entered promiscuous mode [ 417.450914][ T5780] Bluetooth: hci0: command tx timeout [ 417.454934][T12414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.695632][T12414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.742012][T12466] netlink: 'syz.3.2423': attribute type 10 has an invalid length. [ 417.790286][T12466] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2423'. [ 417.806197][T12466] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.824142][T12466] hsr0: entered promiscuous mode [ 417.861825][T12466] bridge0: port 4(hsr0) entered blocking state [ 417.883736][T12466] bridge0: port 4(hsr0) entered disabled state [ 417.914072][T12466] bridge0: port 4(hsr0) entered blocking state [ 417.920641][T12466] bridge0: port 4(hsr0) entered forwarding state [ 418.212285][T12414] team0: Port device team_slave_0 added [ 418.392457][T12414] team0: Port device team_slave_1 added [ 418.898642][T12414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.925323][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.028350][T12414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.052687][T12491] netlink: 'syz.1.2428': attribute type 10 has an invalid length. [ 419.071805][T12491] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2428'. [ 419.079751][T12488] sctp: [Deprecated]: syz.3.2427 (pid 12488) Use of int in max_burst socket option deprecated. [ 419.079751][T12488] Use struct sctp_assoc_value instead [ 419.124590][T12491] batman_adv: batadv0: Adding interface: veth0_vlan [ 419.142776][T12491] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.181670][T12491] batman_adv: batadv0: Interface activated: veth0_vlan [ 419.354431][T12414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.381631][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.447295][T12414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.506771][ T5780] Bluetooth: hci0: command tx timeout [ 419.883122][T12414] hsr_slave_0: entered promiscuous mode [ 419.905079][T12414] hsr_slave_1: entered promiscuous mode [ 419.930601][T12414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.956936][T12414] Cannot create hsr debugfs directory [ 420.813934][T12523] netlink: 'syz.1.2436': attribute type 10 has an invalid length. [ 420.827496][T12523] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2436'. [ 420.850910][T12523] hsr0: entered promiscuous mode [ 420.864167][T12523] bridge0: port 3(hsr0) entered blocking state [ 420.875140][T12523] bridge0: port 3(hsr0) entered disabled state [ 420.888668][T12523] hsr0: entered allmulticast mode [ 420.896686][T12523] hsr_slave_0: entered allmulticast mode [ 420.907549][T12523] hsr_slave_1: entered allmulticast mode [ 421.025510][T12523] bridge0: port 3(hsr0) entered blocking state [ 421.035903][T12523] bridge0: port 3(hsr0) entered forwarding state [ 421.522035][T12545] netlink: 'syz.3.2443': attribute type 5 has an invalid length. [ 421.586350][T12545] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2443'. [ 421.586802][ T5780] Bluetooth: hci0: command tx timeout [ 422.620756][T12555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.657908][T12555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.735019][T12555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.765303][T12555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.779581][T12555] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 422.787869][T12555] batman_adv: batadv0: Removing interface: veth0_vlan [ 422.812966][T12555] bridge0: port 3(batadv0) entered disabled state [ 422.923588][T12555] bridge0: port 3(batadv0) entered disabled state [ 423.247361][T12414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 423.275037][T12414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 423.303150][T12414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 423.312957][T12414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 423.469463][T12414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.540409][T12414] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.556561][ T9130] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.563848][ T9130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.616692][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.623898][ T9130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.670599][ T5780] Bluetooth: hci0: command tx timeout [ 423.771805][ T49] hsr_slave_0: left promiscuous mode [ 423.783561][ T49] hsr_slave_1: left promiscuous mode [ 423.793832][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.801939][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.813951][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.822105][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.830669][ T49] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 423.838055][ T49] batman_adv: batadv0: Removing interface: virt_wifi0 [ 423.847323][ T49] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 423.854573][ T49] batman_adv: batadv0: Removing interface: veth0_vlan [ 423.862480][ T49] hsr0: left allmulticast mode [ 423.867856][ T49] bridge0: port 3(hsr0) entered disabled state [ 423.876370][ T49] bridge_slave_1: left allmulticast mode [ 423.882280][ T49] bridge_slave_1: left promiscuous mode [ 423.888486][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.898797][ T49] bridge_slave_0: left allmulticast mode [ 423.904918][ T49] bridge_slave_0: left promiscuous mode [ 423.911941][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.941300][ T49] veth1_macvtap: left promiscuous mode [ 423.947090][ T49] veth0_macvtap: left promiscuous mode [ 423.952784][ T49] veth1_vlan: left promiscuous mode [ 423.959127][ T49] veth0_vlan: left promiscuous mode [ 424.617747][ T49] team0 (unregistering): Port device team_slave_1 removed [ 424.704262][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.760580][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.099770][ T49] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 425.110810][ T49] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 425.122506][ T49] bond0 (unregistering): Released all slaves [ 425.525647][T12414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.642377][T12414] veth0_vlan: entered promiscuous mode [ 425.665519][T12414] veth1_vlan: entered promiscuous mode [ 425.714697][T12414] veth0_macvtap: entered promiscuous mode [ 425.735064][T12414] veth1_macvtap: entered promiscuous mode [ 425.763728][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.775107][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.788728][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.800628][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.813304][T12414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.831007][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.841726][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.853216][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.865488][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.881219][T12414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.894713][T12414] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.904316][T12414] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.917972][T12414] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.929515][T12414] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.030064][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.046788][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.082843][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.094045][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.337956][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 426.646236][T12615] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2450'. [ 426.728202][T12615] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 426.971761][T12614] netlink: 'syz.3.2451': attribute type 10 has an invalid length. [ 427.027100][T12614] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2451'. [ 427.088171][T12614] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 427.143648][T12624] netlink: 'syz.0.2449': attribute type 10 has an invalid length. [ 427.157344][T12624] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2449'. [ 427.210677][T12624] hsr0: entered promiscuous mode [ 427.216030][T12624] bridge0: port 3(hsr0) entered blocking state [ 427.256472][T12624] bridge0: port 3(hsr0) entered disabled state [ 427.284543][T12624] hsr0: entered allmulticast mode [ 427.304117][T12624] hsr_slave_0: entered allmulticast mode [ 427.322577][T12624] hsr_slave_1: entered allmulticast mode [ 427.346438][T12624] bridge0: port 3(hsr0) entered blocking state [ 427.352886][T12624] bridge0: port 3(hsr0) entered forwarding state [ 427.395741][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.409890][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.440131][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.463992][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.475774][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 427.483340][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.611633][ T9130] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.742085][ T9130] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.870408][ T5780] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 428.026950][ T9130] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.387876][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 428.512482][ T9130] bond0: (slave netdevsim0): Releasing backup interface [ 428.525135][ T9130] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.557836][T12649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.592350][T12649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.604280][T12649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.614787][T12649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.507051][ T5783] Bluetooth: hci2: command tx timeout [ 429.752009][T12675] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2469'. [ 429.785375][T12667] netlink: 'syz.1.2466': attribute type 10 has an invalid length. [ 429.801776][T12667] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2466'. [ 429.847681][T12675] netlink: zone id is out of range [ 429.852874][T12675] netlink: zone id is out of range [ 429.862524][T12629] chnl_net:caif_netlink_parms(): no params data found [ 429.886546][T12675] netlink: zone id is out of range [ 429.902633][T12675] netlink: zone id is out of range [ 429.917965][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 429.934594][T12675] netlink: zone id is out of range [ 429.954155][T12675] netlink: zone id is out of range [ 429.995789][T12675] netlink: zone id is out of range [ 430.001779][T12675] netlink: zone id is out of range [ 430.665923][T12629] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.673413][T12629] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.683386][T12629] bridge_slave_0: entered allmulticast mode [ 430.705899][T12629] bridge_slave_0: entered promiscuous mode [ 430.736409][T12629] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.746852][T12629] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.754081][T12629] bridge_slave_1: entered allmulticast mode [ 430.782719][T12629] bridge_slave_1: entered promiscuous mode [ 430.931642][ T9130] gretap0 (unregistering): left allmulticast mode [ 430.947639][T12702] delete_channel: no stack [ 430.952348][ T9130] gretap0 (unregistering): left promiscuous mode [ 430.959977][ T9130] Ÿë: port 1(gretap0) entered disabled state [ 431.004602][T12629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.023920][T12629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.153076][T12629] team0: Port device team_slave_0 added [ 431.185864][T12629] team0: Port device team_slave_1 added [ 431.245546][T12629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.252764][T12629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.282203][T12629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.300413][T12629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.314572][T12629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.345665][T12629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.431883][T12629] hsr_slave_0: entered promiscuous mode [ 431.440503][T12629] hsr_slave_1: entered promiscuous mode [ 431.586870][ T5780] Bluetooth: hci2: command tx timeout [ 432.026027][ T9130] hsr_slave_0: left promiscuous mode [ 432.032385][ T9130] hsr_slave_1: left promiscuous mode [ 432.039558][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.047461][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.055572][ T9130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.063571][ T9130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.079810][ T9130] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 432.089684][ T9130] batman_adv: batadv0: Removing interface: veth0_vlan [ 432.099205][ T9130] hsr0: left allmulticast mode [ 432.104230][ T9130] bridge0: port 3(hsr0) entered disabled state [ 432.117261][ T9130] bridge_slave_1: left allmulticast mode [ 432.122954][ T9130] bridge_slave_1: left promiscuous mode [ 432.134120][ T9130] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.143776][ T9130] bridge_slave_0: left allmulticast mode [ 432.154126][ T9130] bridge_slave_0: left promiscuous mode [ 432.161101][ T9130] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.194203][ T9130] veth0_macvtap: left promiscuous mode [ 432.200870][ T9130] veth1_vlan: left allmulticast mode [ 432.206390][ T9130] veth1_vlan: left promiscuous mode [ 432.218999][ T9130] veth0_vlan: left promiscuous mode [ 432.665921][ T9130] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 432.974068][ T9130] team0 (unregistering): Port device team_slave_1 removed [ 433.055254][ T9130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.103412][ T9130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.447036][ T9130] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 433.455978][ T9130] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 433.469300][ T9130] bond0 (unregistering): Released all slaves [ 433.667232][ T5780] Bluetooth: hci2: command tx timeout [ 433.874267][T12629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.911318][T12629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 433.925221][T12629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 433.954726][T12629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 434.092736][T12629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.117907][T12629] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.132973][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.140209][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.162350][ T9130] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.169597][ T9130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.474214][T12629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.541780][T12629] veth0_vlan: entered promiscuous mode [ 434.564847][T12629] veth1_vlan: entered promiscuous mode [ 434.620399][T12629] veth0_macvtap: entered promiscuous mode [ 434.636853][T12629] veth1_macvtap: entered promiscuous mode [ 434.664343][T12629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.675276][T12629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.688895][T12629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.704136][T12629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.724333][T12629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.740252][T12629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.752085][T12629] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.764165][T12629] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.775535][T12629] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.786227][T12629] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.921109][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.949589][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.986539][ T9130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.994629][ T9130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.171170][T12785] netlink: 'syz.3.2486': attribute type 11 has an invalid length. [ 435.187505][T12785] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.2486'. [ 435.746850][ T5780] Bluetooth: hci2: command tx timeout [ 435.964959][T12802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.076131][T12802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.166363][T12802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.186962][T12802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.273922][T12819] FAULT_INJECTION: forcing a failure. [ 436.273922][T12819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.313490][T12819] CPU: 1 PID: 12819 Comm: syz.3.2487 Not tainted syzkaller #0 [ 436.321045][T12819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.331146][T12819] Call Trace: [ 436.334451][T12819] [ 436.337401][T12819] dump_stack_lvl+0x18c/0x250 [ 436.342116][T12819] ? show_regs_print_info+0x20/0x20 [ 436.347330][T12819] ? load_image+0x420/0x420 [ 436.351851][T12819] ? __might_fault+0xaa/0x120 [ 436.356546][T12819] should_fail_ex+0x39d/0x4d0 [ 436.361255][T12819] copyin+0x1a/0x90 [ 436.365080][T12819] _copy_from_iter+0x404/0x12e0 [ 436.369966][T12819] ? copyin+0x70/0x90 [ 436.373976][T12819] ? copyout_mc+0x70/0x70 [ 436.378336][T12819] ? copyout_mc+0x70/0x70 [ 436.382683][T12819] ? __virt_addr_valid+0x18c/0x540 [ 436.387828][T12819] ? page_copy_sane+0x16a/0x270 [ 436.392695][T12819] copy_page_from_iter+0x7b/0x100 [ 436.397732][T12819] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 436.403564][T12819] unix_stream_sendmsg+0x562/0xbf0 [ 436.408705][T12819] ? unix_show_fdinfo+0x270/0x270 [ 436.413741][T12819] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 436.420188][T12819] ? __might_fault+0xaa/0x120 [ 436.424886][T12819] ? aa_sock_msg_perm+0x94/0x150 [ 436.429870][T12819] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 436.435183][T12819] ? security_socket_sendmsg+0x80/0xa0 [ 436.440658][T12819] ? unix_show_fdinfo+0x270/0x270 [ 436.445715][T12819] ____sys_sendmsg+0x5ba/0x960 [ 436.450506][T12819] ? __sys_sendmsg_sock+0x30/0x30 [ 436.455550][T12819] ? __import_iovec+0x3fa/0x850 [ 436.460426][T12819] ? import_iovec+0x73/0xa0 [ 436.464946][T12819] ___sys_sendmsg+0x2a6/0x360 [ 436.469645][T12819] ? __sys_sendmsg+0x2a0/0x2a0 [ 436.474447][T12819] ? __lock_acquire+0x7d40/0x7d40 [ 436.479511][T12819] __se_sys_sendmsg+0x1c2/0x2b0 [ 436.484386][T12819] ? __x64_sys_sendmsg+0x80/0x80 [ 436.489350][T12819] ? lockdep_hardirqs_on+0x98/0x150 [ 436.494567][T12819] do_syscall_64+0x55/0xb0 [ 436.499015][T12819] ? clear_bhb_loop+0x40/0x90 [ 436.503719][T12819] ? clear_bhb_loop+0x40/0x90 [ 436.508408][T12819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.514318][T12819] RIP: 0033:0x7fc3d159ce59 [ 436.518745][T12819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.538377][T12819] RSP: 002b:00007fc3d239f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.546804][T12819] RAX: ffffffffffffffda RBX: 00007fc3d1815fa0 RCX: 00007fc3d159ce59 [ 436.554783][T12819] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000005 [ 436.562762][T12819] RBP: 00007fc3d239f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.570763][T12819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.578741][T12819] R13: 00007fc3d1816038 R14: 00007fc3d1815fa0 R15: 00007ffc07e88c68 [ 436.586740][T12819] [ 437.081048][T12838] netlink: 'syz.1.2492': attribute type 2 has an invalid length. [ 437.089264][T12838] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2492'. [ 437.120270][T12838] netlink: 'syz.1.2492': attribute type 21 has an invalid length. [ 437.132523][T12838] netlink: 'syz.1.2492': attribute type 3 has an invalid length. [ 437.141668][T12838] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2492'. [ 437.164161][T12838] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.2492'. [ 437.204099][T12838] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 437.825976][T12855] netlink: 'syz.3.2493': attribute type 2 has an invalid length. [ 437.840880][T12855] netlink: 'syz.3.2493': attribute type 8 has an invalid length. [ 437.866468][T12855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2493'. [ 439.561390][T12864] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2499'. [ 439.720590][T12872] netlink: 'syz.0.2501': attribute type 4 has an invalid length. [ 439.747437][T12872] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2501'. [ 439.760124][T12872] net_ratelimit: 44 callbacks suppressed [ 439.760199][T12872] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 439.998742][T12878] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2502'. [ 440.065294][T12878] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 440.232177][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.241853][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.335279][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 440.548070][T12886] netlink: 'syz.3.2509': attribute type 39 has an invalid length. [ 440.916321][T12895] netlink: 'syz.2.2513': attribute type 46 has an invalid length. [ 442.626554][T12909] netlink: 'syz.1.2516': attribute type 2 has an invalid length. [ 444.790176][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 445.123582][T12933] netlink: 'syz.0.2526': attribute type 9 has an invalid length. [ 445.140147][T12933] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2526'. [ 445.167071][ T5780] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 445.432827][T12933] netlink: 'syz.0.2526': attribute type 21 has an invalid length. [ 445.461412][T12933] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2526'. [ 445.489811][T12933] netlink: 'syz.0.2526': attribute type 9 has an invalid length. [ 445.528122][T12933] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2526'. [ 445.786063][T12945] netlink: 'syz.3.2531': attribute type 9 has an invalid length. [ 445.794818][T12945] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2531'. [ 445.831124][T12945] netlink: 'syz.3.2531': attribute type 10 has an invalid length. [ 445.864504][T12945] netlink: 'syz.3.2531': attribute type 10 has an invalid length. [ 446.184258][ T5780] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 446.760188][T12973] netlink: 'syz.3.2542': attribute type 9 has an invalid length. [ 446.806431][T12974] netlink: 'syz.3.2542': attribute type 21 has an invalid length. [ 446.813199][T12973] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2542'. [ 446.815195][T12974] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2542'. [ 446.981444][T12974] netlink: 'syz.3.2542': attribute type 9 has an invalid length. [ 447.007299][T12974] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2542'. [ 447.420385][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 447.786308][T12998] netlink: 'syz.0.2553': attribute type 10 has an invalid length. [ 447.813404][T12998] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2553'. [ 447.844652][T12998] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 448.133363][T13017] netlink: 'syz.3.2558': attribute type 39 has an invalid length. [ 448.234205][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 448.583784][T13028] netlink: 'syz.2.2564': attribute type 21 has an invalid length. [ 448.670186][T13032] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2567'. [ 448.736495][T13030] netlink: 'syz.0.2566': attribute type 9 has an invalid length. [ 448.756985][T13030] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2566'. [ 448.791984][T13033] netlink: 'syz.0.2566': attribute type 10 has an invalid length. [ 448.825059][T13033] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 448.866530][T13036] netlink: 'syz.1.2568': attribute type 33 has an invalid length. [ 448.875632][T13036] `: renamed from syz_tun (while UP) [ 449.204034][T13047] FAULT_INJECTION: forcing a failure. [ 449.204034][T13047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.233769][T13047] CPU: 0 PID: 13047 Comm: syz.0.2577 Not tainted syzkaller #0 [ 449.241311][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.251407][T13047] Call Trace: [ 449.254714][T13047] [ 449.257676][T13047] dump_stack_lvl+0x18c/0x250 [ 449.262400][T13047] ? show_regs_print_info+0x20/0x20 [ 449.267634][T13047] ? load_image+0x420/0x420 [ 449.272173][T13047] ? __might_fault+0xaa/0x120 [ 449.276889][T13047] should_fail_ex+0x39d/0x4d0 [ 449.281616][T13047] copyin+0x1a/0x90 [ 449.285464][T13047] _copy_from_iter+0x404/0x12e0 [ 449.290353][T13047] ? copyin+0x70/0x90 [ 449.294387][T13047] ? copyout_mc+0x70/0x70 [ 449.298758][T13047] ? copyout_mc+0x70/0x70 [ 449.303133][T13047] ? __virt_addr_valid+0x18c/0x540 [ 449.308285][T13047] ? page_copy_sane+0x16a/0x270 [ 449.313177][T13047] copy_page_from_iter+0x7b/0x100 [ 449.318240][T13047] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 449.324091][T13047] unix_stream_sendmsg+0x562/0xbf0 [ 449.329264][T13047] ? unix_show_fdinfo+0x270/0x270 [ 449.334323][T13047] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 449.340967][T13047] ? __might_fault+0xaa/0x120 [ 449.345680][T13047] ? aa_sock_msg_perm+0x94/0x150 [ 449.350658][T13047] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 449.355981][T13047] ? security_socket_sendmsg+0x80/0xa0 [ 449.361476][T13047] ? unix_show_fdinfo+0x270/0x270 [ 449.366540][T13047] ____sys_sendmsg+0x5ba/0x960 [ 449.371353][T13047] ? __sys_sendmsg_sock+0x30/0x30 [ 449.376407][T13047] ? __import_iovec+0x3fa/0x850 [ 449.381300][T13047] ? import_iovec+0x73/0xa0 [ 449.385844][T13047] ___sys_sendmsg+0x2a6/0x360 [ 449.390561][T13047] ? get_pid_task+0x20/0x1e0 [ 449.395192][T13047] ? __sys_sendmsg+0x2a0/0x2a0 [ 449.400013][T13047] ? __lock_acquire+0x7d40/0x7d40 [ 449.405104][T13047] __se_sys_sendmsg+0x1c2/0x2b0 [ 449.409996][T13047] ? __x64_sys_sendmsg+0x80/0x80 [ 449.414983][T13047] ? lockdep_hardirqs_on+0x98/0x150 [ 449.420307][T13047] do_syscall_64+0x55/0xb0 [ 449.424755][T13047] ? clear_bhb_loop+0x40/0x90 [ 449.429480][T13047] ? clear_bhb_loop+0x40/0x90 [ 449.434185][T13047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.440118][T13047] RIP: 0033:0x7f3a4bd9ce59 [ 449.444563][T13047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.464224][T13047] RSP: 002b:00007f3a4cbb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.472673][T13047] RAX: ffffffffffffffda RBX: 00007f3a4c015fa0 RCX: 00007f3a4bd9ce59 [ 449.480675][T13047] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000005 [ 449.488674][T13047] RBP: 00007f3a4cbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.496934][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.504933][T13047] R13: 00007f3a4c016038 R14: 00007f3a4c015fa0 R15: 00007ffc5aeb8558 [ 449.512951][T13047] [ 449.834206][ T5780] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 450.004049][T13057] netlink: 'syz.0.2572': attribute type 9 has an invalid length. [ 451.975447][T13040] netlink: 'syz.1.2569': attribute type 10 has an invalid length. [ 451.983608][T13040] __nla_validate_parse: 2 callbacks suppressed [ 451.983649][T13040] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2569'. [ 452.855165][T13071] netlink: 'syz.0.2576': attribute type 10 has an invalid length. [ 452.865040][T13071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2576'. [ 452.875528][T13071] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 453.627601][T13082] netlink: 'syz.0.2581': attribute type 9 has an invalid length. [ 453.685349][T13082] netlink: 160016 bytes leftover after parsing attributes in process `syz.0.2581'. [ 454.458072][T13092] netlink: 'syz.3.2584': attribute type 10 has an invalid length. [ 454.466122][T13092] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2584'. [ 454.839016][T13097] netlink: 'syz.2.2586': attribute type 17 has an invalid length. [ 454.898434][T13097] netlink: 'syz.2.2586': attribute type 16 has an invalid length. [ 454.906331][T13097] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2586'. [ 454.976129][T13099] netlink: 'syz.2.2586': attribute type 46 has an invalid length. [ 455.074826][T13108] Dead loop on virtual device ip6_vti0, fix it urgently! [ 455.293356][T13110] netlink: 'syz.3.2591': attribute type 21 has an invalid length. [ 455.307439][T13110] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2591'. [ 455.332462][T13110] netlink: 'syz.3.2591': attribute type 5 has an invalid length. [ 455.347788][T13110] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2591'. [ 456.137080][T13130] netlink: 'syz.2.2597': attribute type 2 has an invalid length. [ 456.175722][T13130] netlink: 'syz.2.2597': attribute type 8 has an invalid length. [ 456.183958][T13130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2597'. [ 456.786661][T13135] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2600'. [ 456.971038][T13142] Dead loop on virtual device ip6_vti0, fix it urgently! [ 457.912888][T13154] validate_nla: 1 callbacks suppressed [ 457.912909][T13154] netlink: 'syz.2.2608': attribute type 39 has an invalid length. [ 458.087064][T13157] sctp: [Deprecated]: syz.3.2609 (pid 13157) Use of int in max_burst socket option deprecated. [ 458.087064][T13157] Use struct sctp_assoc_value instead [ 458.274248][T13161] netlink: 'syz.1.2611': attribute type 9 has an invalid length. [ 458.301650][T13161] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2611'. [ 458.319065][T13159] netlink: 'syz.0.2610': attribute type 2 has an invalid length. [ 458.328072][T13159] netlink: 'syz.0.2610': attribute type 8 has an invalid length. [ 458.336927][T13159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2610'. [ 458.880955][T13170] netlink: 'syz.1.2614': attribute type 5 has an invalid length. [ 458.909325][T13170] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2614'. [ 459.039163][ T1145] hsr_slave_0: left promiscuous mode [ 459.067916][ T1145] hsr_slave_1: left promiscuous mode [ 459.108257][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.192262][ T1145] veth1_macvtap: left allmulticast mode [ 459.201268][ T1145] veth1_macvtap: left promiscuous mode [ 459.210023][ T1145] veth0_macvtap: left promiscuous mode [ 459.325507][T13180] netlink: 'syz.1.2618': attribute type 9 has an invalid length. [ 459.339373][T13180] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2618'. [ 459.839332][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 459.918360][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.964903][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.015876][ T1145] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 460.301243][ T1145] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 460.310442][ T1145] bond0 (unregistering): Released all slaves [ 460.422262][T13173] netlink: 'syz.0.2615': attribute type 10 has an invalid length. [ 460.431640][T13173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2615'. [ 460.441323][T13173] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 461.191494][T13203] FAULT_INJECTION: forcing a failure. [ 461.191494][T13203] name failslab, interval 1, probability 0, space 0, times 0 [ 461.239334][T13203] CPU: 1 PID: 13203 Comm: syz.3.2623 Not tainted syzkaller #0 [ 461.246859][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.256943][T13203] Call Trace: [ 461.260246][T13203] [ 461.263199][T13203] dump_stack_lvl+0x18c/0x250 [ 461.267913][T13203] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 461.274111][T13203] ? show_regs_print_info+0x20/0x20 [ 461.279341][T13203] ? load_image+0x420/0x420 [ 461.283888][T13203] should_fail_ex+0x39d/0x4d0 [ 461.288610][T13203] should_failslab+0x9/0x20 [ 461.293143][T13203] slab_pre_alloc_hook+0x59/0x310 [ 461.298207][T13203] ? lockdep_hardirqs_on+0x98/0x150 [ 461.303437][T13203] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.309184][T13203] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.314929][T13203] __kmem_cache_alloc_node+0x53/0x250 [ 461.320373][T13203] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.326117][T13203] __kmalloc+0xa4/0x230 [ 461.330309][T13203] tomoyo_realpath_from_path+0xe3/0x5d0 [ 461.335896][T13203] tomoyo_path_number_perm+0x248/0x620 [ 461.341380][T13203] ? tomoyo_path_number_perm+0x217/0x620 [ 461.347042][T13203] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 461.352572][T13203] ? __fget_files+0x28/0x4b0 [ 461.357194][T13203] ? __fget_files+0x28/0x4b0 [ 461.361834][T13203] security_file_ioctl+0x70/0xa0 [ 461.366841][T13203] __se_sys_ioctl+0x48/0x170 [ 461.371470][T13203] do_syscall_64+0x55/0xb0 [ 461.375912][T13203] ? clear_bhb_loop+0x40/0x90 [ 461.380615][T13203] ? clear_bhb_loop+0x40/0x90 [ 461.385580][T13203] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.391505][T13203] RIP: 0033:0x7fc3d159ce59 [ 461.395950][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.415674][T13203] RSP: 002b:00007fc3d239f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.424117][T13203] RAX: ffffffffffffffda RBX: 00007fc3d1815fa0 RCX: 00007fc3d159ce59 [ 461.432204][T13203] RDX: 0000200000000300 RSI: 0000000000008b26 RDI: 0000000000000004 [ 461.440287][T13203] RBP: 00007fc3d239f090 R08: 0000000000000000 R09: 0000000000000000 [ 461.448280][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.456275][T13203] R13: 00007fc3d1816038 R14: 00007fc3d1815fa0 R15: 00007ffc07e88c68 [ 461.464297][T13203] [ 461.701443][T13206] netlink: 'syz.0.2622': attribute type 2 has an invalid length. [ 461.725583][T13203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.824354][T13206] netlink: 'syz.0.2622': attribute type 8 has an invalid length. [ 461.910947][T13206] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2622'. [ 462.563832][ T5780] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 463.004858][T13230] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2635'. [ 463.479210][T13242] netlink: 'syz.2.2639': attribute type 9 has an invalid length. [ 463.559975][T13242] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2639'. [ 463.580364][T13245] netlink: 'syz.2.2639': attribute type 10 has an invalid length. [ 463.684240][T13245] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 463.687231][ T5780] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 463.736977][T13242] netlink: 'syz.2.2639': attribute type 10 has an invalid length. [ 464.011927][T13248] netlink: 'syz.3.2640': attribute type 2 has an invalid length. [ 464.074369][T13248] netlink: 'syz.3.2640': attribute type 8 has an invalid length. [ 464.095104][T13248] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2640'. [ 464.441477][T13272] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2650'. [ 464.558727][ T5780] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3 [ 464.630254][T13278] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2652'. [ 464.678900][T13278] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2652'. [ 465.135212][T13292] netlink: 'syz.0.2657': attribute type 2 has an invalid length. [ 465.168735][T13292] netlink: 'syz.0.2657': attribute type 8 has an invalid length. [ 465.196967][T13292] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2657'. [ 465.549838][T13298] netlink: 'syz.1.2660': attribute type 9 has an invalid length. [ 465.578349][T13298] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2660'. [ 466.117490][T13310] netlink: 'syz.1.2661': attribute type 2 has an invalid length. [ 466.158129][T13310] netlink: 'syz.1.2661': attribute type 8 has an invalid length. [ 466.181927][T13310] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2661'. [ 466.291422][ T5780] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 466.295694][T13318] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2665'. [ 466.505487][T13322] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2666'. [ 467.018755][ T5780] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 468.861534][ T5780] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 472.105932][T13383] validate_nla: 4 callbacks suppressed [ 472.105980][T13383] netlink: 'syz.3.2690': attribute type 2 has an invalid length. [ 472.139817][T13383] netlink: 'syz.3.2690': attribute type 8 has an invalid length. [ 472.166789][T13383] __nla_validate_parse: 3 callbacks suppressed [ 472.166805][T13383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2690'. [ 472.192999][T13391] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2692'. [ 472.389249][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 472.668970][ T5783] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 472.801385][T13414] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2701'. [ 473.549854][T13444] netlink: 'syz.3.2713': attribute type 5 has an invalid length. [ 473.558509][T13444] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2713'. [ 476.031892][T13468] netlink: 'syz.2.2722': attribute type 10 has an invalid length. [ 476.048259][T13468] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2722'. [ 476.064464][T13468] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 476.479174][T13482] netlink: 187884 bytes leftover after parsing attributes in process `syz.2.2725'. [ 476.785015][T13477] can: request_module (can-proto-5) failed. [ 477.248662][T13496] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2731'. [ 478.270715][T13512] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 478.279536][T13512] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2736'. [ 478.291387][T13512] macvlan1: entered promiscuous mode [ 478.298720][T13512] batman_adv: batadv0: Adding interface: macvlan1 [ 478.305268][T13512] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.335000][T13512] batman_adv: batadv0: Interface activated: macvlan1 [ 478.347748][T13518] netlink: 'syz.2.2738': attribute type 16 has an invalid length. [ 478.356296][T13518] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2738'. [ 478.365509][T13518] veth1_macvtap: entered allmulticast mode [ 481.244396][T13564] netlink: 'syz.0.2750': attribute type 29 has an invalid length. [ 481.275815][T13564] netlink: 'syz.0.2750': attribute type 29 has an invalid length. [ 483.115553][T13596] netlink: 'syz.2.2765': attribute type 33 has an invalid length. [ 483.135228][T13596] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2765'. [ 483.159775][T13596] `: renamed from syz_tun (while UP) [ 483.467181][T13598] netlink: 'syz.0.2764': attribute type 9 has an invalid length. [ 483.475556][T13598] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2764'. [ 483.585021][T13598] netlink: 'syz.0.2764': attribute type 10 has an invalid length. [ 484.284637][T13620] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2772'. [ 484.883988][T13615] netlink: 'syz.0.2770': attribute type 33 has an invalid length. [ 484.924141][T13615] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2770'. [ 485.254294][T13626] netlink: 'syz.1.2775': attribute type 9 has an invalid length. [ 485.285137][T13626] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2775'. [ 487.621376][T13645] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 487.647386][T13645] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode [ 488.554467][T13657] netlink: 'syz.0.2786': attribute type 29 has an invalid length. [ 488.599023][T13657] netlink: 'syz.0.2786': attribute type 29 has an invalid length. [ 488.610337][T13659] netlink: 'syz.0.2786': attribute type 29 has an invalid length. [ 488.658669][T13657] netlink: 'syz.0.2786': attribute type 29 has an invalid length. [ 488.876876][T13659] netlink: 'syz.0.2786': attribute type 29 has an invalid length. [ 489.329985][ T5783] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 490.228929][T13671] delete_channel: no stack [ 493.210182][T13693] FAULT_INJECTION: forcing a failure. [ 493.210182][T13693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.908895][T13693] CPU: 0 PID: 13693 Comm: syz.3.2798 Not tainted syzkaller #0 [ 493.916430][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.926522][T13693] Call Trace: [ 493.929841][T13693] [ 493.932796][T13693] dump_stack_lvl+0x18c/0x250 [ 493.937605][T13693] ? show_regs_print_info+0x20/0x20 [ 493.942930][T13693] ? load_image+0x420/0x420 [ 493.947482][T13693] ? __might_fault+0xaa/0x120 [ 493.952201][T13693] ? __lock_acquire+0x7d40/0x7d40 [ 493.957263][T13693] should_fail_ex+0x39d/0x4d0 [ 493.961987][T13693] _copy_from_user+0x2f/0xe0 [ 493.966638][T13693] __sys_bpf+0x23e/0x890 [ 493.970925][T13693] ? bpf_link_show_fdinfo+0x390/0x390 [ 493.976342][T13693] ? lock_chain_count+0x20/0x20 [ 493.981235][T13693] __x64_sys_bpf+0x7c/0x90 [ 493.985682][T13693] do_syscall_64+0x55/0xb0 [ 493.990127][T13693] ? clear_bhb_loop+0x40/0x90 [ 493.994835][T13693] ? clear_bhb_loop+0x40/0x90 [ 493.999545][T13693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.005474][T13693] RIP: 0033:0x7fc3d159ce59 [ 494.009922][T13693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.029570][T13693] RSP: 002b:00007fc3d237e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.038021][T13693] RAX: ffffffffffffffda RBX: 00007fc3d1816090 RCX: 00007fc3d159ce59 [ 494.046020][T13693] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 494.054022][T13693] RBP: 00007fc3d237e090 R08: 0000000000000000 R09: 0000000000000000 [ 494.062017][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.070013][T13693] R13: 00007fc3d1816128 R14: 00007fc3d1816090 R15: 00007ffc07e88c68 [ 494.078029][T13693] [ 495.166199][ T5783] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 495.196283][T13699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2800'. [ 496.386357][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2810'. [ 496.787296][ T5783] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 499.389405][T13771] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2824'. [ 499.512585][T13773] netlink: 'syz.0.2823': attribute type 19 has an invalid length. [ 499.621892][T13773] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2823'. [ 501.670857][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.677951][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.472473][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.482702][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.506131][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.517634][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.527388][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 503.538240][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.078784][T13798] delete_channel: no stack [ 504.384148][T13794] chnl_net:caif_netlink_parms(): no params data found [ 504.781264][T13809] netlink: 'syz.2.2836': attribute type 19 has an invalid length. [ 504.910055][T13809] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2836'. [ 505.216042][T13794] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.243065][T13794] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.273566][T13794] bridge_slave_0: entered allmulticast mode [ 505.301517][T13794] bridge_slave_0: entered promiscuous mode [ 505.349050][T13794] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.413032][T13794] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.445511][T13794] bridge_slave_1: entered allmulticast mode [ 505.453476][T13794] bridge_slave_1: entered promiscuous mode [ 505.532062][T13794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.552224][T13821] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2838'. [ 505.581696][T13794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.587441][ T5783] Bluetooth: hci3: command tx timeout [ 505.649571][T13826] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2839'. [ 505.677220][T13794] team0: Port device team_slave_0 added [ 505.719984][T13794] team0: Port device team_slave_1 added [ 505.816754][T13794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.823423][T13828] Dead loop on virtual device ip6_vti0, fix it urgently! [ 505.833814][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.875945][T13794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.890778][T13794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.901016][T13794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.952364][T13794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.424138][T13834] delete_channel: no stack [ 506.544968][T13794] hsr_slave_0: entered promiscuous mode [ 506.563686][T13794] hsr_slave_1: entered promiscuous mode [ 506.590262][T13794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.601682][T13794] Cannot create hsr debugfs directory [ 507.627859][ T142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.668426][ T5783] Bluetooth: hci3: command tx timeout [ 507.675741][T13851] netlink: 'syz.3.2850': attribute type 10 has an invalid length. [ 507.686942][T13851] bridge0: port 4(hsr0) entered disabled state [ 507.693346][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.700811][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.747781][ T142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.868244][ T142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.900319][T13856] Dead loop on virtual device ip6_vti0, fix it urgently! [ 508.006337][ T142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.041051][T13794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 508.052363][T13794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 508.063548][T13794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 508.089769][T13794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 508.406209][T13794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.438759][T13794] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.475711][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.482978][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.512479][ T4730] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.519719][ T4730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.959780][T13875] netlink: 'syz.3.2857': attribute type 9 has an invalid length. [ 508.976505][T13875] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2857'. [ 509.061874][T13877] delete_channel: no stack [ 509.495571][T13890] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2859'. [ 509.554224][T13893] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 509.566985][T13893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2860'. [ 509.592749][T13893] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 509.746932][ T5783] Bluetooth: hci3: command tx timeout [ 509.840936][T13794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.395468][T13794] veth0_vlan: entered promiscuous mode [ 511.455960][T13794] veth1_vlan: entered promiscuous mode [ 511.605581][T13794] veth0_macvtap: entered promiscuous mode [ 511.650281][T13794] veth1_macvtap: entered promiscuous mode [ 511.742295][T13794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.753660][T13794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.771497][T13794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.827008][ T5783] Bluetooth: hci3: command tx timeout [ 511.845550][ T142] hsr_slave_0: left promiscuous mode [ 511.852553][ T142] hsr_slave_1: left promiscuous mode [ 511.864445][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.873752][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.888067][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.896259][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.904593][ T142] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 511.929466][ T142] batman_adv: batadv0: Removing interface: veth0_vlan [ 511.956783][ T142] batman_adv: batadv0: Interface deactivated: macvlan1 [ 511.963924][ T142] batman_adv: batadv0: Removing interface: macvlan1 [ 511.990100][ T142] hsr0: left allmulticast mode [ 512.005495][ T142] bridge0: port 3(hsr0) entered disabled state [ 512.041734][ T142] bridge_slave_1: left allmulticast mode [ 512.056883][ T142] bridge_slave_1: left promiscuous mode [ 512.067179][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.117800][ T142] bridge_slave_0: left allmulticast mode [ 512.123534][ T142] bridge_slave_0: left promiscuous mode [ 512.147709][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.259632][ T142] veth1_macvtap: left promiscuous mode [ 512.265362][ T142] veth0_macvtap: left promiscuous mode [ 512.288910][ T142] veth1_vlan: left promiscuous mode [ 512.294445][ T142] veth0_vlan: left promiscuous mode [ 513.751491][T13943] netlink: 'syz.0.2869': attribute type 9 has an invalid length. [ 513.787515][T13943] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2869'. [ 514.683977][ T142] team0 (unregistering): Port device team_slave_1 removed [ 514.764482][ T142] team0 (unregistering): Port device team_slave_0 removed [ 514.849138][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.962671][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.683436][ T142] bond0 (unregistering): Released all slaves [ 515.988946][T13941] netlink: 'syz.3.2870': attribute type 5 has an invalid length. [ 516.016924][T13941] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2870'. [ 516.195155][T13794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.345047][T13794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.376896][T13794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.406297][T13794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.415389][T13794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.814060][ T9130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.839497][ T9130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.052919][ T4730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.089092][ T4730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.979696][T13985] netlink: 'syz.4.2879': attribute type 9 has an invalid length. [ 519.011959][T13985] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2879'. [ 520.007127][T14001] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 521.001328][T14013] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2885'. [ 521.027228][T14013] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 521.282415][T14035] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2894'. [ 521.504768][T14044] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2895'. [ 521.566792][T14044] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 522.697471][T14072] netlink: 'syz.3.2903': attribute type 10 has an invalid length. [ 522.728154][T14072] team0: Device hsr_slave_0 failed to register rx_handler [ 523.003823][T14079] netlink: 'syz.4.2905': attribute type 9 has an invalid length. [ 523.039736][T14079] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2905'. [ 523.178338][T14079] netlink: 'syz.4.2905': attribute type 10 has an invalid length. [ 523.489946][T14079] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 523.923405][T14104] netlink: 'syz.4.2911': attribute type 3 has an invalid length. [ 523.986766][T14104] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2911'. [ 524.027816][T14108] netlink: 'syz.4.2911': attribute type 46 has an invalid length. [ 527.103501][T14172] Dead loop on virtual device ip6_vti0, fix it urgently! [ 528.459919][T14204] netlink: 'syz.2.2930': attribute type 10 has an invalid length. [ 528.670031][T14204] team0: Device hsr_slave_0 failed to register rx_handler [ 528.865455][T14222] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2935'. [ 528.928332][T14228] tun0: tun_chr_ioctl cmd 1074025681 [ 528.933857][T14216] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 528.954271][T14216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2933'. [ 529.004823][T14216] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 529.559068][ T5783] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 532.147308][T14296] netlink: 'syz.2.2953': attribute type 10 has an invalid length. [ 532.171371][T14296] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2953'. [ 532.230190][T14296] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 532.426021][T14303] netlink: 'syz.2.2956': attribute type 3 has an invalid length. [ 532.444556][T14303] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2956'. [ 532.520154][T14306] netlink: 'syz.2.2956': attribute type 46 has an invalid length. [ 533.019690][T14314] sctp: [Deprecated]: syz.3.2960 (pid 14314) Use of int in max_burst socket option deprecated. [ 533.019690][T14314] Use struct sctp_assoc_value instead [ 533.172873][T14316] netlink: 'syz.0.2958': attribute type 4 has an invalid length. [ 533.223560][T14316] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2958'. [ 533.306162][T14316] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 536.613943][T14386] FAULT_INJECTION: forcing a failure. [ 536.613943][T14386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.677715][T14386] CPU: 1 PID: 14386 Comm: syz.2.2979 Not tainted syzkaller #0 [ 536.685254][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.695335][T14386] Call Trace: [ 536.698637][T14386] [ 536.701575][T14386] dump_stack_lvl+0x18c/0x250 [ 536.706273][T14386] ? show_regs_print_info+0x20/0x20 [ 536.711483][T14386] ? load_image+0x420/0x420 [ 536.715999][T14386] ? __might_fault+0xaa/0x120 [ 536.720690][T14386] should_fail_ex+0x39d/0x4d0 [ 536.725393][T14386] copyin+0x1a/0x90 [ 536.729219][T14386] _copy_from_iter+0x404/0x12e0 [ 536.734083][T14386] ? copyin+0x70/0x90 [ 536.738123][T14386] ? copyout_mc+0x70/0x70 [ 536.742470][T14386] ? copyout_mc+0x70/0x70 [ 536.746814][T14386] ? __virt_addr_valid+0x18c/0x540 [ 536.751950][T14386] ? page_copy_sane+0x16a/0x270 [ 536.756822][T14386] copy_page_from_iter+0x7b/0x100 [ 536.761882][T14386] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 536.767725][T14386] unix_stream_sendmsg+0x562/0xbf0 [ 536.772860][T14386] ? unix_show_fdinfo+0x270/0x270 [ 536.777890][T14386] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 536.784346][T14386] ? __might_fault+0xaa/0x120 [ 536.789037][T14386] ? aa_sock_msg_perm+0x94/0x150 [ 536.793988][T14386] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 536.799284][T14386] ? security_socket_sendmsg+0x80/0xa0 [ 536.804753][T14386] ? unix_show_fdinfo+0x270/0x270 [ 536.809790][T14386] ____sys_sendmsg+0x5ba/0x960 [ 536.814588][T14386] ? __sys_sendmsg_sock+0x30/0x30 [ 536.819624][T14386] ? __import_iovec+0x3fa/0x850 [ 536.824488][T14386] ? import_iovec+0x73/0xa0 [ 536.829021][T14386] ___sys_sendmsg+0x2a6/0x360 [ 536.833720][T14386] ? get_pid_task+0x20/0x1e0 [ 536.838341][T14386] ? __sys_sendmsg+0x2a0/0x2a0 [ 536.843143][T14386] ? __lock_acquire+0x7d40/0x7d40 [ 536.848205][T14386] __se_sys_sendmsg+0x1c2/0x2b0 [ 536.853078][T14386] ? __x64_sys_sendmsg+0x80/0x80 [ 536.858045][T14386] ? lockdep_hardirqs_on+0x98/0x150 [ 536.863278][T14386] do_syscall_64+0x55/0xb0 [ 536.867712][T14386] ? clear_bhb_loop+0x40/0x90 [ 536.872404][T14386] ? clear_bhb_loop+0x40/0x90 [ 536.877092][T14386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.883006][T14386] RIP: 0033:0x7f175519ce59 [ 536.887445][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.907063][T14386] RSP: 002b:00007f175601c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.915488][T14386] RAX: ffffffffffffffda RBX: 00007f1755415fa0 RCX: 00007f175519ce59 [ 536.923468][T14386] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000005 [ 536.931442][T14386] RBP: 00007f175601c090 R08: 0000000000000000 R09: 0000000000000000 [ 536.939419][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 536.947404][T14386] R13: 00007f1755416038 R14: 00007f1755415fa0 R15: 00007ffc82d203e8 [ 536.955427][T14386] [ 540.296799][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 555.150157][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 565.996151][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.002648][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.122115][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 568.132285][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 568.142593][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 568.151207][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 568.177328][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 568.186777][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 568.257940][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.268279][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.276371][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 568.285917][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 568.314695][ T5783] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 568.326713][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 568.561200][ T5780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 568.570177][ T5780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 568.582179][ T5780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 568.590579][ T5780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 568.603815][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 568.620728][ T5780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 568.632380][ T5780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 568.640898][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 568.649440][ T5780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 568.651735][T14493] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 568.678034][T14493] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 568.687414][ T5780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 569.114220][ T1145] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.360567][ T1145] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.496532][ T1145] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.570213][ T1145] bond0: (slave netdevsim0): Releasing backup interface [ 569.579870][ T1145] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.893343][T14479] chnl_net:caif_netlink_parms(): no params data found [ 569.991107][T14481] chnl_net:caif_netlink_parms(): no params data found [ 570.018004][T14485] chnl_net:caif_netlink_parms(): no params data found [ 570.306952][ T5783] Bluetooth: hci4: command tx timeout [ 570.410093][T14489] chnl_net:caif_netlink_parms(): no params data found [ 570.423096][T14479] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.430649][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.439578][T14479] bridge_slave_0: entered allmulticast mode [ 570.446409][T14479] bridge_slave_0: entered promiscuous mode [ 570.455316][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.462593][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.469799][ T5783] Bluetooth: hci5: command tx timeout [ 570.475801][T14479] bridge_slave_1: entered allmulticast mode [ 570.483251][T14479] bridge_slave_1: entered promiscuous mode [ 570.490802][T14485] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.499664][T14485] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.508369][T14485] bridge_slave_0: entered allmulticast mode [ 570.515238][T14485] bridge_slave_0: entered promiscuous mode [ 570.524149][T14485] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.531463][T14485] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.538746][T14485] bridge_slave_1: entered allmulticast mode [ 570.545938][T14485] bridge_slave_1: entered promiscuous mode [ 570.663143][T14481] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.670443][T14481] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.677898][T14481] bridge_slave_0: entered allmulticast mode [ 570.685439][T14481] bridge_slave_0: entered promiscuous mode [ 570.693586][T14481] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.700985][T14481] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.708591][T14481] bridge_slave_1: entered allmulticast mode [ 570.715755][T14481] bridge_slave_1: entered promiscuous mode [ 570.725759][T14479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.739094][T14479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.768428][T14485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.788266][ T5782] Bluetooth: hci6: command tx timeout [ 570.795483][ T5783] Bluetooth: hci7: command tx timeout [ 570.942688][T14485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.990165][T14481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.045761][T14479] team0: Port device team_slave_0 added [ 571.061185][T14479] team0: Port device team_slave_1 added [ 571.124975][T14481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.189721][T14485] team0: Port device team_slave_0 added [ 571.250337][T14479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.257843][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.287326][T14479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.318754][T14485] team0: Port device team_slave_1 added [ 571.348652][T14489] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.355841][T14489] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.369963][T14489] bridge_slave_0: entered allmulticast mode [ 571.377023][T14489] bridge_slave_0: entered promiscuous mode [ 571.394124][T14489] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.401360][T14489] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.409081][T14489] bridge_slave_1: entered allmulticast mode [ 571.415888][T14489] bridge_slave_1: entered promiscuous mode [ 571.423553][T14479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.432683][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.458715][T14479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.485164][T14481] team0: Port device team_slave_0 added [ 571.495178][T14481] team0: Port device team_slave_1 added [ 571.588117][T14485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.595125][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.621935][T14485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.644577][T14485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.651659][T14485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.679395][T14485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.693355][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.715428][T14479] hsr_slave_0: entered promiscuous mode [ 571.739388][T14479] hsr_slave_1: entered promiscuous mode [ 571.745903][T14479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.760962][T14479] Cannot create hsr debugfs directory [ 571.767420][T14481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.782710][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.816056][T14481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.837281][T14481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.844293][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.881106][T14481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.909458][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.134913][T14485] hsr_slave_0: entered promiscuous mode [ 572.148265][T14485] hsr_slave_1: entered promiscuous mode [ 572.154782][T14485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.170847][T14485] Cannot create hsr debugfs directory [ 572.185009][T14489] team0: Port device team_slave_0 added [ 572.322172][T14489] team0: Port device team_slave_1 added [ 572.344357][T14481] hsr_slave_0: entered promiscuous mode [ 572.350770][T14481] hsr_slave_1: entered promiscuous mode [ 572.360373][T14481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.368017][T14481] Cannot create hsr debugfs directory [ 572.401868][ T5783] Bluetooth: hci4: command tx timeout [ 572.433842][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.441034][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.467642][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.481796][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.490188][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.516489][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.546704][ T5783] Bluetooth: hci5: command tx timeout [ 572.692526][ T1145] hsr_slave_0: left promiscuous mode [ 572.699029][ T1145] hsr_slave_1: left promiscuous mode [ 572.705334][ T1145] bridge_slave_1: left allmulticast mode [ 572.711742][ T1145] bridge_slave_1: left promiscuous mode [ 572.719643][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.729770][ T1145] bridge_slave_0: left allmulticast mode [ 572.735487][ T1145] bridge_slave_0: left promiscuous mode [ 572.743630][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.780721][ T1145] veth1_macvtap: left promiscuous mode [ 572.786341][ T1145] veth0_macvtap: left promiscuous mode [ 572.792556][ T1145] veth1_vlan: left promiscuous mode [ 572.800666][ T1145] veth0_vlan: left promiscuous mode [ 572.867056][ T5782] Bluetooth: hci6: command tx timeout [ 572.873133][ T5783] Bluetooth: hci7: command tx timeout [ 573.863396][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 573.931407][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 573.994909][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.066205][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.387851][ T1145] bond0 (unregistering): Released all slaves [ 574.475346][ T5783] Bluetooth: hci4: command tx timeout [ 574.492483][T14489] hsr_slave_0: entered promiscuous mode [ 574.506140][T14489] hsr_slave_1: entered promiscuous mode [ 574.637157][ T5783] Bluetooth: hci5: command tx timeout [ 574.905670][T14479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 574.921429][T14479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 574.942714][T14479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 574.949828][ T5783] Bluetooth: hci7: command tx timeout [ 574.949884][ T5783] Bluetooth: hci6: command tx timeout [ 574.981973][T14479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 575.123251][T14485] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 575.169517][T14485] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 575.181915][T14485] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 575.254027][ T1145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.281259][T14485] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 575.392008][ T1145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.488489][T14481] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 575.501497][T14481] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 575.552590][ T1145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.577234][T14481] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 575.592353][T14481] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 575.713837][ T1145] bond0: (slave netdevsim0): Releasing backup interface [ 575.723185][ T1145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.793370][T14489] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 575.803246][T14489] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 575.815313][T14489] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 575.826242][T14489] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 575.879709][T14479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.996340][T14479] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.052343][T14485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.164041][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.171339][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.226448][ T1145] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.288792][T14485] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.305463][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.312609][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.359545][ T1145] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.381118][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.388309][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.446180][ T1145] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.501575][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.508823][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.547016][ T5782] Bluetooth: hci4: command tx timeout [ 576.581490][ T1145] bond0: (slave netdevsim0): Releasing backup interface [ 576.598472][ T1145] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.700865][T14481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.708573][ T5782] Bluetooth: hci5: command tx timeout [ 576.831937][T14489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.863979][T14481] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.953843][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.961122][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.027494][ T5782] Bluetooth: hci6: command tx timeout [ 577.032965][ T5782] Bluetooth: hci7: command tx timeout [ 577.057963][T14489] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.087240][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.094456][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.200529][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.207776][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.246463][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.253720][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.334686][T14479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.789299][T14485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.825269][T14489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.471794][T14479] veth0_vlan: entered promiscuous mode [ 578.716443][T14479] veth1_vlan: entered promiscuous mode [ 578.739855][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.908789][T14481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.941231][T14485] veth0_vlan: entered promiscuous mode [ 579.054802][T14479] veth0_macvtap: entered promiscuous mode [ 579.113894][T14485] veth1_vlan: entered promiscuous mode [ 579.150120][T14479] veth1_macvtap: entered promiscuous mode [ 579.275841][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.296492][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.318520][T14479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.459203][T14479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.474149][T14479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.490260][T14479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.502548][T14485] veth0_macvtap: entered promiscuous mode [ 579.563155][T14479] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.575872][T14479] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.585942][T14479] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.607666][T14479] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.642858][T14485] veth1_macvtap: entered promiscuous mode [ 579.765383][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.784792][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.796089][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.817472][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.841373][T14485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.004462][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.022354][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.035820][T14485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.053260][T14485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.068724][T14485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.145917][T14489] veth0_vlan: entered promiscuous mode [ 580.199763][T14485] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.209301][T14485] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.218256][T14485] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.228465][T14485] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.240994][T14481] veth0_vlan: entered promiscuous mode [ 580.254620][T14489] veth1_vlan: entered promiscuous mode [ 580.323102][T14481] veth1_vlan: entered promiscuous mode [ 580.367291][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.375259][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.486138][T14489] veth0_macvtap: entered promiscuous mode [ 580.530902][T14489] veth1_macvtap: entered promiscuous mode [ 580.547656][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.560207][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.608289][ T1129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.616143][ T1129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.664537][T14481] veth0_macvtap: entered promiscuous mode [ 580.760073][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.789103][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.810292][T14481] veth1_macvtap: entered promiscuous mode [ 580.842741][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.870764][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.882259][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.894347][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.904680][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.916715][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.930736][T14489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.000012][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.028256][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.039590][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.050517][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.060830][T14489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.113800][T14489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.149117][T14489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.207450][T14489] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.219440][T14489] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.229085][T14489] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.247523][T14489] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.012252][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.025249][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.035786][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.048018][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.058293][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.069891][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.090368][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.102071][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.114636][T14481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.286470][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.317630][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.349148][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.360164][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.370211][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.381439][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.391838][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.402416][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.413736][T14481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.478235][T14721] team0: Port device team_slave_0 removed [ 582.499616][T14481] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.514063][T14481] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.525283][T14481] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.534801][T14481] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.588202][T14719] netlink: 209820 bytes leftover after parsing attributes in process `syz.5.3000'. [ 582.604820][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.614977][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.673036][ T5782] Bluetooth: hci6: unexpected event 0x06 length: 15 > 3 [ 583.769502][ T1025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.806015][ T1025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.880662][T14627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.915469][T14627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.977756][ T5782] Bluetooth: hci6: unexpected event 0x06 length: 15 > 3 [ 584.526209][T14741] netlink: 'syz.7.3007': attribute type 9 has an invalid length. [ 584.558496][T14734] netlink: 'syz.5.3005': attribute type 10 has an invalid length. [ 584.559212][T14741] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.3007'. [ 584.841920][T14734] team0: Port device wlan1 added [ 584.953868][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.007099][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.062150][ T1145] hsr_slave_0: left promiscuous mode [ 585.075493][ T1145] hsr_slave_1: left promiscuous mode [ 585.094510][ T1145] hsr0: left allmulticast mode [ 585.103804][ T1145] bridge0: port 3(hsr0) entered disabled state [ 585.123247][ T1145] bridge_slave_1: left allmulticast mode [ 585.132463][ T1145] bridge_slave_1: left promiscuous mode [ 585.147294][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.166091][ T1145] bridge_slave_0: left allmulticast mode [ 585.185522][ T1145] bridge_slave_0: left promiscuous mode [ 585.201420][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.281559][ T1145] hsr_slave_0: left promiscuous mode [ 585.297643][ T1145] hsr_slave_1: left promiscuous mode [ 585.343749][ T1145] bridge0: port 4(hsr0) entered disabled state [ 585.359860][ T1145] bridge_slave_1: left allmulticast mode [ 585.365779][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.383201][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.399296][T14759] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3008'. [ 585.444220][T14759] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3008'. [ 585.471533][ T1145] veth1_macvtap: left promiscuous mode [ 585.478894][ T1145] veth0_macvtap: left promiscuous mode [ 585.485526][ T1145] veth1_vlan: left promiscuous mode [ 585.496485][ T1145] veth0_vlan: left promiscuous mode [ 585.505823][ T1145] veth1_macvtap: left promiscuous mode [ 585.516197][ T1145] veth0_macvtap: left promiscuous mode [ 585.522263][ T1145] veth1_vlan: left promiscuous mode [ 585.528745][ T1145] veth0_vlan: left promiscuous mode [ 586.333122][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 586.384497][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 586.435780][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.499377][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.855703][ T1145] bond0 (unregistering): Released all slaves [ 587.609693][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 587.703386][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.754799][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.076717][ T1145] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 588.085900][ T1145] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 588.097949][ T1145] bond0 (unregistering): Released all slaves [ 588.310418][T14757] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 588.316133][T14757] pim6reg0: ignored: set checksum disabled [ 588.361928][T14763] netlink: 'syz.8.3009': attribute type 10 has an invalid length. [ 588.452086][T14763] team0: Device hsr_slave_0 failed to register rx_handler [ 588.910754][ T5783] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 589.027356][T14781] netlink: 'syz.7.3010': attribute type 10 has an invalid length. [ 589.061527][T14783] Dead loop on virtual device ip6_vti0, fix it urgently! [ 589.115746][T14781] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3010'. [ 589.158138][T14781] batman_adv: batadv0: Adding interface: veth0_vlan [ 589.164814][T14781] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.326711][T14781] batman_adv: batadv0: Interface activated: veth0_vlan [ 589.554245][T14788] netlink: 'syz.8.3014': attribute type 1 has an invalid length. [ 589.606370][T14788] netlink: 112860 bytes leftover after parsing attributes in process `syz.8.3014'. [ 589.667817][T14788] netlink: 16410 bytes leftover after parsing attributes in process `syz.8.3014'. [ 590.066962][ T5783] Bluetooth: hci6: command 0x0406 tx timeout [ 591.285525][ T5782] Bluetooth: hci7: unexpected event 0x06 length: 15 > 3 [ 591.420736][T14819] netlink: 'syz.6.3018': attribute type 9 has an invalid length. [ 591.476133][ T5782] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 591.512249][T14819] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.3018'. [ 591.770048][T14826] FAULT_INJECTION: forcing a failure. [ 591.770048][T14826] name failslab, interval 1, probability 0, space 0, times 0 [ 591.834823][T14826] CPU: 0 PID: 14826 Comm: syz.8.3023 Not tainted syzkaller #0 [ 591.842363][T14826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.852458][T14826] Call Trace: [ 591.855767][T14826] [ 591.858739][T14826] dump_stack_lvl+0x18c/0x250 [ 591.863475][T14826] ? show_regs_print_info+0x20/0x20 [ 591.868713][T14826] ? load_image+0x420/0x420 [ 591.873255][T14826] ? __might_sleep+0xe0/0xe0 [ 591.877896][T14826] ? __lock_acquire+0x7d40/0x7d40 [ 591.882960][T14826] ? __lock_acquire+0x1273/0x7d40 [ 591.888026][T14826] should_fail_ex+0x39d/0x4d0 [ 591.892759][T14826] should_failslab+0x9/0x20 [ 591.897317][T14826] slab_pre_alloc_hook+0x59/0x310 [ 591.902402][T14826] kmem_cache_alloc_node+0x60/0x320 [ 591.907642][T14826] ? __alloc_skb+0x103/0x2c0 [ 591.912267][T14826] __alloc_skb+0x103/0x2c0 [ 591.916703][T14826] alloc_skb_with_frags+0xca/0x7b0 [ 591.921848][T14826] sock_alloc_send_pskb+0x883/0x9a0 [ 591.927070][T14826] ? sock_kzfree_s+0x50/0x50 [ 591.931703][T14826] ? __lock_acquire+0x7d40/0x7d40 [ 591.936780][T14826] ? sock_def_readable+0xad/0x420 [ 591.942031][T14826] ? sock_def_readable+0xad/0x420 [ 591.947098][T14826] ? sock_def_readable+0x2ac/0x420 [ 591.952231][T14826] unix_stream_sendmsg+0x48b/0xbf0 [ 591.957393][T14826] ? unix_show_fdinfo+0x270/0x270 [ 591.962438][T14826] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 591.968877][T14826] ? __might_fault+0xaa/0x120 [ 591.973587][T14826] ? aa_sock_msg_perm+0x94/0x150 [ 591.978572][T14826] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 591.983889][T14826] ? security_socket_sendmsg+0x80/0xa0 [ 591.989379][T14826] ? unix_show_fdinfo+0x270/0x270 [ 591.994430][T14826] ____sys_sendmsg+0x5ba/0x960 [ 591.999220][T14826] ? __sys_sendmsg_sock+0x30/0x30 [ 592.004341][T14826] ? __import_iovec+0x3fa/0x850 [ 592.009213][T14826] ? import_iovec+0x73/0xa0 [ 592.013752][T14826] ___sys_sendmsg+0x2a6/0x360 [ 592.018469][T14826] ? get_pid_task+0x20/0x1e0 [ 592.023090][T14826] ? __sys_sendmsg+0x2a0/0x2a0 [ 592.027973][T14826] ? __lock_acquire+0x7d40/0x7d40 [ 592.033058][T14826] __se_sys_sendmsg+0x1c2/0x2b0 [ 592.037946][T14826] ? __x64_sys_sendmsg+0x80/0x80 [ 592.042938][T14826] ? lockdep_hardirqs_on+0x98/0x150 [ 592.048233][T14826] do_syscall_64+0x55/0xb0 [ 592.052699][T14826] ? clear_bhb_loop+0x40/0x90 [ 592.057408][T14826] ? clear_bhb_loop+0x40/0x90 [ 592.062134][T14826] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 592.068086][T14826] RIP: 0033:0x7f569139ce59 [ 592.072530][T14826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.092208][T14826] RSP: 002b:00007f56922e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.100740][T14826] RAX: ffffffffffffffda RBX: 00007f5691615fa0 RCX: 00007f569139ce59 [ 592.108729][T14826] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 0000000000000005 [ 592.116708][T14826] RBP: 00007f56922e8090 R08: 0000000000000000 R09: 0000000000000000 [ 592.124689][T14826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.132681][T14826] R13: 00007f5691616038 R14: 00007f5691615fa0 R15: 00007ffc68b98ad8 [ 592.140686][T14826] [ 592.182530][T14832] Dead loop on virtual device ip6_vti0, fix it urgently! [ 592.357703][ T5782] Bluetooth: hci6: unexpected event 0x08 length: 15 > 4 [ 592.581672][T14837] netlink: 'syz.6.3025': attribute type 1 has an invalid length. [ 592.640619][T14840] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3026'. [ 592.641181][T14839] netlink: 'syz.5.3034': attribute type 10 has an invalid length. [ 592.683444][T14837] netlink: 112860 bytes leftover after parsing attributes in process `syz.6.3025'. [ 592.701684][T14843] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3026'. [ 592.750520][T14837] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.3025'. [ 592.849609][T14839] team0: Device hsr_slave_0 failed to register rx_handler [ 594.744075][ T5782] Bluetooth: hci7: unexpected event 0x08 length: 15 > 4 [ 594.749263][ T5783] Bluetooth: hci6: unexpected event 0x09 length: 15 > 3 [ 595.280154][ T5783] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 595.359553][ T5783] ------------[ cut here ]------------ [ 595.372783][ T5783] WARNING: CPU: 1 PID: 5783 at net/bluetooth/hci_conn.c:569 hci_conn_timeout+0xf9/0x290 [ 595.382903][ T5783] Modules linked in: [ 595.386882][ T5783] CPU: 1 PID: 5783 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 595.394464][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 595.404745][ T5783] Workqueue: hci7 hci_conn_timeout [ 595.405869][ T5780] Bluetooth: hci5: unexpected event 0x06 length: 15 > 3 [ 595.410098][ T5783] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 595.410155][ T5783] Code: f7 48 89 df e8 c8 e5 08 00 eb 07 e8 31 f3 ff f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ec db fe ff e8 17 f3 ff f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 595.410174][ T5783] RSP: 0018:ffffc900046efb90 EFLAGS: 00010293 [ 595.410197][ T5783] RAX: ffffffff89873879 RBX: ffff888024ae0000 RCX: ffff88802b130000 [ 595.410215][ T5783] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 595.410230][ T5783] RBP: 00000000ffffffff R08: ffff888024ae0013 R09: 1ffff1100495c002 [ 595.410246][ T5783] R10: dffffc0000000000 R11: ffffed100495c003 R12: dffffc0000000000 [ 595.410263][ T5783] R13: dffffc0000000000 R14: ffff888024ae0350 R15: ffff888024ae0010 [ 595.410280][ T5783] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 595.410298][ T5783] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.410313][ T5783] CR2: 00007ff53ab87286 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 595.410334][ T5783] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 595.522368][ T5783] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 595.531100][ T5783] Call Trace: [ 595.534422][ T5783] [ 595.537605][ T5783] ? process_scheduled_works+0x96f/0x15d0 [ 595.543383][ T5783] process_scheduled_works+0xa5d/0x15d0 [ 595.549075][ T5783] ? worker_attach_to_pool+0x380/0x380 [ 595.554599][ T5783] ? assign_work+0x3d2/0x5d0 [ 595.559347][ T5783] worker_thread+0xa55/0xfc0 [ 595.564017][ T5783] kthread+0x2fa/0x390 [ 595.568189][ T5783] ? pr_cont_work+0x560/0x560 [ 595.572909][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 595.577619][ T5783] ret_from_fork+0x48/0x80 [ 595.582082][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 595.586807][ T5783] ret_from_fork_asm+0x11/0x20 [ 595.591679][ T5783] [ 595.594731][ T5783] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 595.602033][ T5783] CPU: 1 PID: 5783 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 595.609618][ T5783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 595.619709][ T5783] Workqueue: hci7 hci_conn_timeout [ 595.624876][ T5783] Call Trace: [ 595.628185][ T5783] [ 595.631152][ T5783] dump_stack_lvl+0x18c/0x250 [ 595.635876][ T5783] ? show_regs_print_info+0x20/0x20 [ 595.641119][ T5783] ? load_image+0x420/0x420 [ 595.645672][ T5783] panic+0x2dc/0x730 [ 595.649729][ T5783] ? bpf_jit_dump+0xd0/0xd0 [ 595.654269][ T5783] ? ret_from_fork_asm+0x11/0x20 [ 595.659225][ T5783] __warn+0x2e0/0x470 [ 595.663221][ T5783] ? hci_conn_timeout+0xf9/0x290 [ 595.668172][ T5783] ? hci_conn_timeout+0xf9/0x290 [ 595.673121][ T5783] report_bug+0x2be/0x4f0 [ 595.677479][ T5783] ? hci_conn_timeout+0xf9/0x290 [ 595.682429][ T5783] ? hci_conn_timeout+0xf9/0x290 [ 595.687376][ T5783] ? hci_conn_timeout+0xfb/0x290 [ 595.692325][ T5783] handle_bug+0xcf/0x120 [ 595.696580][ T5783] exc_invalid_op+0x1a/0x50 [ 595.701107][ T5783] asm_exc_invalid_op+0x1a/0x20 [ 595.705972][ T5783] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 595.711530][ T5783] Code: f7 48 89 df e8 c8 e5 08 00 eb 07 e8 31 f3 ff f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ec db fe ff e8 17 f3 ff f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 595.731151][ T5783] RSP: 0018:ffffc900046efb90 EFLAGS: 00010293 [ 595.737247][ T5783] RAX: ffffffff89873879 RBX: ffff888024ae0000 RCX: ffff88802b130000 [ 595.745228][ T5783] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 595.753208][ T5783] RBP: 00000000ffffffff R08: ffff888024ae0013 R09: 1ffff1100495c002 [ 595.761190][ T5783] R10: dffffc0000000000 R11: ffffed100495c003 R12: dffffc0000000000 [ 595.769176][ T5783] R13: dffffc0000000000 R14: ffff888024ae0350 R15: ffff888024ae0010 [ 595.777169][ T5783] ? hci_conn_timeout+0xf9/0x290 [ 595.782136][ T5783] ? process_scheduled_works+0x96f/0x15d0 [ 595.787866][ T5783] process_scheduled_works+0xa5d/0x15d0 [ 595.793454][ T5783] ? worker_attach_to_pool+0x380/0x380 [ 595.798954][ T5783] ? assign_work+0x3d2/0x5d0 [ 595.803570][ T5783] worker_thread+0xa55/0xfc0 [ 595.808193][ T5783] kthread+0x2fa/0x390 [ 595.812267][ T5783] ? pr_cont_work+0x560/0x560 [ 595.816952][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 595.821548][ T5783] ret_from_fork+0x48/0x80 [ 595.825984][ T5783] ? kthread_blkcg+0xd0/0xd0 [ 595.830582][ T5783] ret_from_fork_asm+0x11/0x20 [ 595.835371][ T5783] [ 595.838647][ T5783] Kernel Offset: disabled [ 595.843105][ T5783] Rebooting in 86400 seconds..