last executing test programs: 5.448418302s ago: executing program 1 (id=664): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xee, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000025000000025f412cbf113ef72f1d8f91caed000000"], 0x0, 0x29, 0x0, 0x1}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xffffffff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='./file0\x00', 0x0, 0x8}, 0x18) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000001503dcf9134a476500000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5, 0x3, '\x00', 0x0, r4, 0x3, 0x80}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x19, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000900000000000000000001", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], 0x0, 0x6, 0x3d, &(0x7f0000000f40)=""/61, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000f80)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5], &(0x7f00000010c0), 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x3500000000000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x16, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66ff", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0, 0x0, 0x4018}, 0x18) 4.617198602s ago: executing program 1 (id=668): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x1}, @jmp={0x5, 0x1, 0x5, 0x2, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f0000000340)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r2, r1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r4], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 4.03598494s ago: executing program 1 (id=671): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x1a, 0x0, 0xfffffffc, 0x0, 0x10000}, 0x28) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001fd, 0x1a000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x266, 0x9, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES64=r1, @ANYRES8=r2, @ANYRESOCT=r3, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX], 0x20) (async) r6 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) (async) write$cgroup_int(r5, &(0x7f0000000040), 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110640000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) (async) socketpair(0x6, 0x1, 0x8, 0x0) (async) r7 = socket$kcm(0x11, 0x200000000000003, 0x300) (async) r8 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000002c0)=""/58, 0x3a}], 0x1}, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x200) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 3.904394246s ago: executing program 0 (id=673): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x47}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0xc6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="76389e14050000007583ddd08906a5", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000010000000200"/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRESDEC=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = openat$cgroup_int(r7, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x27) socket$kcm(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x682880, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 3.859924668s ago: executing program 1 (id=674): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000040), 0xcf) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0xda}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480), 0x2}, 0x468, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000100000}, r2, 0x2, 0xffffffffffffffff, 0x1a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r4}, 0x38) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) write$cgroup_type(r0, &(0x7f0000000340), 0x9) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040)) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="2b6d656d6f7279202b68755aff856b0c3d33d9200fd76720ef6c62202b637075736574202d70696473202b637075616363ea2b8a332c599b2e0d4e742025706572665f6576656e7420165cea309d5446698f60ce1d6ccf9cdc2c1ca703492fd1e1d492ef"], 0x34) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000090000000000000000000000b500000000f6ff00"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b90900000a0b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.724680364s ago: executing program 3 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, [@ldst={0x1, 0x2, 0x2, 0x0, 0x1, 0x29}]}, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 3.363545172s ago: executing program 2 (id=677): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x1c00, 0x18}, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1b, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x7bf}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000007c0)='syzkaller\x00', 0x10, 0x77, &(0x7f0000000800)=""/119, 0x41000, 0x7427ce11f660b349, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x1, 0x140000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x1, 0xffffffffffffffff], &(0x7f0000000940)=[{0x0, 0x1, 0x1, 0x4}, {0x5, 0x3, 0x10, 0x1}], 0x10, 0x5}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%+9llu \x00'}, 0x20) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b80), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000bc0)={0xffffffffffffffff}) r8 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x7, 0x7, 0x8, 0x1afef4b6, 0x10, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) socketpair(0x2a, 0x6, 0xab7, &(0x7f0000000c80)={0xffffffffffffffff}) r11 = perf_event_open$cgroup(&(0x7f0000000cc0)={0x2, 0x80, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x80184, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0xf}, 0x2000, 0xdfa2, 0x3, 0x8, 0x40, 0xf, 0x893, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%pi6 \x00'}, 0x20) r14 = perf_event_open(&(0x7f0000000ec0)={0x0, 0x80, 0x9, 0x78, 0x7, 0x2, 0x0, 0x8, 0x44000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000e80), 0x8}, 0x24, 0x2d1cc080, 0xb520, 0x0, 0x8000000000000000, 0x1ff, 0x8f, 0x0, 0x440, 0x0, 0x4a}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000f40)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000001000)='syzkaller\x00', 0x2, 0x31, &(0x7f0000001040)=""/49, 0x40f00, 0x79, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000001080)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000010c0)={0x0, 0x10, 0x4, 0x6}, 0x10, 0x2375b, 0xffffffffffffffff, 0x1, &(0x7f0000001100)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000001140)=[{0x3, 0x1, 0x4, 0x9}], 0x10, 0x10}, 0x94) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001240), 0x8) r17 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x9, 0x7, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000012c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001340)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000001380)=[{0x2, 0x5, 0xf, 0xa}], 0x10, 0x1}, 0x94) r18 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r19 = gettid() sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)="ebf23c3c9e2fd5f591149977c26b5341ee92a9552aa9cc36909557a59ba49ad59d716d177535c1417ba3c5b53f34830a7b82a71c5e692c44984d4c4f4ce0125a679673136d6620f5e6ca72d7ba892058bdec8901a2b8eae35edbf30ac86631e0c23a66ebe7c66c9287afd519184b08443d46adb6649c520c9b3989e61ab5523c2560d8d18873bcbffc814f23706b88d52a228f500197e3206788aab1b47d5addaf06897177d2e44f14d96be49862f90028a0e06b3310a3d8916adf", 0xbb}, {&(0x7f0000000180)="4939a054eaf281392dac50e23ebc5c60d76573f4733371d9e196569e238e95a113761e39e23a2ba89623321c3935d44851dc9dc9a9933dd32feb55addc0312f3edf45f6515071385407ccad5242933ce877fc52dae9889eedae86fb240219c6b289687e9897fc1701ee8ea60c82a3a5cc7567bd83b2aa98e4b91c7023bd833f4092ea5828e73c4e98018f4cd17a016b4ea15b2d540377c0a33ce770d41d905f3f31d2c23cb1c999f5aa12ee8a87a656e01617a24a24781b57b0ac6ea799c2c27afdc3264268b12ce48fe8005", 0xcc}, {&(0x7f0000000280)="400783866034b6458dbc7c5493610729e6b45af6b1050dd16b0f2a0d2a5563cc0a318942613c5db9eef8fb8bcd9035b3117b9aca7150d91197d8b2e1e3146b955d3f9d65356e3f49c70a41048e8300443d2be3c254ea7b07334c1460bc2a9538757ffee8493c6865128c79a932aee6f8223726ab33745c835f313fab0a18d1b94e86ddc1a4fda2fa3e28ec2db0170c55806a94a7a4352052f3cc3706a175911bc54efdcc4770206291ba6ec686cf49417327b8d65eb26a7ce217cc768c798e46a5dd647c4cd62ea4442bfd67656d2e1a236fd607ef11df6752ffc4e2108403445835e1afd679", 0xe6}, {&(0x7f0000000380)="d5ea36868d441f00439ed2e73b177d42f6f7ad8ca0b9d0af312a5eda8084f43e12e04bcd5403f5f89a6f1af973a21d6683a246c76b1c91493f72477fb2a8c6bc4f6d0600341ecafeebf3c3a84d2324268180aa61e7a880bc55b8e07828b47563a373eb6aca2f", 0x66}, {&(0x7f0000000400)="65fe3e07f6b3058707c353b1f46ccc12560652a4ec12ea54b49c0b6dde1393522e0471bbb33b4a62a05214164648f22360c68c9ea86d2737c2aa8adc179d03872731ab977fdc28eb79ce6b6d736c2ce5dd881bd7a7f9338923d6292f0b332e3b6d37ae819bc8f8b4ed8b00bba392924fc5827ff1f03dacce6c7a528f8c82349a3dca9154eab3e4c1f6d38c8ea1fca2a23503b6879bcd413a6e", 0x99}, {&(0x7f00000004c0)="216f6deebccb39553b66e44ebf4bffb0c8a1e656bf770d12e5a5c8d3bef9e864d4addaddd7aced4e456d755706ad636d6bb7", 0x32}, {&(0x7f0000000500)="445a31f0ac5034faaf87a0700f84676c95129c4c47205e7d56af7b998ccb5f661765f0ced9a030476b23fd14cf2f98871d06033a82bd612479a27fb070296c20c533f54d846f82db9a245bdadb", 0x4d}, {&(0x7f0000000580)="070c607657221561", 0x8}], 0x8, &(0x7f00000014c0)=[@rights={{0x2c, 0x1, 0x1, [r1, r2, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, r7, r8, r9, r10, r11]}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r12, r13, r14, r15, r16, r17, 0xffffffffffffffff, r18, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r19, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}], 0xf0, 0x4000000}, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001780)={r12, 0x58, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x13, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x97f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @jmp={0x5, 0x1, 0x5, 0x3, 0x5, 0x6ed747217cc02bdc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000016c0)='GPL\x00', 0x100, 0x0, 0x0, 0x41000, 0x2, '\x00', r20, 0x25, r16, 0x8, 0xfffffffffffffffc, 0x0, 0x10, &(0x7f00000017c0)={0x2, 0x2, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000018c0)) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a00), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={r16, 0x20, &(0x7f0000001b80)={&(0x7f0000001a80)=""/60, 0x3c, 0x0, &(0x7f0000001ac0)=""/159, 0x9f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x19, 0x18, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}, @map_fd={0x18, 0xa, 0x1, 0x0, r16}, @map_fd={0x18, 0x1, 0x1, 0x0, r12}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}]}, &(0x7f00000019c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @cgroup_sockopt=0x16, r21, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a40)={0x2, 0x7, 0x8, 0x6}, 0x10, r22, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001c00)=[{0x2, 0x1, 0x1, 0xc}], 0x10, 0x3}, 0x94) close(0xffffffffffffffff) r23 = openat$cgroup_ro(r18, &(0x7f0000001d00)='io.stat\x00', 0x0, 0x0) sendmsg(r23, &(0x7f0000004480)={&(0x7f0000001e00)=@ll={0x11, 0x5, 0x0, 0x1, 0x8, 0x6, @remote}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001e80)}, {&(0x7f0000001ec0)="62d41a7d87577aacb5d447f4a6f2569cffdd7f61340b3feb53fcde5742c703bb7ee3a93685190fa4f39c125b6c5bd9513d617879508664b842fdcbcbd0b1d5be3968654fe690baca234515fb5717a92227d816616987810dfcf3bb39c6b40039d7d39385ea30d52a97aadb95abe78b6ec1e4530ddc15f0421fba0cccb3439bd4e06f09d67aa60e601a0959bbcfb5e365e56e258d88551fd545d39acb9d179bad6fd517ca3648c08cc000a93ef65daac6e8c2a8155237f2865ac4ede3cb46fd560344f382b72a9638f9e1cb07e4583bc411033e27d3bdb320b9901045212f728066ce585df889d3ebc4abfdf57ee630396b512612f8aeb7f0e1e9d5e617e9352f852e7da3edcd7a531a6add3dc4378dd331525d9d54c8716f0ee52267deef4f127164eb1848ae33611d0a953d5f221f19d79fff625cf3d0df8b55d6a991d0b1aff39846784cbe2fc295d467b8cd21ddfecb32a7dbd381202cce15774d31dc22f1171d56ccb57f1e2ca94127a9a5ea42216356b7778660f1cc12e74a2eba3e4c98ea4ac375d96e5afbd9bb01a3faa54a945f325d64f8e016f839f2c8b3725961d8ed8242be1d04208acec5d78e742917b4c8989f6e0561f165b7c4b6d4c457f497a486a4639781136c9541f6610202e9da78b26de45c2bb921750281ea8a9531e2b87b325a247cd97f2c7205c25be58a8dfa63f75803185f82e72668e164c669693c9afb8f1f207527df360779a24934a54517e4cb52b13219f969e38148626b8fd20fd86a7edb24e013cfd74a658fd87f4208775517c2d529b633bd1828f0b586b7dc945b1e7638d5055e0187191f4156b46f51e3bb95febfae6182d117bd8e3fd3e5af2e334e2dd601150a1e3f877821cf967e8ad7f56b712988996970a9a6c0050c8c3c909505e5692543b78a948f89f962c414fb3e269cf9a487d155cf6383fcc58144f5b3aa3a3d4eee20cb1c7b88b103e4ac469f111c7e89ff9d427562ee885b1e899fda8b8810935a61bb4fc5b67cf894817887c43226a20daaa59dd6c94a8189e88b6b8bd32bcebd509f6efb1650dd09bab044521f53c63ea3d9f793fa62122d2ea1c3a4208290655e3f0f8c522ce5af4dc611a7cfebcc19d2c09f9f38e9389a9cf6e9ea2cfbc471c7d984267c931136ab2732fcdd712414f979d7103e4d9b656fdfeaae9ad4b4293bfe582a20d8ddee8c0ad6661abedb4518704e4fc68432123eb035e8182a8c9e4608a590c091318204f7a4bd3cbb237de90d8f99e986bbafc7390b57887bbec5f98c90c27d60046fe92f6174903a3fced4873b43822240db10d22a01bb71605d54f333ce2fb6a4a155c616e07850b59c1ffced0d93a507cf9a2b64ccbb5ea532a5888596c6453fd3a5ea90a79e705ac115a007e7b0013f6d6defd2839dee2846084fef3236fca8e681c8a263c4c6f48230a90046e899939c27bed0cf20e42a55b3cdf1ac5b920181328f92295be5396529b634a631d8d04846ced97d3d10e22e1bd5a97a18ea571df6c7af0a5f2e7caffc5d0a67def8c66c5a2701b2285076e670de04640aa145f369883f6d95c13d968d0167c266bad36d0ead7ffd4650c654e762a5f394de68fd65efe34fe2810d0de7a8733563cf699b01e01c85d00c926ee378e50fdcf1fe10c6890f340ebc38d6ede941177a59f5608e5f68367aef3bc7e7f4c991f8f2742396a6d0e9af1cf43174118272a21566d3d4a3f4ece18d5bd3dca6750fdd2a2392a78f96d5f543f70fa34e2e459bd3d27b633bf07510c3b3124ba93091e113c55469ac166f7c4276fa9cd8b3732ffc7eecdc3472dca113b4144d4c2588f8ec7e3fe2c6d0ed4daae3c8982830e034b7b18b200d1b1a39ee3f9b20787cea22296c51c1ce930ca4df1e8cd3b9ab72c59a743fa8615383362deccc4e6a5821b8bc01801c9f7a2005ee8e1ac06771fec71ccf73952c2c5ff026269bd59c8db9ee4b6a21341f544fe9126a99148702ddddcd7804f44fd90f4aa7f3d4e66ccfefc9740615c334dcf9f6f5208ce8bb88245d78576eefb137aa08c2e573d5461361ef5848826b64c682f55534543835448f162a05b2d4cc8fe8133bbb3b391aa24303d3986aca786131a8050b44e16b405e9598d9eacbb3e61f50b408f09b3310aba6a042bbabc5b081b05091889987edb3b421eed62693add2e0dc9fcaedcfa7e329d39dd3b3f215ea2c56afd3113a5ab92effbb186b46938b4bf3dd88511dbff725738a5776b1b4b98b94b0543b28602ceb6296da41935130fbcc2527dcc3ebe26f6d80f5074bc518492ab01c764fb141ba4b58293fed6e9b04304341e8b114cd91c99d010327558744298b4f520a43be92bf93b1ef0e9d9160cc40866ebe021ac834eb6fcca35a383ec756ef31f0d3aee88fe0613cc4e6044a6ddb906aed2093c5a26bc0f62f1ecd6b455873743c087a1cc3c5572fea620cd3bcaa1bb6dd29d96e7f286aa2b71c716a2149a3e3ac4f06126d6f9a4ae6fd323d3b73eebdc77a1c5093a89f74dbe7f4db898af6dadc4a8b059b00d11b13fc2a70ec17787d6218e6a52845857cf67d5defd40e14dc70414af88fa77177a7dff778872a8c7a864937e3519163a7021c89ce430280d67f635acaf7efee926627c47d3ea6fcfe6bb94140b1b6ff875703cd7371c7c1ff90361adeed5a5d2a7a27672bfd3efd699cd7a92e388b3af00fdabb45e8f9db69189149844355be0f1e428e7684c4acc8cef566e8fe105580821a42707e59143f1a31c7b43c7494d01f2690662a94a5598a118b6ae90ffd00b7e5ecf3d8879bf8dcece7b0941601ed228e0ff391e12e0f02f6f6c587e4f977833a4b1e3d55bfa3b9bb06a6e6841db97cc767185ef52f0fb39c197a198232ce27e0f4275dc75baa46ebd794a8029850ac85f0b7c1fd5f3dee3e3ae34e1d6c35e196f180a5414faec1f22e11aadb19520bdf9199aa0f482e7fb3451d91fa71ead9d888fc84cc0cf7bae5dfcfbc3c5d168e216d3dd7349db4e72b09fb0db39bb342e7d8150fc73f84eb1e6e632e87dd933429e4aa133cb590a67460ee7bc10d503f6554bedbd15038c45505a8ea50f681839a26ae22704af92910b6bd0f9acb70c3d8cd2327d900d429fbe0c87fd952e9d1b3160e96a536d72bfca03435327cdf963770ba17470af40bccccd6c3134fea6e52ea1c3719704d0ca97db14e961a2843aad3397ee0333853c188b55939d30714159a175fc3c47da5d3843b925550c113b5052e6f4d2720e26184a85b7abff7b52c2a6103ed3249cad9b17a0069f8c76f79f0360f34719c45685afda8a54c5797ee69ae2bc0f82dd79b60ae39157dd16e7c4ab2e24df3f47e85c6b28d2b4558e80b15c3707389d372d73673785bb139fe83fdf6c8cd0e7aff7231a4fcdeceaeb06d58c42c8845a29dd1c496a9b404d4119118b8b9281925d2f06cef95ed39b42f36dedce8674bd682fb38573a4df8f89d0d696ab0a347c95c83daaeacfd2c329788560bc924d76c8e6a3b927f7e60a9ec9f2788d558a5c60e46db8e8e925df607fe636ef915b1a6ccb4fa0562fd035ec52a97d215138389de552ec1060ca5396ad22157fe2aa9022db9a987c6aeb95622568618707303dfae6c87c0af262670e7a41c30c214a7b2326dcc6eb8597b76dca11f03e89ee60e35b28a469101561a567e6d82173d4474933c2de2e1a21dd091e30da704eb64b1e8dd41463257cefa99d595a8a8115da7919700df35bffa6c39dc33738bcc1dd0bf4a6bde7510ac5ebfee3abef3280bfcb83a557fc16813b045a2edfd067c360694cce26e71c3060fb3a22bc3c8015699d9170efee907d8128db83362a8f55f05bc62cbf494986487190a4a409e4e582ff5657fe86247b16e1a709d65d309a8c38afcce691a5c1294d3d14a3bc48be94b3a6e34564f9ce29c5c5bbc3f3f494d75fcd25de456587f86f9ecd9ba435f0cac9995123d5cd27c691137f54931feffd2fd0e82286019978b0a39651cbea64b2edb4fa1bcf32b06bda8585e3378cd08b37efe448f810744eac8c6bd561d58ebf2b8b363d8ddab2a99c529b7eb634b7597361bf2861bb5aa32e52bfa6c6bc86809846d18d49c8218e2af9f0404f6cf323f09153f5b5af4b6af98633d3661bd15e7aa70c46c476dd81bd7b0244af265c550641337fe250dbfab9eaf5018befea90da1f57a1c83ef94758cfe550d11bcf6d51e9fca9b2a2f5fc11ea37ba4d532c8d1dcf2d5435045d2620b1701130eacc858a226097bc630f661db7334c9ed18ab46954e93771e1e302326ec8a0463deb0bb3ca75dca44885112d33a37a5a78b20d071342997324e501c9362568a5e8b2968307444bf3a880414f16843be6d086a8e3d38a001a7c0c3842a31c13b75646d5974b7dd2f4f50220dbb0cc657482a74d4677803a68d846609146098d36aa1e2ca48e67469e483e4946be681b5160c4da350dfa3b935d50bcd886b446be06fa817760c2dc8fac2f30086cccfc7199e8164add684f8b5d56b9251b86726d447cb4a9a34b7566e9e882e9945323c8737d9588d92f518a142de508eab57540422af92ebe33cac7352e92e4a22a7fd1e6e63876c1f7fff5b249b989e51160670f303871b48d04b54fca4915046d5f43b19a98192f7a6cbe3dae13c03c9703a46231f401278bd053a242ee4c651b05205ba778ad34ba647d11d9bdeca079ce09a0690dc323c29be3096d66a27dea2f4d8b7ba1eceaf5ca606ecf71f848fcd17c716ccf58a0ba2ba5eba559655756d86c65eb0a8c8a90d2dcb32ed7e68774b06a096a070a6c45d5aff0c0b5ff6ee1bdc33764d7b5f5b23d03c61ecf6cc612fb2b316df4bb1d20803d2cd601606ee8803122c9d846717c921f401809b58e5ff48942151ff63f26506fff9c034590f0f847fc03a83fdfd0c940198384d5851319587fdce0f747f1911ce4b74c37b8918c21d6d2c33ff04b8d82f8b3599cd4f279ecc51ae6d9dac7bdaf411d434fcdc8778c486dbadf8e0b518b92c187b417490c85901690e95c9f6ccd9a38680eb54e22f39ef31c1358c9541f4cf99bbe21b5ec10ffc8f96299de6d07631deb98246ab721362d86dce08807a0402f8e18228f1b0a1a10f5c45d82b22d7fd4dd392b959bb2f735c62441e83c0d98edd7b83df79d065771aec4f267452b61d44c1b9a01cf391c06611a5d05c8fa850299fc14c787a675cdf7eefa41a5e594176de5e101f9dbb1ea41c8352d4b0c395528b48c72afd677f86123b44471871160e3ba71e3c487209f5b9786799f38a6503d495f2e27925618b836a7267f118e62da434d90647a2d5a01eef17384ee6d918fd2fc0f4f932c584a2402dccb39b228bbc659d16403c4eb55b4322a430b060a425ec64025cbf8fd175e1b03623b7425bb1c073b118ff335af6a08ae2970eb7f3142b42a9e652e8811da571380994ddfde4dd8a187d307384fcb5a99d41f412ca7d0a994d1c6616eaf4b69e53d476a8934827571d2dc94a23a154eba30ffdb839519d03f49fdf4fb46eda0223bee50773a3cd33327f8adc01ee37f56d457051fb0fc85681b7fa229c994ecf8e8c257fbb507d64415131217bad2e4b4a214a5160fb6d2c27e7b487132f28250c326a182ca800b54ef15c17274ebc4971134a5e9577b3f324ddde12799c7dd5c198ff95c5f9c3b0ce15f073dcebde8d43a35204ddf905648bba5e822152f1f81a0a1c46f01eecb7c30725cf49ecb9094ec1b41bbde4a164e5ab618e4e194da928a3297094fd34fbe8821dfa13cf72ed4438bcf090b402f1093915ce43ce76b99bb0", 0x1000}, {&(0x7f0000002ec0)="6f9d4405c6537e1c80215d4a6794c976cb330528e4cedee022a830839253c946c759921111a241c4e3d46bb70c018e24d5bdb820772f3359b86b4ab87cb2833825a67f322d8e1111e9fb7043178e7ec256be2cf5427b1a732b8b1ec6e4774f0b7d5574c9951ad28f6ba1ce49928f1d613d796f15e2f3407ec08559", 0x7b}], 0x3, &(0x7f0000002f80)=[{0xf8, 0x1, 0xf4ac, "e6c14894af887a85b36877037774309b27308f204e17d0e6b69e45241f6cd9656ae8293587463b2b3572cff2cc8ff9ec9ce4c9e33c09250146d9039fa4a4c5a9dea06fd138e617b52a87abe284300022bfd8c2576402deac58b45747c680e69cb3092c4529ef17750ee3a87d7d41dade5c1ee994c48d0939ac0fb6ed32e6ae08828afb81aa2f923e378cd8215cadee10e5892085dc684a456533843a23444c6033f2f8ee332b5befd1a074b7a5930b8f6e4e5d40e5496ed020aa892af9434de2c734a59764684f668415102eb65b3379d7f58b63a0e0d7a926b5001628d42960baf642cc16"}, {0x1010, 0x108, 0xffff, "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"}, {0xa8, 0x114, 0x0, "e3988075d3b7c104d4974b7bf351e1cb15687cf75704879662eca92d8fc59ebf9090cdd3cb363f2eb3b1ddeac7031390eca23f89022c117427e0830d74acd5711d0c925a1026b0499cbd2b703ea2756e865426a07cde5607ef5199799ececb4e9c76b2ed5915d696d501464f0f43d9cf6acc3306127e46a756820b8f29a6c9ad096da63970b2263fd1c0c512a85f71a656"}, {0xc8, 0x1, 0xe0000000, "0dfd8aa376fc0de8a34545479ad9677bae439b2f957569daafa73c8bc31b4d1143548b34ef049d17cb081ad56ba56fd1ab15384220c3e7519eff9f7ed70a0e410b06eaa06801775b993829ee0f223772efd9a75411eee1f088611366c12dbe63797e3b42ee4ea572938fc993838520b266b871ccc0cbf21a3e154f73b3f6bd6b1600e9b21b81b36cfb684ac5c6c2b4fdf85d55df9e6c100cf0eeb7f1af26ba3433874310a4ce69d78d6865ec12081743b6a3d4f8"}, {0x48, 0x3a, 0x0, "0f8365451bb5bd45be0cc691607591f9572c8bbd67e245a7335896e1204cb2923459b7ec34fd6922727d42270d396b7e7fd12094e5c5"}, {0xe8, 0x10d, 0xc, "ee5fb7715c2a5abf43b692196145d0fb08b77016631330ca283c64730f148f4770a9df059c22b216e8e94ecd2df08388aed33df7eb2ecd0787779cdc1398694b59b05ccfd3727019692eb623268b6890de1977c8ab288f363afab4c2d32ac74d188d75bf60a277115c2b406cb68e07851967f2f0413faf4e497881de5fd0de612574f935c58055043a548a55f90a224e9eff4dae74e044c90ffe38182b8db0e04351cb9cbe1fc820650084d8af5ecd2785e26ab70b379b114703e2d49afbdb3718a8b00a4ea0ecb0ad525c404e349e8b7abc49a24c1f"}, {0x110, 0x11, 0x0, "5810435ee434dd9f3474e3ba1846719102f58bb7d3e2ab898a112c31ba950ebe75d3b20d93a8703c7601776a3e0e794b7cf338e2855d67fdbb82e861cd47ac3814771a377f3d4379e1c24e832726acf2a4bea5128f177b375e2ac21f856436bdef92192fd70d836af01b83817599f5c321e3a163cb06d73489f234551685b14e6ed47ed5d31b3e826e627cae03df991049b49c20468e7df9e293b9096c8f080c48ca23b51df0af0ae516a44537e186647ff483115f999704110def0600c4090d196db71e20708a1b6757345440ac8d4781db87272d433c28dd086a73300f299fc664a5ca89038701b34d03d874a2248db53b2461491aab6534"}, {0x28, 0x114, 0x10000, "0bfc2d7fe0049dc204b301e80f01f2849f69112678848889"}, {0x20, 0x29, 0x2675, "757b85ea73f1d4df1290"}], 0x1500}, 0x800) 3.159444431s ago: executing program 2 (id=678): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1000000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000000)="63ec90c97b265715fe27cd9359a4", 0x0, 0xe6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8af8ff00000000b70800000f0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000085000000c50000009500"/32], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000002c0)="0f2ba1298af17872501a2512749de61d996e4273d422a32c299edfd8b4b7d594646e10481ddc3e031a35c06eb6179891698a8e3510d4d57be7812977f83b40ffda48dbcd0c7a2d39cf290007", &(0x7f0000000100)=""/180, 0x4}, 0x20) 2.962041251s ago: executing program 0 (id=679): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x101084, 0x10000, 0x0, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe86, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe86, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="b90c000000000000000000000000000000000000e593942822c7024a", @ANYRES32=r5, @ANYRES32, @ANYBLOB="020000000500"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, &(0x7f00000003c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x4, 0x1, 0x4, {0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}}, 0x80, 0x0}, 0xd0a4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x1c) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRESOCT=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRESDEC=r9, @ANYBLOB="010000000300"/26], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r10, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000007b000000bf610000000000000701000004000000850000005d000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x2, 0x0) (async) r12 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0x12, &(0x7f00000000c0)=r12, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x1, 0x0) 2.509713892s ago: executing program 2 (id=680): socketpair(0x23, 0x800, 0x1003, &(0x7f0000000140)) 2.509177612s ago: executing program 3 (id=681): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091be"], 0xfe33) 2.12335849s ago: executing program 3 (id=682): r0 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0xfffffffffffffffe, 0x20625, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x366c}, 0x4048, 0xc8, 0x9, 0x7, 0x2, 0xdc4, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x652201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x80}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x5) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8910, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x80, 0x10, 0x39, 0x81, 0x5, 0x0, 0x7, 0x2008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x6, 0x5800000000000000}, 0x9322, 0x2000000000000000, 0x8, 0x2, 0x5, 0x5, 0x0, 0x0, 0xf8, 0x0, 0xffffffffffffffff}, r5, 0x2, r0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x13, 0x1, 0x9680, 0xfffffffa, 0x30006, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f030000000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558"], 0xcfa4) 2.082357142s ago: executing program 0 (id=683): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000000)=""/35, 0x23, 0x0, &(0x7f0000000540)=""/192, 0xc0}}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x1, r3}, 0xa0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10000, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102037300fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000000800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r10) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.011952725s ago: executing program 2 (id=684): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81}, 0x20) close(0x3) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da00449cc3c714906e08dfee3d99e0139560133b9b52f6b1fc8ee247390f62fa6fa2075cee426c4667c484e1b9f396f840cf065a51d68d849465675069467aac7b5af9c2dc7e660a08374bf8196e7b5e2e88b3e48c2c7278bc70a7933a01a85ba8246282486ac3b617529e09c8a805e33bcda33343932444"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r3, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890c, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) 1.584147205s ago: executing program 3 (id=685): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x100b0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x39, 0x3, 0x0, 0x1}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x79, &(0x7f0000000000), 0x8) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000000080)=""/68, 0x2000000}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) 1.517319179s ago: executing program 0 (id=686): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff4100007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r2, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)}, 0x800) r5 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='H\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r6}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.103861978s ago: executing program 2 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @cipso={0x86, 0x6, 0x3}]}}}, @ip_retopts={{0x11, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x48}, 0x840) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, &(0x7f00000000c0)="d827d1a50a", &(0x7f0000000040)=""/55}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000000)="00000000000000000000512288fb", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e11e0000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 1.101010348s ago: executing program 3 (id=688): r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x47}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0xc6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304020000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed69000000000000000000000000009a6d1852cfe790362ca800000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed8d72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c9534229d6133fa814a0a67385fea04220423"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="76389e14050000007583ddd08906a5", 0x0, 0x1ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000010000000200"/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRESDEC=r0, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = openat$cgroup_int(r7, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x27) socket$kcm(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x682880, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 929.717846ms ago: executing program 1 (id=689): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) ioctl$TUNSETIFF(r0, 0x5421, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000180)=""/69, 0x45, 0x0, &(0x7f0000000200)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="bf1600009a0000004000070004000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7f7ff000800000600000000a5000000ccb1d27d270d309602865545a0e69f3c1b5abd00778771e7e226f24ae71aff3126b3ba2c8d5804ee0fb65bf527eaf111862414df4a31164aab"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0xfc1b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 775.415284ms ago: executing program 0 (id=690): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000120091be"], 0xfe33) 603.401612ms ago: executing program 1 (id=691): perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0xe03e, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x6, 0x2}, 0x20, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4862}, 0x0, 0xd, 0xffffffffffffffff, 0xb) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0020230c1100"}) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, r4, 0xffffffffffffffff, r5, 0xa) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x5, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001800811a0681f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8007e38a3fd8705df0100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000b607a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4e95367a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9eebee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4b43a3d93000000000000000000", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xffffffffffffff92, &(0x7f0000000080), 0x1}, 0x8100) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d2081000000000000000000073010f000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 449.195499ms ago: executing program 0 (id=692): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x37, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x200) unlink(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x8905, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000b05d25a806f8c6394f90324fc602f000000", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x13, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a884", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 259.253768ms ago: executing program 3 (id=693): r0 = socket$kcm(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNGETVNETLE(r1, 0x800454dd, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360860000702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (rerun: 32) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) (rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f00000000c0)) 0s ago: executing program 2 (id=694): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x859006203fabaa31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 57.822864][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.833486][ T5438] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. syzkaller login: [ 80.378797][ T5764] cgroup: Unknown subsys name 'net' [ 80.520615][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.203721][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.782507][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.791342][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.799134][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.821510][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.834167][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.852014][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.861711][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.869342][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.878055][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.886414][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.894541][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.904708][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.922956][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.936036][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.943676][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.959459][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.968243][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.975641][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.983250][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.995453][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.009665][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.022368][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.030106][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.038045][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.479067][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 84.568434][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 84.619464][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 84.640820][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.714934][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.722885][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.730132][ T5781] bridge_slave_0: entered allmulticast mode [ 84.737673][ T5781] bridge_slave_0: entered promiscuous mode [ 84.754991][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.762240][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.769463][ T5781] bridge_slave_1: entered allmulticast mode [ 84.776664][ T5781] bridge_slave_1: entered promiscuous mode [ 84.827017][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.835015][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.842307][ T5782] bridge_slave_0: entered allmulticast mode [ 84.849420][ T5782] bridge_slave_0: entered promiscuous mode [ 84.885695][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.892951][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.900080][ T5782] bridge_slave_1: entered allmulticast mode [ 84.907622][ T5782] bridge_slave_1: entered promiscuous mode [ 84.959353][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.002706][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.047036][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.070057][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.079391][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.087264][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.094861][ T5774] bridge_slave_0: entered allmulticast mode [ 85.102347][ T5774] bridge_slave_0: entered promiscuous mode [ 85.110562][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.119598][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.128366][ T5777] bridge_slave_0: entered allmulticast mode [ 85.135544][ T5777] bridge_slave_0: entered promiscuous mode [ 85.154160][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.161321][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.169119][ T5777] bridge_slave_1: entered allmulticast mode [ 85.179083][ T5777] bridge_slave_1: entered promiscuous mode [ 85.189289][ T5781] team0: Port device team_slave_0 added [ 85.196072][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.203806][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.211287][ T5774] bridge_slave_1: entered allmulticast mode [ 85.218556][ T5774] bridge_slave_1: entered promiscuous mode [ 85.258091][ T5781] team0: Port device team_slave_1 added [ 85.278843][ T5782] team0: Port device team_slave_0 added [ 85.308351][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.323507][ T5782] team0: Port device team_slave_1 added [ 85.332562][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.363709][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.393486][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.406302][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.413316][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.439682][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.453530][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.460513][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.486807][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.538890][ T5774] team0: Port device team_slave_0 added [ 85.545957][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.553300][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.579287][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.596282][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.606966][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.633117][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.658238][ T5774] team0: Port device team_slave_1 added [ 85.686580][ T5777] team0: Port device team_slave_0 added [ 85.696195][ T5777] team0: Port device team_slave_1 added [ 85.729232][ T5781] hsr_slave_0: entered promiscuous mode [ 85.735841][ T5781] hsr_slave_1: entered promiscuous mode [ 85.788890][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.795915][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.822134][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.846923][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.854137][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.880420][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.893507][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.900498][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.926575][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.949928][ T5782] hsr_slave_0: entered promiscuous mode [ 85.956955][ T5782] hsr_slave_1: entered promiscuous mode [ 85.963807][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.972221][ T5782] Cannot create hsr debugfs directory [ 85.987851][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.995146][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.004460][ T5779] Bluetooth: hci0: command tx timeout [ 86.021181][ T5780] Bluetooth: hci2: command tx timeout [ 86.022928][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.071758][ T5779] Bluetooth: hci1: command tx timeout [ 86.071782][ T5780] Bluetooth: hci3: command tx timeout [ 86.131269][ T5774] hsr_slave_0: entered promiscuous mode [ 86.138563][ T5774] hsr_slave_1: entered promiscuous mode [ 86.145252][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.153084][ T5774] Cannot create hsr debugfs directory [ 86.195149][ T5777] hsr_slave_0: entered promiscuous mode [ 86.201689][ T5777] hsr_slave_1: entered promiscuous mode [ 86.208021][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.215706][ T5777] Cannot create hsr debugfs directory [ 86.629659][ T5781] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.653830][ T5781] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.665777][ T5781] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.676322][ T5781] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.737018][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.753374][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.766184][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.776229][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.885289][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.916107][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.987623][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.004794][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.119920][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.214073][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.221491][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.232885][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.264802][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.276631][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.308882][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.326713][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.334036][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.377830][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.385027][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.462726][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.496389][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.570791][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.578023][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.635641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.642839][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.660009][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.715658][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.722895][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.741180][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.748355][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.795134][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.916046][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.941439][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.948637][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.999726][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.006947][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.078060][ T5779] Bluetooth: hci0: command tx timeout [ 88.078262][ T5780] Bluetooth: hci2: command tx timeout [ 88.152569][ T5780] Bluetooth: hci3: command tx timeout [ 88.157049][ T5779] Bluetooth: hci1: command tx timeout [ 88.202546][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.288754][ T5781] veth0_vlan: entered promiscuous mode [ 88.339789][ T5781] veth1_vlan: entered promiscuous mode [ 88.447345][ T5781] veth0_macvtap: entered promiscuous mode [ 88.468162][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.488038][ T5781] veth1_macvtap: entered promiscuous mode [ 88.556516][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.610382][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.640593][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.649544][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.661238][ T5781] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.678666][ T5781] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.688312][ T5781] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.699074][ T5781] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.729365][ T5782] veth0_vlan: entered promiscuous mode [ 88.767767][ T5782] veth1_vlan: entered promiscuous mode [ 88.898313][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.917993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.967086][ T5774] veth0_vlan: entered promiscuous mode [ 88.977831][ T5782] veth0_macvtap: entered promiscuous mode [ 88.991124][ T5782] veth1_macvtap: entered promiscuous mode [ 89.007377][ T5774] veth1_vlan: entered promiscuous mode [ 89.013065][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.020917][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.059547][ T5777] veth0_vlan: entered promiscuous mode [ 89.076250][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.091991][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.109073][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.145162][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.156579][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.170320][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.208327][ T5777] veth1_vlan: entered promiscuous mode [ 89.217795][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.232888][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.241713][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.250586][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.269525][ T5774] veth0_macvtap: entered promiscuous mode [ 89.319585][ T5774] veth1_macvtap: entered promiscuous mode [ 89.418043][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.429585][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.440635][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.452425][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.464439][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.518280][ T5777] veth0_macvtap: entered promiscuous mode [ 89.541124][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.571445][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.592077][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.618186][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.629929][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.654691][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.671797][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.721007][ T5838] syzkaller0: entered promiscuous mode [ 89.727757][ T5838] syzkaller0: entered allmulticast mode [ 89.739535][ T5777] veth1_macvtap: entered promiscuous mode [ 89.783277][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.803128][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.812932][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.822103][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.837729][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.849361][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.154798][ T5779] Bluetooth: hci2: command tx timeout [ 90.162011][ T5779] Bluetooth: hci0: command tx timeout [ 90.232589][ T5779] Bluetooth: hci3: command tx timeout [ 90.242620][ T5779] Bluetooth: hci1: command tx timeout [ 90.907183][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.918243][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.928227][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.939010][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.949093][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.959800][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.971260][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.045275][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.084354][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.112494][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.123718][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.133905][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.145142][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.157313][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.181125][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.209812][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.221271][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.230308][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.348961][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.354833][ C1] hrtimer: interrupt took 131958 ns [ 91.379469][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.450368][ T5848] warning: `syz.3.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.775462][ T5853] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 91.821493][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.873129][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.010128][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.017659][ T27] cfg80211: failed to load regulatory.db [ 92.034047][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.160009][ T5858] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.181747][ T5858] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6'. [ 92.232087][ T5779] Bluetooth: hci2: command tx timeout [ 92.238054][ T5779] Bluetooth: hci0: command tx timeout [ 92.253478][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.296107][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.314391][ T5779] Bluetooth: hci1: command tx timeout [ 92.314415][ T5780] Bluetooth: hci3: command tx timeout [ 92.526790][ T5862] netlink: 'syz.1.2': attribute type 12 has an invalid length. [ 92.573315][ T5862] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.950492][ T5861] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 93.391041][ T5872] netlink: 'syz.0.8': attribute type 21 has an invalid length. [ 93.399269][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.384333][ T5879] syzkaller0: entered promiscuous mode [ 95.390010][ T5879] syzkaller0: entered allmulticast mode [ 95.504922][ T5890] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 97.858387][ T5907] netlink: 'syz.0.17': attribute type 21 has an invalid length. [ 97.867390][ T5907] netlink: 128 bytes leftover after parsing attributes in process `syz.0.17'. [ 97.877425][ T5907] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 97.887593][ T5907] netlink: 'syz.0.17': attribute type 3 has an invalid length. [ 97.898022][ T5907] netlink: 3 bytes leftover after parsing attributes in process `syz.0.17'. [ 97.944811][ T5910] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.169978][ T5923] netlink: 'syz.0.21': attribute type 12 has an invalid length. [ 98.181494][ T5923] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.21'. [ 98.367398][ T5932] syz.3.25 uses obsolete (PF_INET,SOCK_PACKET) [ 99.897181][ T5954] syzkaller0: entered promiscuous mode [ 99.908305][ T5954] syzkaller0: entered allmulticast mode [ 100.071414][ T5964] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.31'. [ 100.270519][ T5967] netlink: 'syz.3.32': attribute type 9 has an invalid length. [ 100.272124][ T5949] syz.1.26 (5949) used greatest stack depth: 20648 bytes left [ 100.294968][ T5967] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.32'. [ 102.749149][ T5976] netlink: 'syz.0.33': attribute type 39 has an invalid length. [ 103.008199][ T5983] netlink: 668 bytes leftover after parsing attributes in process `syz.2.36'. [ 103.035141][ T5983] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 103.057518][ T5983] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.423954][ T5999] Zero length message leads to an empty skb [ 103.810937][ T6007] netlink: 'syz.2.42': attribute type 21 has an invalid length. [ 103.827430][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 104.545999][ T6022] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.47'. [ 106.372220][ T6045] netlink: 'syz.3.52': attribute type 3 has an invalid length. [ 106.387559][ T6045] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 106.397529][ T6045] netlink: 'syz.3.52': attribute type 6 has an invalid length. [ 106.412064][ T6045] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.52'. [ 106.445145][ T6052] netlink: 'syz.3.52': attribute type 3 has an invalid length. [ 106.461635][ T6052] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 106.494481][ T6052] netlink: 'syz.3.52': attribute type 6 has an invalid length. [ 106.516515][ T6052] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.52'. [ 106.707176][ T6059] netlink: 'syz.1.53': attribute type 3 has an invalid length. [ 106.767946][ T6059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'. [ 107.381888][ T6048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.061670][ T6089] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.59'. [ 111.093121][ T6102] netlink: 'syz.0.63': attribute type 2 has an invalid length. [ 112.272313][ T6128] netlink: 2 bytes leftover after parsing attributes in process `syz.2.65'. [ 112.310211][ T6127] netlink: 'syz.0.66': attribute type 21 has an invalid length. [ 112.329818][ T6127] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.346770][ T6127] IPv6: Can't replace route, no match found [ 112.652524][ T6138] syz.2.69[6138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.652703][ T6138] syz.2.69[6138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.789289][ T6141] C: renamed from team_slave_0 (while UP) [ 112.816206][ T6146] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 112.893083][ T6146] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.70'. [ 112.904964][ T6141] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 112.929716][ T6153] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.71'. [ 112.940555][ T6141] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 112.957435][ T6146] netlink: 'syz.3.70': attribute type 1 has an invalid length. [ 113.005886][ T6150] netlink: 'syz.0.79': attribute type 21 has an invalid length. [ 113.014225][ T6150] netlink: 164 bytes leftover after parsing attributes in process `syz.0.79'. [ 113.363810][ T6160] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.72'. [ 115.246716][ T6194] netlink: 'syz.3.82': attribute type 29 has an invalid length. [ 115.652032][ T6194] netlink: 'syz.3.82': attribute type 29 has an invalid length. [ 115.748402][ T6195] netlink: 'syz.3.82': attribute type 29 has an invalid length. [ 115.827527][ T6202] netlink: 'syz.3.82': attribute type 29 has an invalid length. [ 115.967560][ T6208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.85'. [ 116.602718][ T6225] validate_nla: 3 callbacks suppressed [ 116.602782][ T6225] netlink: 'syz.3.87': attribute type 21 has an invalid length. [ 117.686697][ T6238] netlink: 'syz.2.94': attribute type 9 has an invalid length. [ 117.714085][ T6238] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.94'. [ 117.975161][ T6245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.95'. [ 118.872924][ T6268] netlink: 'syz.2.102': attribute type 21 has an invalid length. [ 118.880742][ T6268] netlink: 'syz.2.102': attribute type 4 has an invalid length. [ 118.931113][ T6268] netlink: 'syz.2.102': attribute type 23 has an invalid length. [ 118.979884][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 119.011051][ T6271] netlink: 'syz.0.103': attribute type 13 has an invalid length. [ 119.031523][ T6271] netlink: 160 bytes leftover after parsing attributes in process `syz.0.103'. [ 119.282706][ T6271] erspan0: refused to change device tx_queue_len [ 119.323933][ T6271] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 120.061701][ T6271] syz.0.103 (6271) used greatest stack depth: 20328 bytes left [ 120.623444][ T6308] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.112'. [ 120.668423][ T6308] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.112'. [ 121.496476][ T6331] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 121.542650][ T6331] netlink: 'syz.0.121': attribute type 2 has an invalid length. [ 121.550566][ T6331] netlink: 'syz.0.121': attribute type 2 has an invalid length. [ 121.565485][ T6334] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.591143][ T6331] netlink: 'syz.0.121': attribute type 3 has an invalid length. [ 121.619371][ T6305] syz.1.114 (6305) used greatest stack depth: 19656 bytes left [ 121.639243][ T6331] netlink: 'syz.0.121': attribute type 4 has an invalid length. [ 121.648957][ T6331] netlink: 'syz.0.121': attribute type 5 has an invalid length. [ 121.682823][ T6331] netlink: 'syz.0.121': attribute type 6 has an invalid length. [ 121.690919][ T6331] netlink: 'syz.0.121': attribute type 7 has an invalid length. [ 121.704285][ T6331] netlink: 'syz.0.121': attribute type 9 has an invalid length. [ 121.712718][ T6331] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 121.742474][ T6331] netlink: 'syz.0.121': attribute type 11 has an invalid length. [ 121.762756][ T6331] netlink: 'syz.0.121': attribute type 7 has an invalid length. [ 121.785805][ T6331] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.121'. [ 122.116521][ T6347] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.127'. [ 122.181830][ T6347] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.127'. [ 122.378933][ T6350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.125'. [ 122.406426][ T6353] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.128'. [ 122.611095][ T6362] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.129'. [ 123.253269][ T6377] syz.1.134[6377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.253565][ T6377] syz.1.134[6377] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.966541][ T6395] netlink: 'syz.1.139': attribute type 21 has an invalid length. [ 124.300016][ T6395] netlink: 'syz.1.139': attribute type 4 has an invalid length. [ 124.320403][ T6395] __nla_validate_parse: 2 callbacks suppressed [ 124.320421][ T6395] netlink: 156 bytes leftover after parsing attributes in process `syz.1.139'. [ 124.372815][ T6396] netlink: 40 bytes leftover after parsing attributes in process `syz.0.141'. [ 124.408165][ T6396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.478318][ T6400] netlink: 763 bytes leftover after parsing attributes in process `syz.0.141'. [ 125.058976][ T6405] C: renamed from team_slave_0 (while UP) [ 125.681855][ T6405] netlink: 152 bytes leftover after parsing attributes in process `syz.2.143'. [ 125.692039][ T6406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.143'. [ 125.805339][ T6408] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.144'. [ 125.979569][ T6419] sit0: entered allmulticast mode [ 126.015430][ T6417] netlink: 156 bytes leftover after parsing attributes in process `syz.0.146'. [ 126.042007][ T6416] sit0: entered promiscuous mode [ 126.161577][ T6421] netlink: 55 bytes leftover after parsing attributes in process `syz.2.147'. [ 126.853164][ T6434] validate_nla: 6 callbacks suppressed [ 126.853179][ T6434] netlink: 'syz.3.150': attribute type 2 has an invalid length. [ 126.901939][ T6434] netlink: 'syz.3.150': attribute type 8 has an invalid length. [ 126.919973][ T6434] netlink: 132 bytes leftover after parsing attributes in process `syz.3.150'. [ 126.965688][ T6436] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 126.978161][ T6436] netlink: 'syz.3.150': attribute type 19 has an invalid length. [ 126.990587][ T6436] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.150'. [ 128.016751][ T6467] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 128.036677][ T6467] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 129.572108][ T6507] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.318410][ T6515] netlink: 'syz.3.170': attribute type 6 has an invalid length. [ 130.391585][ T6515] __nla_validate_parse: 1 callbacks suppressed [ 130.391602][ T6515] netlink: 164 bytes leftover after parsing attributes in process `syz.3.170'. [ 130.426293][ T6519] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 130.461824][ T6519] netlink: 132 bytes leftover after parsing attributes in process `syz.0.171'. [ 130.518910][ T6517] netlink: 'syz.3.170': attribute type 2 has an invalid length. [ 130.556119][ T6517] netlink: 'syz.3.170': attribute type 8 has an invalid length. [ 130.601530][ T6517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.170'. [ 130.792334][ T6527] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.174'. [ 131.121895][ T6534] pim6reg1: entered promiscuous mode [ 131.257229][ T6538] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.179'. [ 131.271318][ T6538] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.179'. [ 132.958628][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.966712][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.897635][ T6625] netlink: 'syz.0.187': attribute type 21 has an invalid length. [ 133.952858][ T6625] netlink: 'syz.0.187': attribute type 21 has an invalid length. [ 134.085741][ T6633] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.189'. [ 134.184043][ T6633] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.189'. [ 134.224953][ T6639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.232261][ T6639] IPv6: NLM_F_CREATE should be set when creating new route [ 134.239605][ T6639] IPv6: NLM_F_CREATE should be set when creating new route [ 134.247057][ T6639] IPv6: NLM_F_CREATE should be set when creating new route [ 134.757123][ T6662] netlink: 'syz.0.196': attribute type 39 has an invalid length. [ 135.017224][ T6665] netlink: 'syz.3.197': attribute type 9 has an invalid length. [ 135.080573][ T6665] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.197'. [ 135.606781][ T6688] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 135.661509][ T6688] netlink: 'syz.0.201': attribute type 29 has an invalid length. [ 135.666774][ T6680] can: request_module (can-proto-0) failed. [ 135.774252][ T6692] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.202'. [ 135.775215][ T6682] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 135.809392][ T6682] veth0_vlan: entered allmulticast mode [ 136.194252][ T6682] veth0_vlan: left promiscuous mode [ 136.224422][ T6682] veth0_vlan: entered promiscuous mode [ 136.254855][ T6682] team0: Device veth0_vlan failed to register rx_handler [ 136.376785][ T6692] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.202'. [ 136.475527][ T6682] syz.0.201 (6682) used greatest stack depth: 19624 bytes left [ 136.651069][ T6702] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.205'. [ 136.769673][ T6700] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 136.954727][ T6709] netlink: 'syz.3.204': attribute type 29 has an invalid length. [ 137.048120][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.225089][ T6700] bridge_slave_1: left allmulticast mode [ 137.253600][ T6700] bridge_slave_1: left promiscuous mode [ 137.308021][ T6700] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.507366][ T6700] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 137.541312][ T6709] netlink: 'syz.3.204': attribute type 29 has an invalid length. [ 137.974616][ T6734] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.212'. [ 138.446149][ T6746] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.215'. [ 139.639933][ T5779] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 141.366803][ T6768] netlink: 'syz.0.220': attribute type 21 has an invalid length. [ 141.382898][ T6768] netlink: 132 bytes leftover after parsing attributes in process `syz.0.220'. [ 141.392905][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 141.402247][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.220'. [ 141.649250][ T6776] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.222'. [ 142.420181][ T6801] netlink: 'syz.1.228': attribute type 3 has an invalid length. [ 142.456336][ T6801] netlink: 132 bytes leftover after parsing attributes in process `syz.1.228'. [ 142.646814][ T6804] netlink: 'syz.2.229': attribute type 7 has an invalid length. [ 142.692223][ T6807] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.230'. [ 143.095099][ T6822] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.235'. [ 143.393518][ T6833] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 143.548876][ T6842] netlink: 'syz.3.238': attribute type 23 has an invalid length. [ 143.598613][ T6842] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.238'. [ 144.148500][ T6860] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.243'. [ 144.806629][ T6874] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.245'. [ 145.060924][ T6878] netlink: 'syz.2.247': attribute type 29 has an invalid length. [ 145.135687][ T6876] netlink: 'syz.3.246': attribute type 21 has an invalid length. [ 145.249904][ T6876] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.261133][ T6876] IPv6: Can't replace route, no match found [ 145.269005][ T6878] netlink: 'syz.2.247': attribute type 29 has an invalid length. [ 145.394161][ T6881] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 145.478211][ T6881] team0: Device wg1 is of different type [ 145.521752][ T6883] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 145.567373][ T6883] team0: Device wg1 is of different type [ 145.632209][ T6887] netlink: 'syz.2.251': attribute type 2 has an invalid length. [ 146.474670][ T6887] syz.2.251 (6887) used greatest stack depth: 18792 bytes left [ 146.697370][ T6906] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 146.773944][ T6906] syzkaller0: entered promiscuous mode [ 146.779500][ T6906] syzkaller0: entered allmulticast mode [ 148.773763][ T6916] __nla_validate_parse: 4 callbacks suppressed [ 148.773782][ T6916] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.257'. [ 148.795406][ T6922] netlink: 'syz.0.258': attribute type 39 has an invalid length. [ 149.032554][ T6923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.258'. [ 149.043916][ T6928] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.259'. [ 149.075060][ T6928] netlink: 'syz.2.259': attribute type 2 has an invalid length. [ 149.093970][ T6928] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 149.327424][ T6942] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.263'. [ 149.359985][ T6944] netlink: 'syz.2.264': attribute type 1 has an invalid length. [ 149.378533][ T6944] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.264'. [ 149.601146][ T6950] netlink: 'syz.0.266': attribute type 3 has an invalid length. [ 149.622698][ T6950] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.266'. [ 149.736189][ T6960] netlink: 'syz.2.268': attribute type 41 has an invalid length. [ 149.806532][ T6952] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.267'. [ 150.731152][ T6972] netlink: 'syz.1.273': attribute type 21 has an invalid length. [ 150.832377][ T6976] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.274'. [ 151.208687][ T6989] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.278'. [ 151.436317][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 152.013127][ T7015] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.285'. [ 152.283985][ T7025] netlink: 'syz.1.288': attribute type 10 has an invalid length. [ 152.301260][ T7025] veth0_vlan: entered allmulticast mode [ 152.369527][ T7025] veth0_vlan: left promiscuous mode [ 152.403363][ T7032] syz.0.290[7032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.403726][ T7032] syz.0.290[7032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.415846][ T7025] veth0_vlan: entered promiscuous mode [ 152.436850][ T7032] syz.0.290[7032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.437243][ T7032] syz.0.290[7032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.472921][ T7025] team0: Device veth0_vlan failed to register rx_handler [ 153.324330][ T7051] netlink: 'syz.0.296': attribute type 13 has an invalid length. [ 153.362097][ T7051] erspan0: refused to change device tx_queue_len [ 153.805977][ T7061] __nla_validate_parse: 4 callbacks suppressed [ 153.805998][ T7061] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.299'. [ 153.857391][ T7061] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 153.925463][ T7064] netlink: 'syz.1.300': attribute type 23 has an invalid length. [ 153.985307][ T7066] netlink: 'syz.1.300': attribute type 23 has an invalid length. [ 155.026410][ T7090] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.307'. [ 155.038974][ T7089] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.307'. [ 155.068963][ T7092] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.308'. [ 155.419996][ T7101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.312'. [ 155.724117][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.771235][ T7108] bridge0: entered allmulticast mode [ 155.882598][ T7108] bridge_slave_0: left allmulticast mode [ 155.888628][ T7108] bridge_slave_0: left promiscuous mode [ 155.906185][ T7108] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.978832][ T7111] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.315'. [ 156.252121][ T7115] bond0: entered promiscuous mode [ 156.264391][ T7115] bond_slave_0: entered promiscuous mode [ 156.286822][ T7115] bond_slave_1: entered promiscuous mode [ 156.380692][ T7115] bond0: entered allmulticast mode [ 156.417630][ T7119] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.317'. [ 156.419063][ T7115] bond_slave_0: entered allmulticast mode [ 156.439228][ T7115] bond_slave_1: entered allmulticast mode [ 156.626986][ T7125] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 156.648333][ T7125] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.319'. [ 156.885965][ T7130] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 156.906100][ T7130] netlink: 2 bytes leftover after parsing attributes in process `syz.3.320'. [ 156.927137][ T7130] hsr0: entered promiscuous mode [ 158.490897][ T7152] netlink: 'syz.1.326': attribute type 11 has an invalid length. [ 158.888660][ T7168] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.332'. [ 159.121076][ T7172] netlink: 'syz.2.333': attribute type 21 has an invalid length. [ 159.136555][ T7172] netlink: 168 bytes leftover after parsing attributes in process `syz.2.333'. [ 159.168178][ T7177] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.175527][ T7177] IPv6: NLM_F_CREATE should be set when creating new route [ 159.182912][ T7177] IPv6: NLM_F_CREATE should be set when creating new route [ 159.190181][ T7177] IPv6: NLM_F_CREATE should be set when creating new route [ 159.317562][ T7177] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 159.343731][ T7177] syzkaller1: linktype set to 769 [ 159.548582][ T7182] netlink: 'syz.2.338': attribute type 8 has an invalid length. [ 159.556776][ T7182] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.338'. [ 159.584136][ T7184] netlink: 'syz.2.338': attribute type 8 has an invalid length. [ 159.584148][ T7183] netlink: 60 bytes leftover after parsing attributes in process `syz.3.337'. [ 159.602175][ T7184] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.338'. [ 159.880762][ T7195] netlink: 'syz.2.341': attribute type 10 has an invalid length. [ 159.911807][ T7195] bond0: left promiscuous mode [ 159.916981][ T7195] bond_slave_0: left promiscuous mode [ 159.937385][ T7195] bond_slave_1: left promiscuous mode [ 159.954950][ T7195] bond0: left allmulticast mode [ 159.960103][ T7195] bond_slave_0: left allmulticast mode [ 159.998883][ T7195] bond_slave_1: left allmulticast mode [ 160.234960][ T7195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.285179][ T7195] team0: Port device bond0 added [ 160.789846][ T7210] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.344'. [ 160.801628][ T7210] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 161.144755][ T7223] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.347'. [ 161.816527][ T7237] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.351'. [ 162.072814][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.084198][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.124128][ T7243] bridge0: entered allmulticast mode [ 162.222025][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.229291][ T7245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.237009][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.244283][ T7245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.370291][ T7245] bridge0: entered promiscuous mode [ 162.416704][ T7253] netlink: 'syz.2.357': attribute type 16 has an invalid length. [ 162.451674][ T7253] netlink: 168 bytes leftover after parsing attributes in process `syz.2.357'. [ 164.157414][ T7286] netlink: 'syz.2.364': attribute type 4 has an invalid length. [ 164.168783][ T7286] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.364'. [ 164.912601][ T7304] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.368'. [ 165.073494][ T7300] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 165.091676][ T7300] netlink: 55 bytes leftover after parsing attributes in process `syz.0.368'. [ 165.161719][ T7303] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.369'. [ 165.816361][ T7313] netlink: 128 bytes leftover after parsing attributes in process `syz.0.371'. [ 165.894433][ T7313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.183612][ T7314] netlink: 'syz.3.370': attribute type 10 has an invalid length. [ 166.224291][ T7314] netlink: 2 bytes leftover after parsing attributes in process `syz.3.370'. [ 166.864067][ T7330] netlink: 112 bytes leftover after parsing attributes in process `syz.0.374'. [ 168.071697][ T7347] netlink: 14 bytes leftover after parsing attributes in process `syz.0.379'. [ 168.196550][ T7347] hsr_slave_0: left promiscuous mode [ 168.254859][ T7347] hsr_slave_1: left promiscuous mode [ 169.347601][ T7359] netlink: 'syz.3.383': attribute type 21 has an invalid length. [ 169.357215][ T7359] netlink: 156 bytes leftover after parsing attributes in process `syz.3.383'. [ 170.720384][ T7399] netlink: 14 bytes leftover after parsing attributes in process `syz.1.391'. [ 172.009292][ T7417] netlink: 'syz.2.399': attribute type 10 has an invalid length. [ 172.033981][ T7417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.399'. [ 172.150407][ T7417] batman_adv: batadv0: Adding interface: virt_wifi0 [ 172.169522][ T7417] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.230253][ T7417] batman_adv: batadv0: Interface activated: virt_wifi0 [ 173.073646][ T7435] netlink: 'syz.2.402': attribute type 10 has an invalid length. [ 173.098855][ T7435] netlink: 55 bytes leftover after parsing attributes in process `syz.2.402'. [ 173.414959][ T7435] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 173.579141][ T7435] batman_adv: batadv0: Removing interface: virt_wifi0 [ 173.798881][ T7442] netlink: 'syz.3.405': attribute type 19 has an invalid length. [ 175.487914][ T7479] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 175.615640][ T7479] netlink: 40 bytes leftover after parsing attributes in process `syz.1.411'. [ 175.697562][ T7479] batman_adv: batadv0: Adding interface: virt_wifi0 [ 175.724550][ T7479] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.840924][ T7479] batman_adv: batadv0: Interface activated: virt_wifi0 [ 176.274518][ T7502] netlink: 763 bytes leftover after parsing attributes in process `syz.2.417'. [ 176.755800][ T7513] netlink: 'syz.0.420': attribute type 10 has an invalid length. [ 176.780341][ T7513] netlink: 156 bytes leftover after parsing attributes in process `syz.0.420'. [ 177.409194][ T7532] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 177.881634][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.891952][ T7525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.911610][ T7532] bridge_slave_1: left allmulticast mode [ 177.917570][ T7532] bridge_slave_1: left promiscuous mode [ 177.926863][ T7532] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.957575][ T7532] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 177.970732][ T7534] netlink: 'syz.1.431': attribute type 21 has an invalid length. [ 178.123692][ T7537] netlink: 'syz.2.433': attribute type 2 has an invalid length. [ 178.158201][ T7537] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.433'. [ 178.255956][ T7539] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 178.265701][ T7539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.424'. [ 178.290676][ T7539] batman_adv: batadv0: Adding interface: virt_wifi0 [ 178.306832][ T7539] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.377747][ T7539] batman_adv: batadv0: Interface activated: virt_wifi0 [ 178.599864][ T5779] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 179.263949][ T7560] netlink: 'syz.1.429': attribute type 12 has an invalid length. [ 179.282896][ T7560] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.429'. [ 179.296237][ T7558] -: renamed from syzkaller0 [ 179.320137][ T7560] netlink: 'syz.1.429': attribute type 12 has an invalid length. [ 179.369720][ T7560] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.429'. [ 179.415282][ T7560] netlink: 'syz.1.429': attribute type 12 has an invalid length. [ 179.423680][ T7560] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.429'. [ 179.468562][ T7560] netlink: 'syz.1.429': attribute type 12 has an invalid length. [ 179.495877][ T7560] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.429'. [ 179.527130][ T7560] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.429'. [ 181.692108][ T7647] validate_nla: 30 callbacks suppressed [ 181.692124][ T7647] netlink: 'syz.3.441': attribute type 46 has an invalid length. [ 181.765259][ T7649] netlink: 'syz.1.442': attribute type 21 has an invalid length. [ 181.774352][ T7649] __nla_validate_parse: 30 callbacks suppressed [ 181.774367][ T7649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.442'. [ 182.168683][ T7652] pimreg0: tun_chr_ioctl cmd 35111 [ 183.207793][ T7674] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 183.237781][ T7674] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.448'. [ 183.349718][ T7683] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.450'. [ 183.719359][ T7696] netlink: 'syz.1.453': attribute type 39 has an invalid length. [ 183.761013][ T7693] netlink: 'syz.0.452': attribute type 1 has an invalid length. [ 183.777155][ T7693] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.452'. [ 183.837696][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.845861][ T7697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.861744][ T7697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.869796][ T7697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.248544][ T7708] IPv6: Can't replace route, no match found [ 184.288730][ T7711] tun0: tun_chr_ioctl cmd 1074025681 [ 184.513751][ T5779] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 184.831572][ T7716] netlink: 'syz.3.461': attribute type 10 has an invalid length. [ 184.835089][ T7721] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.462'. [ 184.838842][ T7716] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.461'. [ 184.838873][ T7716] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 185.026679][ T7718] netlink: 'syz.1.460': attribute type 21 has an invalid length. [ 185.037920][ T7718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.045597][ T7718] IPv6: NLM_F_CREATE should be set when creating new route [ 185.054115][ T7718] IPv6: NLM_F_CREATE should be set when creating new route [ 185.061963][ T7718] IPv6: NLM_F_CREATE should be set when creating new route [ 185.170872][ T7732] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.465'. [ 185.314861][ T7737] netlink: 'syz.2.467': attribute type 9 has an invalid length. [ 185.333163][ T7737] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.467'. [ 186.060586][ T7760] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.472'. [ 186.301826][ T7767] netlink: 'syz.0.475': attribute type 1 has an invalid length. [ 186.312163][ T7773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.477'. [ 186.320484][ T7767] netlink: 'syz.0.475': attribute type 2 has an invalid length. [ 186.485418][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.551709][ T5779] Bluetooth: hci3: command tx timeout [ 186.756466][ T7775] bridge_slave_1: left allmulticast mode [ 186.791623][ T7775] bridge_slave_1: left promiscuous mode [ 186.812138][ T7775] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.877445][ T7775] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 186.893684][ T7787] validate_nla: 11 callbacks suppressed [ 186.893702][ T7787] netlink: 'syz.0.479': attribute type 7 has an invalid length. [ 186.918171][ T7787] __nla_validate_parse: 1 callbacks suppressed [ 186.918189][ T7787] netlink: 148 bytes leftover after parsing attributes in process `syz.0.479'. [ 187.735322][ T7799] netlink: 'syz.0.481': attribute type 6 has an invalid length. [ 187.747072][ T7799] netlink: 164 bytes leftover after parsing attributes in process `syz.0.481'. [ 187.960968][ T7804] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.484'. [ 188.536413][ T7820] netlink: 'syz.2.489': attribute type 29 has an invalid length. [ 188.571016][ T7820] netlink: 'syz.2.489': attribute type 29 has an invalid length. [ 188.594838][ T7829] netlink: 'syz.2.489': attribute type 29 has an invalid length. [ 188.674376][ T7820] netlink: 'syz.2.489': attribute type 21 has an invalid length. [ 188.682925][ T7820] netlink: 164 bytes leftover after parsing attributes in process `syz.2.489'. [ 188.973854][ T7841] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.494'. [ 189.430290][ T7853] netlink: 128 bytes leftover after parsing attributes in process `syz.2.497'. [ 189.463418][ T7853] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.735413][ T7866] netlink: 'syz.0.498': attribute type 10 has an invalid length. [ 189.802885][ T7866] macvlan0: entered promiscuous mode [ 189.931964][ T7866] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 190.353351][ T7883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.500'. [ 190.480860][ T7886] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.503'. [ 190.563924][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.753602][ T7883] bridge_slave_0 (unregistering): left allmulticast mode [ 190.789491][ T7883] bridge_slave_0 (unregistering): left promiscuous mode [ 190.839049][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.192890][ T7895] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 191.424189][ T7898] syzkaller0: entered promiscuous mode [ 191.440020][ T7898] syzkaller0: entered allmulticast mode [ 191.924176][ T7911] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.510'. [ 192.424429][ T7926] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.516'. [ 192.493238][ T7927] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.515'. [ 192.664432][ T7929] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.517'. [ 192.700310][ T7929] netlink: 14 bytes leftover after parsing attributes in process `syz.1.517'. [ 192.730081][ T7929] netlink: get zone limit has 4 unknown bytes [ 193.066455][ T7929] netlink: 14 bytes leftover after parsing attributes in process `syz.1.517'. [ 194.396182][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404261][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.382040][ T7929] hsr_slave_0: left promiscuous mode [ 195.420233][ T7929] hsr_slave_1: left promiscuous mode [ 195.556282][ T7939] netlink: 'syz.2.520': attribute type 5 has an invalid length. [ 195.948459][ T7947] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 198.879168][ T7947] team0 (unregistering): Port device team_slave_0 removed [ 198.908383][ T7947] team0 (unregistering): Port device team_slave_1 removed [ 198.953704][ T7943] netlink: 'syz.3.522': attribute type 17 has an invalid length. [ 198.983957][ T7943] netlink: 'syz.3.522': attribute type 16 has an invalid length. [ 199.014889][ T7943] netlink: 152 bytes leftover after parsing attributes in process `syz.3.522'. [ 199.289054][ T7966] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.527'. [ 199.350419][ T7972] netlink: 'syz.3.528': attribute type 2 has an invalid length. [ 199.384721][ T7972] netlink: 'syz.3.528': attribute type 9 has an invalid length. [ 199.395768][ T7972] netlink: 132 bytes leftover after parsing attributes in process `syz.3.528'. [ 199.607640][ T7980] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.531'. [ 199.617272][ T7980] openvswitch: netlink: Duplicate key (type 0). [ 200.191110][ T7986] netlink: 'syz.0.533': attribute type 21 has an invalid length. [ 200.209252][ T7986] netlink: 'syz.0.533': attribute type 6 has an invalid length. [ 200.227776][ T7986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.533'. [ 200.463193][ T7995] netlink: 830 bytes leftover after parsing attributes in process `syz.1.537'. [ 200.697559][ T7999] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.539'. [ 200.791155][ T8008] netlink: 173008 bytes leftover after parsing attributes in process `syz.0.541'. [ 201.135525][ T8019] netlink: 'syz.0.546': attribute type 1 has an invalid length. [ 201.578260][ T8036] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.551'. [ 202.151528][ T8054] netlink: 'syz.2.554': attribute type 4 has an invalid length. [ 202.215346][ T8054] netlink: 168 bytes leftover after parsing attributes in process `syz.2.554'. [ 202.731529][ T8062] netlink: 'syz.1.556': attribute type 10 has an invalid length. [ 202.850425][ T8062] team0: Port device dummy0 added [ 203.215504][ T8072] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 203.244089][ T8073] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 204.061229][ T8100] netlink: 'syz.1.569': attribute type 10 has an invalid length. [ 204.193273][ T8100] team0: Port device hsr_slave_0 added [ 205.685117][ T8124] __nla_validate_parse: 3 callbacks suppressed [ 205.685136][ T8124] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.573'. [ 207.192071][ T5776] Bluetooth: hci3: command 0x0406 tx timeout [ 207.198171][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 207.204657][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 207.718226][ T8143] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 207.751787][ T8143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'. [ 207.764199][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 207.787200][ T8143] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 207.831584][ T8147] tap0: tun_chr_ioctl cmd 2147767511 [ 208.585192][ T8164] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.584'. [ 209.210296][ T8180] netlink: 'syz.1.587': attribute type 21 has an invalid length. [ 210.820014][ T8211] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.596'. [ 212.437598][ T8214] syzkaller0: entered promiscuous mode [ 212.443517][ T8214] syzkaller0: entered allmulticast mode [ 213.163708][ T8242] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.602'. [ 213.275590][ T8245] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.602'. [ 213.477090][ T8247] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.605'. [ 213.797709][ T8249] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 213.816517][ T8249] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.606'. [ 215.871392][ T8249] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.606'. [ 216.054512][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.054757][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.104791][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.125763][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.143157][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.171763][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.187637][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.206819][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.219101][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.237217][ T8256] syz.2.608[8256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.293344][ T8259] netlink: 173008 bytes leftover after parsing attributes in process `syz.1.610'. [ 216.333750][ T8259] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 216.910311][ T8276] netlink: 64 bytes leftover after parsing attributes in process `syz.1.613'. [ 216.983085][ T8274] netlink: 64 bytes leftover after parsing attributes in process `syz.1.613'. [ 217.586691][ T8284] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.615'. [ 217.926609][ T8261] syzkaller0: entered promiscuous mode [ 217.935211][ T8261] syzkaller0: entered allmulticast mode [ 217.958335][ T8279] netlink: 144 bytes leftover after parsing attributes in process `syz.1.613'. [ 220.406280][ T8304] netlink: 'syz.2.622': attribute type 39 has an invalid length. [ 220.799082][ T8310] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.625'. [ 221.057396][ T8314] netlink: 'syz.2.626': attribute type 10 has an invalid length. [ 221.101185][ T8314] netlink: 2 bytes leftover after parsing attributes in process `syz.2.626'. [ 221.189481][ T8314] hsr0: entered promiscuous mode [ 221.204268][ T8314] bridge0: port 1(hsr0) entered blocking state [ 221.248288][ T8314] bridge0: port 1(hsr0) entered disabled state [ 221.283381][ T8314] hsr0: entered allmulticast mode [ 221.297936][ T8314] hsr_slave_0: entered allmulticast mode [ 221.306659][ T8314] hsr_slave_1: entered allmulticast mode [ 221.375826][ T8314] bridge0: port 1(hsr0) entered blocking state [ 221.382528][ T8314] bridge0: port 1(hsr0) entered forwarding state [ 224.883227][ T8332] netlink: 'syz.2.628': attribute type 28 has an invalid length. [ 224.901411][ T8332] netlink: 2 bytes leftover after parsing attributes in process `syz.2.628'. [ 225.139050][ T8346] sctp: [Deprecated]: syz.2.633 (pid 8346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.139050][ T8346] Use struct sctp_sack_info instead [ 225.166954][ T8343] netlink: 13822 bytes leftover after parsing attributes in process `syz.3.635'. [ 225.378928][ T8351] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.636'. [ 225.909063][ T8361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.638'. [ 225.975608][ T8361] netlink: 60 bytes leftover after parsing attributes in process `syz.3.638'. [ 226.001974][ T8359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.638'. [ 226.595418][ T8348] syzkaller0: entered promiscuous mode [ 226.601509][ T8348] syzkaller0: entered allmulticast mode [ 226.630207][ T8360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.638'. [ 227.036227][ T8379] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.641'. [ 227.198777][ T8384] netlink: 'syz.2.642': attribute type 10 has an invalid length. [ 227.209844][ T8384] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.642'. [ 229.404013][ T8391] netlink: 'syz.1.645': attribute type 41 has an invalid length. [ 229.562516][ T8394] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.646'. [ 229.583316][ T8396] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 229.591282][ T8396] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.647'. [ 229.905979][ T8407] raw_sendmsg: syz.3.651 forgot to set AF_INET. Fix it! [ 229.995387][ T8408] netlink: 'syz.3.651': attribute type 4 has an invalid length. [ 230.020841][ T8408] netlink: 152 bytes leftover after parsing attributes in process `syz.3.651'. [ 230.688024][ T8408] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 230.719029][ T8411] macsec0: entered promiscuous mode [ 230.728881][ T8411] macsec0: entered allmulticast mode [ 230.770991][ T8411] veth1_macvtap: entered allmulticast mode [ 231.004643][ T8422] netlink: 'syz.2.654': attribute type 10 has an invalid length. [ 231.014745][ T8422] netlink: 40 bytes leftover after parsing attributes in process `syz.2.654'. [ 231.154921][ T8432] netlink: 'syz.0.656': attribute type 21 has an invalid length. [ 231.191696][ T8432] netlink: 'syz.0.656': attribute type 6 has an invalid length. [ 231.199848][ T8432] netlink: 132 bytes leftover after parsing attributes in process `syz.0.656'. [ 231.423428][ T8440] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.658'. [ 231.744651][ T8452] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.661'. [ 233.757432][ T8459] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.663'. [ 233.824868][ T8459] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.663'. [ 233.870589][ T8456] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.663'. [ 234.934304][ T8473] netlink: 'syz.0.665': attribute type 21 has an invalid length. [ 235.325376][ T8482] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.669'. [ 235.382534][ T8484] sock: sock_set_timeout: `syz.0.670' (pid 8484) tries to set negative timeout [ 236.850765][ T8503] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.674'. [ 236.864528][ T8503] bridge_slave_1: default FDB implementation only supports local addresses [ 237.185645][ T8523] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.681'. [ 238.117633][ T8535] netlink: 'syz.3.685': attribute type 3 has an invalid length. [ 238.147170][ T8535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.685'. [ 238.195124][ T8497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.299381][ T8537] netlink: 'syz.0.686': attribute type 9 has an invalid length. [ 238.341686][ T8537] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.686'. [ 238.834091][ T8551] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.690'. [ 238.909883][ T8554] netlink: 'syz.1.691': attribute type 21 has an invalid length. [ 238.918165][ T8554] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 238.926434][ T8554] netlink: 144 bytes leftover after parsing attributes in process `syz.1.691'. [ 239.046502][ T8558] netlink: 'syz.1.691': attribute type 21 has an invalid length. [ 239.109009][ T8558] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.116368][ T8558] IPv6: NLM_F_CREATE should be set when creating new route [ 239.123708][ T8558] IPv6: NLM_F_CREATE should be set when creating new route [ 239.131022][ T8558] IPv6: NLM_F_CREATE should be set when creating new route [ 239.281460][ T8557] netlink: 'syz.1.691': attribute type 21 has an invalid length. [ 239.312856][ T8557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 239.554529][ T8574] ================================================================== [ 239.562651][ T8574] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720 [ 239.571636][ T8574] Write of size 4 at addr ffff88802ee5b330 by task syz.2.694/8574 [ 239.579466][ T8574] [ 239.581823][ T8574] CPU: 0 PID: 8574 Comm: syz.2.694 Not tainted syzkaller #0 [ 239.589134][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.599269][ T8574] Call Trace: [ 239.602581][ T8574] [ 239.605551][ T8574] dump_stack_lvl+0x18c/0x250 [ 239.610368][ T8574] ? __lock_acquire+0x7d80/0x7d80 [ 239.615471][ T8574] ? show_regs_print_info+0x20/0x20 [ 239.620712][ T8574] ? load_image+0x420/0x420 [ 239.625262][ T8574] ? __virt_addr_valid+0x10c/0x380 [ 239.630429][ T8574] ? __virt_addr_valid+0x10c/0x380 [ 239.635578][ T8574] ? __virt_addr_valid+0x10c/0x380 [ 239.640760][ T8574] print_report+0xa8/0x210 [ 239.645241][ T8574] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 239.651481][ T8574] kasan_report+0x117/0x150 [ 239.656060][ T8574] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 239.662272][ T8574] stack_map_get_build_id_offset+0x6c0/0x720 [ 239.668299][ T8574] ? pcpu_freelist_pop+0x12a/0x190 [ 239.673455][ T8574] ? __bpf_get_stackid+0x900/0x900 [ 239.678607][ T8574] ? perf_get_regs_user+0x5bb/0x6b0 [ 239.683114][ T8567] syzkaller0: entered promiscuous mode [ 239.683854][ T8574] ? perf_reg_abi+0x62/0x90 [ 239.689333][ T8567] syzkaller0: entered allmulticast mode [ 239.693832][ T8574] __bpf_get_stackid+0x564/0x900 [ 239.693866][ T8574] bpf_get_stackid_pe+0x343/0x410 [ 239.693904][ T8574] bpf_prog_2414a5d5030ea31b+0x29/0x2d [ 239.693938][ T8574] bpf_overflow_handler+0x43f/0x510 [ 239.693969][ T8574] ? verify_lock_unused+0x140/0x140 [ 239.693993][ T8574] ? bpf_overflow_handler+0xde/0x510 [ 239.694022][ T8574] ? tp_perf_event_destroy+0x20/0x20 [ 239.735972][ T8574] ? perf_trace_preemptirq_template+0xac/0x330 [ 239.742192][ T8574] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 239.749416][ T8574] ? __perf_event_account_interrupt+0x187/0x280 [ 239.755694][ T8574] __perf_event_overflow+0x461/0x660 [ 239.761013][ T8574] perf_swevent_event+0x319/0x570 [ 239.766085][ T8574] ? perf_tp_event+0x1550/0x1550 [ 239.771047][ T8574] ? __lock_acquire+0x7d80/0x7d80 [ 239.776099][ T8574] ___perf_sw_event+0x4ab/0x730 [ 239.780973][ T8574] ? ___perf_sw_event+0x19e/0x730 [ 239.786019][ T8574] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 239.792520][ T8574] ? __lock_acquire+0x1336/0x7d80 [ 239.797601][ T8574] ? rep_movs_alternative+0x4a/0x90 [ 239.802878][ T8574] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 239.808896][ T8574] ? lock_chain_count+0x20/0x20 [ 239.813775][ T8574] __perf_sw_event+0x139/0x270 [ 239.818600][ T8574] do_user_addr_fault+0x1242/0x12d0 [ 239.823834][ T8574] ? rcu_is_watching+0x15/0xb0 [ 239.828636][ T8574] exc_page_fault+0x64/0x100 [ 239.833318][ T8574] asm_exc_page_fault+0x26/0x30 [ 239.838276][ T8574] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 239.844139][ T8574] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 239.863782][ T8574] RSP: 0018:ffffc9000f62f838 EFLAGS: 00050206 [ 239.869888][ T8574] RAX: ffffffff8431f201 RBX: 0000000000001000 RCX: 0000000000000bc0 [ 239.877882][ T8574] RDX: 0000000000000001 RSI: 0000200000040000 RDI: ffff88802ead0440 [ 239.885872][ T8574] RBP: ffffc9000f62f978 R08: ffff88802ead0fff R09: 1ffff11005d5a1ff [ 239.893885][ T8574] R10: dffffc0000000000 R11: ffffed1005d5a200 R12: ffff88802ead0000 [ 239.901882][ T8574] R13: 000020000003fbc0 R14: ffffc9000f62fc18 R15: 1ffff92001ec5f83 [ 239.909881][ T8574] ? _copy_from_iter+0x131/0x1290 [ 239.914975][ T8574] _copy_from_iter+0x242/0x1290 [ 239.919841][ T8574] ? rep_movs_alternative+0x4a/0x90 [ 239.925075][ T8574] ? copyout_mc+0x70/0x70 [ 239.929435][ T8574] ? copyout_mc+0x70/0x70 [ 239.933799][ T8574] ? __virt_addr_valid+0x10c/0x380 [ 239.938939][ T8574] ? page_copy_sane+0x16a/0x270 [ 239.943815][ T8574] copy_page_from_iter+0x7b/0x100 [ 239.948869][ T8574] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 239.954781][ T8574] unix_stream_sendmsg+0x562/0xbf0 [ 239.959985][ T8574] ? unix_show_fdinfo+0x280/0x280 [ 239.965056][ T8574] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 239.971534][ T8574] ? apparmor_socket_sendmsg+0x8e/0x330 [ 239.977148][ T8574] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 239.982459][ T8574] ? security_socket_sendmsg+0x80/0xa0 [ 239.987955][ T8574] sock_write_iter+0x2dc/0x420 [ 239.992812][ T8574] ? sock_read_iter+0x3f0/0x3f0 [ 239.997695][ T8574] ? common_file_perm+0x198/0x1f0 [ 240.002748][ T8574] vfs_write+0x474/0x9a0 [ 240.007020][ T8574] ? file_end_write+0x250/0x250 [ 240.011898][ T8574] ? __fget_files+0x3fc/0x460 [ 240.016613][ T8574] ? __fdget_pos+0x1d8/0x330 [ 240.021226][ T8574] ? ksys_write+0x74/0x260 [ 240.025700][ T8574] ksys_write+0x151/0x260 [ 240.030082][ T8574] ? __ia32_sys_read+0x90/0x90 [ 240.034876][ T8574] ? lockdep_hardirqs_on+0x98/0x150 [ 240.040104][ T8574] do_syscall_64+0x55/0xb0 [ 240.044543][ T8574] ? clear_bhb_loop+0x40/0x90 [ 240.049259][ T8574] ? clear_bhb_loop+0x40/0x90 [ 240.053962][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.059882][ T8574] RIP: 0033:0x7fc8b2b9e159 [ 240.064323][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.083965][ T8574] RSP: 002b:00007fc8b3a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 240.092402][ T8574] RAX: ffffffffffffffda RBX: 00007fc8b2e26090 RCX: 00007fc8b2b9e159 [ 240.100395][ T8574] RDX: 00000000fffffeff RSI: 00002000000005c0 RDI: 0000000000000004 [ 240.108390][ T8574] RBP: 00007fc8b2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 240.116380][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.124391][ T8574] R13: 00007fc8b2e26128 R14: 00007fc8b2e26090 R15: 00007ffc841c07d8 [ 240.132399][ T8574] [ 240.135438][ T8574] [ 240.137773][ T8574] Allocated by task 8574: [ 240.142110][ T8574] kasan_set_track+0x4e/0x70 [ 240.146733][ T8574] __kasan_kmalloc+0x8f/0xa0 [ 240.151349][ T8574] __kmalloc_node+0xb6/0x240 [ 240.156003][ T8574] bpf_map_area_alloc+0x5e/0x110 [ 240.160972][ T8574] prealloc_elems_and_freelist+0x86/0x1c0 [ 240.166713][ T8574] stack_map_alloc+0x32b/0x4b0 [ 240.171493][ T8574] map_create+0x877/0x12f0 [ 240.175928][ T8574] __sys_bpf+0x651/0x890 [ 240.180184][ T8574] __x64_sys_bpf+0x7c/0x90 [ 240.184621][ T8574] do_syscall_64+0x55/0xb0 [ 240.189062][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.194981][ T8574] [ 240.197317][ T8574] Last potentially related work creation: [ 240.203047][ T8574] kasan_save_stack+0x3e/0x60 [ 240.207753][ T8574] __kasan_record_aux_stack+0xaf/0xc0 [ 240.213159][ T8574] insert_work+0x3d/0x310 [ 240.217542][ T8574] __queue_work+0xbfd/0xfd0 [ 240.222057][ T8574] queue_work_on+0x128/0x1f0 [ 240.226669][ T8574] bpf_map_release+0x119/0x130 [ 240.231454][ T8574] __fput+0x221/0x940 [ 240.235449][ T8574] task_work_run+0x1d4/0x260 [ 240.240064][ T8574] exit_to_user_mode_loop+0xe6/0x110 [ 240.245385][ T8574] exit_to_user_mode_prepare+0xee/0x180 [ 240.250956][ T8574] syscall_exit_to_user_mode+0x1a/0x50 [ 240.256440][ T8574] do_syscall_64+0x61/0xb0 [ 240.260884][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.266808][ T8574] [ 240.269148][ T8574] Second to last potentially related work creation: [ 240.275747][ T8574] kasan_save_stack+0x3e/0x60 [ 240.280448][ T8574] __kasan_record_aux_stack+0xaf/0xc0 [ 240.285848][ T8574] insert_work+0x3d/0x310 [ 240.290200][ T8574] __queue_work+0xbfd/0xfd0 [ 240.294720][ T8574] queue_work_on+0x128/0x1f0 [ 240.299325][ T8574] bpf_map_release+0x119/0x130 [ 240.304115][ T8574] __fput+0x221/0x940 [ 240.308136][ T8574] task_work_run+0x1d4/0x260 [ 240.312767][ T8574] do_exit+0x986/0x2530 [ 240.316960][ T8574] do_group_exit+0x22d/0x2f0 [ 240.321563][ T8574] get_signal+0x12a6/0x1390 [ 240.326086][ T8574] arch_do_signal_or_restart+0xc2/0x7b0 [ 240.331697][ T8574] exit_to_user_mode_loop+0x70/0x110 [ 240.337009][ T8574] exit_to_user_mode_prepare+0xee/0x180 [ 240.342584][ T8574] syscall_exit_to_user_mode+0x1a/0x50 [ 240.348060][ T8574] do_syscall_64+0x61/0xb0 [ 240.352501][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.358438][ T8574] [ 240.360787][ T8574] The buggy address belongs to the object at ffff88802ee5b000 [ 240.360787][ T8574] which belongs to the cache kmalloc-cg-1k of size 1024 [ 240.375122][ T8574] The buggy address is located 0 bytes to the right of [ 240.375122][ T8574] allocated 816-byte region [ffff88802ee5b000, ffff88802ee5b330) [ 240.389634][ T8574] [ 240.391984][ T8574] The buggy address belongs to the physical page: [ 240.398453][ T8574] page:ffffea0000bb9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ee58 [ 240.408631][ T8574] head:ffffea0000bb9600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 240.417584][ T8574] memcg:ffff88803005bc01 [ 240.421832][ T8574] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 240.430293][ T8574] page_type: 0xffffffff() [ 240.434650][ T8574] raw: 00fff00000000840 ffff888017c4f280 0000000000000000 dead000000000001 [ 240.443248][ T8574] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88803005bc01 [ 240.451836][ T8574] page dumped because: kasan: bad access detected [ 240.458264][ T8574] page_owner tracks the page as allocated [ 240.463985][ T8574] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5151, tgid 5151 (udevd), ts 42514207152, free_ts 42451385488 [ 240.484774][ T8574] post_alloc_hook+0x1c1/0x200 [ 240.489583][ T8574] get_page_from_freelist+0x2181/0x22a0 [ 240.495198][ T8574] __alloc_pages+0x1f0/0x460 [ 240.499820][ T8574] alloc_slab_page+0x5d/0x180 [ 240.504524][ T8574] new_slab+0x87/0x2d0 [ 240.508634][ T8574] ___slab_alloc+0xc5c/0x12f0 [ 240.513329][ T8574] __kmem_cache_alloc_node+0x11f/0x250 [ 240.518822][ T8574] __kmalloc+0xa7/0x240 [ 240.522997][ T8574] alloc_pipe_info+0x1f9/0x4b0 [ 240.527797][ T8574] create_pipe_files+0x87/0x700 [ 240.532671][ T8574] __do_pipe_flags+0x4c/0x2c0 [ 240.537369][ T8574] do_pipe2+0xab/0x190 [ 240.541461][ T8574] __x64_sys_pipe2+0x5a/0x70 [ 240.546080][ T8574] do_syscall_64+0x55/0xb0 [ 240.550533][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.556455][ T8574] page last free stack trace: [ 240.561138][ T8574] free_unref_page_prepare+0x7d7/0x8f0 [ 240.566616][ T8574] free_unref_page+0x32/0x2e0 [ 240.571315][ T8574] __unfreeze_partials+0x1cf/0x210 [ 240.576443][ T8574] put_cpu_partial+0x17c/0x250 [ 240.581230][ T8574] __slab_free+0x319/0x400 [ 240.585668][ T8574] qlist_free_all+0x75/0xd0 [ 240.590198][ T8574] kasan_quarantine_reduce+0x143/0x160 [ 240.595681][ T8574] __kasan_slab_alloc+0x22/0x80 [ 240.600552][ T8574] slab_post_alloc_hook+0x6a/0x4d0 [ 240.605694][ T8574] kmem_cache_alloc+0x17e/0x2c0 [ 240.610570][ T8574] ptlock_alloc+0x20/0x70 [ 240.614928][ T8574] pte_alloc_one+0xcc/0x540 [ 240.619462][ T8574] handle_mm_fault+0x2f72/0x4a50 [ 240.624416][ T8574] do_user_addr_fault+0xad2/0x12d0 [ 240.629580][ T8574] exc_page_fault+0x64/0x100 [ 240.634214][ T8574] asm_exc_page_fault+0x26/0x30 [ 240.639097][ T8574] [ 240.641432][ T8574] Memory state around the buggy address: [ 240.647073][ T8574] ffff88802ee5b200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 240.655146][ T8574] ffff88802ee5b280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 240.663219][ T8574] >ffff88802ee5b300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 240.671312][ T8574] ^ [ 240.676976][ T8574] ffff88802ee5b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 240.685056][ T8574] ffff88802ee5b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 240.693159][ T8574] ================================================================== [ 240.701242][ T8574] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 240.708447][ T8574] CPU: 0 PID: 8574 Comm: syz.2.694 Not tainted syzkaller #0 [ 240.715750][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.725838][ T8574] Call Trace: [ 240.729141][ T8574] [ 240.732094][ T8574] dump_stack_lvl+0x18c/0x250 [ 240.736827][ T8574] ? show_regs_print_info+0x20/0x20 [ 240.742070][ T8574] ? load_image+0x420/0x420 [ 240.746623][ T8574] panic+0x2ca/0x720 [ 240.750540][ T8574] ? bpf_jit_dump+0xd0/0xd0 [ 240.755059][ T8574] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 240.761096][ T8574] ? _raw_spin_unlock+0x40/0x40 [ 240.765968][ T8574] ? print_memory_metadata+0x314/0x400 [ 240.771459][ T8574] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 240.777651][ T8574] check_panic_on_warn+0x84/0xa0 [ 240.782608][ T8574] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 240.788802][ T8574] end_report+0x6f/0x130 [ 240.793094][ T8574] kasan_report+0x128/0x150 [ 240.797630][ T8574] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 240.803812][ T8574] stack_map_get_build_id_offset+0x6c0/0x720 [ 240.809828][ T8574] ? pcpu_freelist_pop+0x12a/0x190 [ 240.814965][ T8574] ? __bpf_get_stackid+0x900/0x900 [ 240.820119][ T8574] ? perf_get_regs_user+0x5bb/0x6b0 [ 240.825344][ T8574] ? perf_reg_abi+0x62/0x90 [ 240.829879][ T8574] __bpf_get_stackid+0x564/0x900 [ 240.834873][ T8574] bpf_get_stackid_pe+0x343/0x410 [ 240.839919][ T8574] bpf_prog_2414a5d5030ea31b+0x29/0x2d [ 240.845392][ T8574] bpf_overflow_handler+0x43f/0x510 [ 240.850619][ T8574] ? verify_lock_unused+0x140/0x140 [ 240.855838][ T8574] ? bpf_overflow_handler+0xde/0x510 [ 240.861154][ T8574] ? tp_perf_event_destroy+0x20/0x20 [ 240.866460][ T8574] ? perf_trace_preemptirq_template+0xac/0x330 [ 240.872648][ T8574] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 240.879883][ T8574] ? __perf_event_account_interrupt+0x187/0x280 [ 240.886173][ T8574] __perf_event_overflow+0x461/0x660 [ 240.891500][ T8574] perf_swevent_event+0x319/0x570 [ 240.896562][ T8574] ? perf_tp_event+0x1550/0x1550 [ 240.901521][ T8574] ? __lock_acquire+0x7d80/0x7d80 [ 240.906594][ T8574] ___perf_sw_event+0x4ab/0x730 [ 240.911488][ T8574] ? ___perf_sw_event+0x19e/0x730 [ 240.916540][ T8574] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 240.922972][ T8574] ? __lock_acquire+0x1336/0x7d80 [ 240.928048][ T8574] ? rep_movs_alternative+0x4a/0x90 [ 240.933289][ T8574] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 240.939306][ T8574] ? lock_chain_count+0x20/0x20 [ 240.944175][ T8574] __perf_sw_event+0x139/0x270 [ 240.948958][ T8574] do_user_addr_fault+0x1242/0x12d0 [ 240.954180][ T8574] ? rcu_is_watching+0x15/0xb0 [ 240.958965][ T8574] exc_page_fault+0x64/0x100 [ 240.963610][ T8574] asm_exc_page_fault+0x26/0x30 [ 240.968484][ T8574] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 240.974311][ T8574] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 240.993941][ T8574] RSP: 0018:ffffc9000f62f838 EFLAGS: 00050206 [ 241.000028][ T8574] RAX: ffffffff8431f201 RBX: 0000000000001000 RCX: 0000000000000bc0 [ 241.008021][ T8574] RDX: 0000000000000001 RSI: 0000200000040000 RDI: ffff88802ead0440 [ 241.016015][ T8574] RBP: ffffc9000f62f978 R08: ffff88802ead0fff R09: 1ffff11005d5a1ff [ 241.024009][ T8574] R10: dffffc0000000000 R11: ffffed1005d5a200 R12: ffff88802ead0000 [ 241.032006][ T8574] R13: 000020000003fbc0 R14: ffffc9000f62fc18 R15: 1ffff92001ec5f83 [ 241.040004][ T8574] ? _copy_from_iter+0x131/0x1290 [ 241.045072][ T8574] _copy_from_iter+0x242/0x1290 [ 241.049950][ T8574] ? rep_movs_alternative+0x4a/0x90 [ 241.055179][ T8574] ? copyout_mc+0x70/0x70 [ 241.059534][ T8574] ? copyout_mc+0x70/0x70 [ 241.063886][ T8574] ? __virt_addr_valid+0x10c/0x380 [ 241.069028][ T8574] ? page_copy_sane+0x16a/0x270 [ 241.073912][ T8574] copy_page_from_iter+0x7b/0x100 [ 241.078970][ T8574] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 241.084802][ T8574] unix_stream_sendmsg+0x562/0xbf0 [ 241.089949][ T8574] ? unix_show_fdinfo+0x280/0x280 [ 241.095004][ T8574] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 241.101443][ T8574] ? apparmor_socket_sendmsg+0x8e/0x330 [ 241.107039][ T8574] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 241.112355][ T8574] ? security_socket_sendmsg+0x80/0xa0 [ 241.117836][ T8574] sock_write_iter+0x2dc/0x420 [ 241.122634][ T8574] ? sock_read_iter+0x3f0/0x3f0 [ 241.127511][ T8574] ? common_file_perm+0x198/0x1f0 [ 241.132579][ T8574] vfs_write+0x474/0x9a0 [ 241.136856][ T8574] ? file_end_write+0x250/0x250 [ 241.141740][ T8574] ? __fget_files+0x3fc/0x460 [ 241.146462][ T8574] ? __fdget_pos+0x1d8/0x330 [ 241.151079][ T8574] ? ksys_write+0x74/0x260 [ 241.155526][ T8574] ksys_write+0x151/0x260 [ 241.159882][ T8574] ? __ia32_sys_read+0x90/0x90 [ 241.164671][ T8574] ? lockdep_hardirqs_on+0x98/0x150 [ 241.169897][ T8574] do_syscall_64+0x55/0xb0 [ 241.174337][ T8574] ? clear_bhb_loop+0x40/0x90 [ 241.179041][ T8574] ? clear_bhb_loop+0x40/0x90 [ 241.183748][ T8574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.189683][ T8574] RIP: 0033:0x7fc8b2b9e159 [ 241.194148][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.213781][ T8574] RSP: 002b:00007fc8b3a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.222221][ T8574] RAX: ffffffffffffffda RBX: 00007fc8b2e26090 RCX: 00007fc8b2b9e159 [ 241.230217][ T8574] RDX: 00000000fffffeff RSI: 00002000000005c0 RDI: 0000000000000004 [ 241.238209][ T8574] RBP: 00007fc8b2c3506b R08: 0000000000000000 R09: 0000000000000000 [ 241.246202][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.254195][ T8574] R13: 00007fc8b2e26128 R14: 00007fc8b2e26090 R15: 00007ffc841c07d8 [ 241.262197][ T8574] [ 241.265802][ T8574] Kernel Offset: disabled [ 241.270137][ T8574] Rebooting in 86400 seconds..