last executing test programs: 3m58.591816574s ago: executing program 4 (id=18819): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @multicast2}, 0x0, 0x3, 0x4}}, 0x80, 0x0}, 0x4044011) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3m58.452892017s ago: executing program 4 (id=18820): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x402003, 0x0) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000001c0)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x50, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xb5, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0xb, '\x00', r4, r6, 0x2, 0x9, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000680)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000740)='GPL\x00', 0x100, 0x5b, &(0x7f0000000780)=""/91, 0x41000, 0x0, '\x00', r4, 0x1b, r6, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x7, 0x5f7f, 0x61}, 0x10, r5, 0x0, 0x6, &(0x7f0000000880)=[r1, r1], &(0x7f00000008c0)=[{0x3, 0x1, 0xc, 0xa}, {0x5, 0x3, 0x7, 0xe}, {0x2, 0x1, 0xd, 0x1}, {0x3, 0x3, 0x6, 0x6}, {0x0, 0x1, 0x7, 0x5}, {0x0, 0x2, 0x8, 0x8}], 0x10, 0x10f}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r1, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@union={0x3, 0x4, 0x0, 0x5, 0x0, 0x7fffffff, [{0x3, 0x5, 0xd002}, {0x6, 0x3, 0x9}, {0xa, 0x5, 0xf6a2e62}, {0x100, 0x5, 0xfffffffb}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x2e, 0x30]}}, &(0x7f0000000c40)=""/55, 0x5b, 0x37, 0x1, 0x9}, 0x28) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d00)={r0, 0xffffffffffffffff}, 0x4) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x7, &(0x7f0000000a00)=@raw=[@ldst={0x3, 0x1, 0x0, 0x8, 0x3, 0x6, 0x4}, @exit, @alu={0x7, 0x0, 0xb, 0x0, 0xa, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x8c}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}], &(0x7f0000000a40)='syzkaller\x00', 0x3, 0x60, &(0x7f0000000a80)=""/96, 0x41100, 0x10, '\x00', r11, 0x25, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x4, 0x6, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r7, r7, r13, r8], 0x0, 0x10, 0x10}, 0x94) (async) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x21, 0x40, 0x400, 0x8, 0x1021, r0, 0xc1e, '\x00', 0x0, r6, 0x5, 0x5, 0x1}, 0x50) (async) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x1, 0x6, 0x10001, 0x2000, 0xffffffffffffffff, 0x8, '\x00', r11, r12, 0x4, 0x3, 0x0, 0xa}, 0x50) (async) r17 = bpf$ITER_CREATE(0x21, &(0x7f0000000f40), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r17, 0x40042408, r9) (async) ioctl$PERF_EVENT_IOC_RESET(r17, 0x2403, 0x1d5513b4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001080)={@cgroup=0xffffffffffffffff, 0x11, 0x1, 0x9, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)={@fallback=r13, r14, 0x18, 0x10, 0x0, @void, @value=r14, @void, @void, r19}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', r13}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001180)={r17, 0xffffffffffffffff, 0x0, r14}, 0x10) (async) r20 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001240)=r5, 0x4) r21 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_ext={0x1c, 0x5, &(0x7f00000011c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd8d}]}, &(0x7f0000001200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', r11, 0x0, r20, 0x8, &(0x7f0000001280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x4, 0x6, 0x6, 0x80}, 0x10, 0x2968b, r9, 0x1, &(0x7f0000001300)=[r17, r13, r17], &(0x7f0000001340)=[{0x3, 0x4, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001440)={@fallback=r18, r21, 0x2, 0x28, 0xffffffffffffffff, @void, @void, @void, @value=r3, r19}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_ext={0x1c, 0x2, &(0x7f0000001480)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, r1}], &(0x7f00000014c0)='GPL\x00', 0x2534d44e, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x0, r12, 0x8, &(0x7f0000001500)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x5, 0xe, 0x7, 0xe}, 0x10, 0x3, r9}, 0x94) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001640)={r10, 0x3, 0x8}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001880)={r8, 0x58, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001980)={{r15, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)=r14}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a40)=@bpf_lsm={0x1d, 0x9, &(0x7f0000001680)=@raw=[@alu={0x7, 0x1, 0xd, 0x8, 0x1, 0xffffffffffffff70}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x43e5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0xb, 0x4, 0x1, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000001700)='syzkaller\x00', 0x3, 0x85, &(0x7f0000001740)=""/133, 0x41000, 0x1, '\x00', r22, 0x1b, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x5, 0x0, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000019c0)=[r0, r16, r1, r8, r23], &(0x7f0000001a00)=[{0x5, 0x1, 0xc, 0x5}, {0x1, 0x4, 0x1, 0x2}]}, 0x94) 3m58.197085444s ago: executing program 4 (id=18821): perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001000000071103900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x4000000000000200, r0, 0xb) (async) socket$kcm(0x21, 0x7, 0x2) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdf}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64) setsockopt$sock_attach_bpf(r6, 0x84, 0x17, &(0x7f0000000000), 0x10) (async, rerun: 32) close(r5) (async, rerun: 32) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x2, &(0x7f0000000000), 0x8) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100), 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) (async) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socket$kcm(0x10, 0x2, 0x0) 3m58.045355057s ago: executing program 4 (id=18822): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) bpf$ITER_CREATE(0xb, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45", 0xc}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x1e, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) syz_clone(0x6801400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m56.563068144s ago: executing program 4 (id=18826): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000006000000000000001d000000000000000000000000090000"], 0x48) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c485, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x2}, 0x100c, 0x7, 0x0, 0x2, 0x0, 0x7, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Z\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000100"/28], 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0x10000000000c78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d525146add31b7bc77c26d8982be29d889d1e35355848794ca3f8b38aef1e114ab9fbebe9c6", 0x77}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40840) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3m56.258665991s ago: executing program 4 (id=18830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="f52609ccba166417a678bf38c2774f7904d99a7c69f24445e4a3ccce3b68f4bc5a2b5fa09edfadedfd3bbb7eec971af6528c38d1d5b7", @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x54) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 3m41.196582465s ago: executing program 32 (id=18830): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES16, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="f52609ccba166417a678bf38c2774f7904d99a7c69f24445e4a3ccce3b68f4bc5a2b5fa09edfadedfd3bbb7eec971af6528c38d1d5b7", @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x10, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x14}], 0x1}, 0x54) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) 18.17520892s ago: executing program 1 (id=20124): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000002c0)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80003f000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x28, 0xa, 0xdf4c, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080000002d03010000000000950000000000000069168e0000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 17.76010141s ago: executing program 1 (id=20128): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="180200000100000000d3d85bea1ae0d25f390000ffffffff00850000008700000085000000050000", @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000165, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r5 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000540)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000580)=0x5, 0x12) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000340), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002880)={0xffffffffffffffff, 0x8, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000025c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002640)=[0x0], 0x0, 0xcc, &(0x7f0000002680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000026c0), &(0x7f0000002700), 0x8, 0x200096, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002940)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0xc, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000040000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000054000000c721e0ff10000000bf91000000000000b7020000020000008500000085000000b7000000050000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x0, 0x1000, &(0x7f00000015c0)=""/4096, 0x41000, 0x49, '\x00', r10, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f00000028c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002900)={0x0, 0xc, 0x9, 0xff}, 0x10, r11, r6, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r12 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r12, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="00446916ab", 0x5}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast2}}}], 0x20}, 0x2e894515fedc10b3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r13) setsockopt$sock_attach_bpf(r14, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r15 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r15, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r15, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x0) 17.451370798s ago: executing program 1 (id=20133): socket$kcm(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3ff}, 0x0, 0xfffffffffffffffd, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000006040000000600020000000000000d040000000000"], 0x0, 0x3e}, 0x28) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xc}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) socket$kcm(0xa, 0x2, 0x73) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="ec98b1cc284b97962d70d40f1dced3db89dded4dd5ae60461b3d4e129f0469462626dd99cdc7459ee82349afda9eed774b2ef0943a72ae4dff1df8a1b01f02708bd866", 0x43}, {&(0x7f00000003c0)="2bd7df14736305f8ef3bda2f3dc785b304c4bdb3793a1e458b86f3a9dc125f3988817ae63b7bd5b5d030026c65c5e655927f9783a41d386f32fef51371c7c16271e583df19d4295f4c28abb034ea81cb0b4311232c52b29b17153e858bb67e67e84fe837ce2d8cddee42a0ca1202401d0954c28b26e1ebcf528975425adc4a38b184424039bd22d1b04a4369792ed32980a5ff26ea8f5e3c0279a127c9a788fffa8933275fa89669f6", 0xa9}], 0x2}, 0x110) openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x4) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r8}, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16.799635524s ago: executing program 1 (id=20137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x7406, 0x0, &(0x7f00000003c0)="452846938cebbd031f4d", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_devices(r2, 0x0, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0189436, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa, 0x9}, 0x10}, 0x94) 16.422821043s ago: executing program 1 (id=20140): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f0000001240)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcR\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacV\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x80\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96\xb0\xca\xfcq1\x82\x13\xee=l\xaf\xd6\xebU\x0eH\xd3\xbe\xd7&\xfd.\xc4s\xf2\x18\x89\xa1\xb6\xe7\xf6n\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xc6\xb0og\xbb\x84\xf7\xfbJ>.\xf4D@\xc3\xf2\xa1\xd2$\'v\x17\xa1\x04\x87\xdd\x97f\xb3C\x82\x9b\xb7\x03\xe8=<:\xc6\xdeP3\x99T\xf6\x9d\xc5WX\nt{\x8f\x0f#^\xf8 \xe6\xcdF\xd3\xa6\xf3\xf0~\rdN\x92\xb3\x92\xb4\xcf\x1a\xb2\xb4\xc5\xc3!|s\xd4\xfc\xecv\xae\xb6\xff\xd8\xe8\xfd\xeb\xc0\xd8\x02\x17]\x92\\\xe1\x15\x7f1Q\xa0\b\xe4\xd9\xcb\xec\x17t\x8ax,P\x00\x02\x89^~\xb5<\xb1\xd6z\xde\xea\xd1\xca\xa4\xf0:\x86\x19\xbb\"\xc1:\xca\xe1\x1d\xed\x0e^\xeb\x1f\x9a\xa61&\xe9\x8e\xa0\x17\x03\xaaPt\x8d\xc9\f]%\xc3\x9bS\xc3\xfd\x18\x1a\xb5C\xeb\x00s\x9ey\xf3+\x14\xbc\xef\xb72\x83\x8f\x0e\xb74\xed.\'\x15{rz\x10\x87\xc4vM\xf3\x16^68\x1e\v\xac\x00\x00\x00\x00\x00\x00\x00\xab9\n/\xef\xbc\x1b\x19\x15#\x99z)\x1d9\xfcv\xf3I\x0f\x8f\xbeM\xbb\x13\xe9f\xfa\xa9\xfes\x14W\xb1\x1aC\xa5@a\x1d\xc43Sh\xa3\x93n \xb2\x01O^-\x9cj\xb806\xa9\x98\x95_#7\x9a[\xd8\x10\xec\xc0|B\xd9\xba\xd1u\xd3\xb4\xfeZq\x9f\x8eN\xa22(\xdeBa)\xc4\'\xeck\x9aD\f\xf4%\xb0\xf8\xfc\x1di+H\x88TOJ\x87\x01\xd63\x8e\x82\x82\x9a\xf0\v\x9b\xbf\x03t=B\xfe\xd4]\xab(\xd65\xaf\x8c\xe5\xa0\xd3\xfdZX5\x03\x03\x98pI\xb1_\xccr\xa0\xf2u\xd2\xc00\'\x92(\xad4\x9a\n\x84\x95\x18\xf7\x8cw\xd1\xd6\xc8\xd17\x18\xa7\xfb6a\xe9\xa06q.\x8bl\x8f\"\xf2\xe3\xedA\n\x19\x1c\xd9\\\xed\xe1P\x15K\x04\xa6\xc3>\xc8\x1c&\x9c\xa5\xban\x90)Y\xeda\xeep/\xf7\xb0\f\xcf\xdc\xba \x12\xc2\xa1\xc4\xed5W\x13Uv\xd7\x06\xea\xac\x1c\xecb\xb2M\xaa\xb3\xa7\x9a\xf4\xbe\x06\xa1w\xf7\x86\x06\xa7T\xeb\xc6U\x1b\x9f\xa7\x98\xd5}\xa4\xe7s\xe0\xb8\xd5\x88\xde\xc2}\x9dB\xd8\xad\x16\xd6\xc8\"\r\xbf\x0e \xa55Yh\x04_`b\x04\xe9\x8b\x9a\x13\xe2\x9d\x1e\x1d\xb6,j\x8e\xf1+^\x9by.\x9c\x14-\x12h\xfb2\x1a\xca\x17r\x11t\x06\n\xae\x1e4\x94:\x1a\x00\xb8\xff9G\xa7\x16\xe3\x13VvD\x113\xeaN\xa2\n\x8b-a\xe31K\xb4s\xb0\xa9\xa8\xf3') (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000002c0)='\xdbk\xcb'}, 0x30) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_config_ext={0x5, 0x1}, 0x111140, 0x0, 0x0, 0x9, 0x4, 0xfffffffd, 0x8000}, 0x0, 0xfffffffffffffffc, r0, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESDEC, @ANYRES64, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES16=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000900)="139e94be8ea7ec5aaeaa5253c1fdc8bf2cb83789526f324e911d8d42787d73b8c7c2d5fc4c171e12eec08ba1ad308f93b3bfb94b344e67831748d2e897aff35314d1dbd23b6469a89203564dd129c3c14064bf672753d6c54d1c3d0c961daff96c9c5c9161a969a7c585717eff51f8ec3e2786f40733c2581810cf09e0484dbdf800000dd245844b0a96dae198e0068a81b7e43dd809dfc46bdd8b05f7fd0d981f0bbad62de74bfcd3846c668a83597830e912a63adc086161642d05fc24ceba1d89c67e43fd0c3d936daeaaf1c3935f95d3367f3f0e954e4c235a0b8f2985bdb9ed976de7903f552901e8ff80bd3b", 0xef}], 0x2}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32], 0x48) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x6, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') (async) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x4) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4d6) (async, rerun: 32) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$inet(r8, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) (rerun: 32) 16.217252869s ago: executing program 1 (id=20141): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x1e, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f90324fc602f1b02000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.232679755s ago: executing program 3 (id=20205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200004018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.07665859s ago: executing program 0 (id=20207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRES64=r1, @ANYRESDEC=r3, @ANYRES8, @ANYRES32, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r5}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xc, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x4, 0x1, 0x0, 0xffff0000, 0x9, 0x0, 0xffffffff, 0x0, 0x9ba2}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000040100000c00000000100000", @ANYRES32, @ANYBLOB="000000000400000000000000000000000062001f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000020000100000000000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800490008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r13}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) (async) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r14, 0x1}, 0xc) (async) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000050000000000000000000000711203000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) 5.789055167s ago: executing program 0 (id=20208): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x0, 0x4000}]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0xe00}) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000b80)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x101040, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x2}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xf8f1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x10, &(0x7f0000000040)=r5, 0x4) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff0016e0", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x36) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.2477855s ago: executing program 3 (id=20212): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x65}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000880), &(0x7f0000000000), 0x2}, 0x16) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1e, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}}, @ldst={0x145ead10018cd948, 0x3, 0x6, 0x3, 0x6, 0xffffffffffffffec, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}]}, &(0x7f0000000140)='GPL\x00', 0x5, 0x92, &(0x7f0000000180)=""/146, 0x41100, 0x4a, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xc, 0x891, 0xc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r5], 0x0, 0x10, 0x625}, 0x94) 4.996893176s ago: executing program 3 (id=20214): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2b, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x60, 0x0, 0x0, 0x0, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x8, 0x0, 0x9, 0x0, 0x9}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1004, 0x0, 0x0, 0x4, 0x10000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000fe00000000000000000000000000007812ecf70a7948d953b49bf62485c5036463415b6e9e9d029ae36e5aaa8555d7b8cd3e7089e6c7af0d932625ff35962551606bd30c"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000380)={r1, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb0100180000000400"/26], 0x0, 0x1a}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) recvmsg(r3, &(0x7f0000000980)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)=""/43, 0x2b}, {0x0}, {&(0x7f0000000480)=""/102, 0x66}, {&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/212, 0xd4}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f00000007c0)=""/66, 0x42}], 0x7, &(0x7f00000008c0)=""/138, 0x8a}, 0x2100) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0xff, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x71, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff0000008c000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="28b0d827204f19ab000000008000000000000000001f000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="00000000e2ffffffb6080000000000007b8af8ff00f8ffffffb703000008000000b704000000000000850000005900000095000000000000006a3e707d83e86ed0148e0b0472075d0df4a394f7d0b56a93cb394405a7f0f5e469c9"], &(0x7f0000000280)='syzkaller\x00'}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0500000001000000050000004dfa00"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x40049409, 0x5) 4.991602576s ago: executing program 2 (id=20215): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e1208001600000010", 0x2f}], 0x1, 0x0, 0x0, 0x6000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) r0 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x12}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) 4.483307959s ago: executing program 5 (id=20218): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x8, 0x6, 0xb, 0x11, 0x0, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000100), 0x5}, 0x1a20, 0x5, 0x7, 0x3, 0x9, 0x1c, 0x7, 0x0, 0x3, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x10, 0x8, 0xfc, 0x59, 0x0, 0x3ad8e4a3, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f0000000000), 0x1}, 0xa2, 0x401, 0x1000, 0x8, 0x73, 0xc3, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffffa}, r0, 0xb, r1, 0x1) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) (async) r4 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x6b, 0x1, 0x1, 0x5, 0x0, 0x24000000000000, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000300), 0x7}, 0x118200, 0x4e, 0x2, 0x6, 0xbd9, 0xfffffe01, 0x2, 0x0, 0x3, 0x0, 0x5}, r0, 0x3, r1, 0x5) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0xf8, 0x9, 0x0, 0x6, 0x0, 0x401, 0x8008, 0x6, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7a, 0x1, @perf_bp={&(0x7f0000000240), 0x8}, 0x1182a0, 0x80000, 0x5cc, 0x3, 0xe06, 0x5, 0x4, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r4, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x2, 0xa, 0x6, 0x4, 0x0, 0x1, 0x0, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x2, @perf_config_ext={0xa0, 0xc}, 0x10000, 0x4, 0x8, 0x6, 0xffffffffffffff74, 0x401, 0x7, 0x0, 0xff, 0x0, 0x6}, r3, 0xa, r1, 0xb) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="0f274ff99e70d1624d689be72854467383fa5064845e90da0ec2bde5339e754cf80ff8ba4bc38c1bcc0b28338b269a91881024acb769849600bbed4077310150e75ad1d86300a1bcd5b4cdbde138aa9a5bbe1585cc9bf1daca41c908e2d483629c8ac27f6865eeb66f4af4fdfa8b485bde7f", 0x72}, {&(0x7f00000004c0)="4b9fb7372b0a0eb7a5c9b0c713802948bc81b04c33a6343dfe565660ba84de708d8acfebeaca84a4c6d0fbf73873c69eef4deb7b158e7f58e22df8d5173a32fe17e4b5a6cb45106b9d61a9505e", 0x4d}, {&(0x7f0000000540)="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", 0xfa}, {&(0x7f0000000640)="54fd79d2c2c4619b7c2670c424ff0f38f957104eadd684f58d60a81150a81db01005c04c17b574752cdfb31d400cb609bee145f02c95fc74a252f72af9604a63f828e01b5cfb", 0x46}, {&(0x7f00000006c0)="6ea64e3d61573551e0d1ba576af8c6a23716aaaad0aa867cca9cb5c2afd772af375dd322ee09625fd656587c4c455db850a7c7c685039df7cc24bc705f4f95039c6094db13902ca7e7a7a9929c1b840a992c1c272afbcf0bfc990241b745d45a1f6d041b2e00b639fab7ae816b7a81ac7f0bb6d6ccaed9e2bdc1f2ac8747ae8a39ecc188f007da7f4faf2629f790a85dd962d2460935acc17b42603e4fa38613df17448997af78933c5fee3ca838e476e2659d2733b91251bc432e529c0648eed19b107dbef466e6a2491989f9ef6baa33cc3975eb129061421392fefa0a2b29ca5eff67b162a18e81924a1b029f3ef9d1a68319384429cf5cd192dba7ab", 0xfe}], 0x5, &(0x7f0000000840)=[{0xd8, 0x10b, 0x3, "d002c67608690c07f88ebf83974c20a42a97e56ade8d0d49ee488b5d6cc008ace5a48ee4072cbfb81fd59ca01b16c4877331fdff0207db0367e905881e0b5071e0371d9d920ba39c9171785df283400c6ef30fd3908f7ed7d55b467dff9563930a67f24fd197b467f97ee9c7d5422cc4963e711f1fd382e3f917ad8af17ee09ff57f9193219a65be6ef3132599f235ffca2ec0e969a38e7da7c71b92d5f15aac3d77c39a9ed087c24aef6c25d1b0e3bca6006f8451b66c393b085c2b10b74dfe6ad8f3b40e"}, {0x48, 0x113, 0x1, "40ee4516529c7c29ee1450d42ad121c48e81b74f0909c3b99af0cabfd3668be46f41376f9fcf13963eb2690a98080ff8fd4e2f9882"}, {0x20, 0x88, 0x1, "c90289329e429d792e300607c6b9da"}], 0x140}, 0xc0) (async, rerun: 32) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000009c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@ifindex, 0x1d, 0x0, 0x0, &(0x7f0000000a00)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0], &(0x7f0000000ac0)=[0x0], 0x0}, 0x40) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b40)={@map=r7, r5, 0x23, 0x1014, 0x0, @void, @value, @void, @void, r6}, 0x20) (async, rerun: 64) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00'}, 0x18) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000021c0)={r8, 0x58, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002240)={&(0x7f0000000c80)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000cc0)="18791be58234b1be726c7b5b554b3e4b995478875436cd99d38dd3fb6ecc2953", 0x20}, {&(0x7f0000000d00)="48766ab2a31c189728fbee3a99c885dab63d2986060f54ae871ef67728210098138c6a3e643908ffaeb853f3e198c8fb9b9b861e54a4da37e3f5f2c4f7ae32893885183f526ebc6b3e155d68672f5cd1983f18f0297133dd4e8351482fcad0c6e1cf46e68aacf2a3fc5e63b30fda0edb9e304bca02316e85d3afa7871b881ce2a7a1d31ec0b24a5c133e4d4c0abcabb9435a016e9612ee2097bcf103fe03", 0x9e}, {&(0x7f0000000dc0)="b56e73cd20da127be84c4df5a3993fa1ef8540655ab274d3bdca719f7a", 0x1d}, {&(0x7f0000000e00)="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", 0x1000}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)="a58a2f774fa6f335310bc5ae5d2082577bcef485b6558e34c518522f0cb71c79bce6f2e7f912a20033de50fe8dc7aaf3897fb2f26028ef5d1b965ba81d9ee66f4939ef1c702974e8b32752ff17591ac1de3604592ba8b67f44a93ab845a4c6e16d861e658fb1fc7f082c5642e36c330201357db842501483e272882028a2b4fa2e1f97e1ee8fd7a26503bfdc2246eab7a1d0b473f282eff0", 0x98}, {&(0x7f0000001f00)="d3d607599a4e2ae4f85f4d5987e2f4dd2871607ecb1855b1edba2aaab583002cb930aeb15adefb067ce4e63efd33de858c6c7f0da246beb260b81b37805127d92320a9b7dc53dcbae1f32e2a00be02a3b4e72830ad78344762c6a2c42eb8da28e259c614b2156e6df198fca98c1b78097601ac12464644dcb9373cfc83ea82225f593bcb577b61f07529733560e7507ff7cf409413d0688ec45da7a0651d4e4a738b43d9f467c316dfb68eb6d21f381ea1710d60212f97148166283ed77aa91fb1bcfca231e51d9c303cd6bc0b09f3735ffb6141d6a4ad2b84290de049b651da8ec9", 0xe2}, {&(0x7f0000002000)="8f7d132d6fe351dda422052ed8db85179ab7ee0d33ec1f97be28176788d1a870c1568ef382525858677fece9d74becfe74b1a29bad198aa7d8ab9f7bf224df7788be8cc03be370e52f1280f66e5018b1d4add1772a7771f2a9c3bce33de08cb2f930aa706fd83c97595796628952c01191a17424b596852472031265438edcf91eb95d2587de5897a8d93af6eb562606147711f27e586f601dcce6b15dad466a1fb256fa253c72ac68c829a2d684374415a0b7f82cd5a8b7f2c3c4ce1506", 0xbe}], 0x8, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @broadcast}}}], 0x40}, 0x20044845) (async) r10 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002280)="074f68557332523d417073555e416d74ffcb22cdbf4acf5089d45e36a8d4d3bf10272ec1a39286", 0x27}, {&(0x7f00000022c0)="b99c38d29d02a138328d9e2d5a849216324caa9893d42fee82e72627e0ad0577cf1050665258b733a899224b47d06b8fbf070219d7f668a0df2927972e83aea49cf25ec9851f3c2b6c69e2ed0e3b769ad4720f1e6718502c84c6c15af54fcfa718503294db97d4936ba49db105011bf3f6d8bd56a33fa35952316b4f8d29d1130f155dbdc4d342ec494c8d608a20d082ab2757d566ba9578acf646b3e276f547854dd6a9e84ecd4f374b9ef1d7757b", 0xaf}], 0x2, &(0x7f00000023c0)=[{0xd0, 0x84, 0x3, "ec4a8918459f24dd48f2059fb1b89d96d07ff04eccc6bc2bf1d2a354f2c0ac2cab664b5cf3cd37302c62717adaab2f689a16542126010c3160a592a13c302de07966650b3b87757f4e7cdec2e32b64d577a343f7eb8f5844db9175013494cf74d207af17403f2cf44fe4aebdb7c2b1e4b75ec032e6b3622e0a745de50c841e39e5febe78c2ab279ad7ff0dd028b0d198598411a226ee4bb730050c2503b755e061c0de1147eefcb6f712b8cb1fa9a539e2b3dc90e2fbc017c3"}, {0x80, 0x112, 0x3, "4aafff66fc869633bd1d49bed34282e752f5171b69a4759c0d9ff22c95f43841ac7b486acdfbbc3ad340d19bd31acf63a66e51c289c43b8d72a5064e866d052c6d8e65c7dc32dc381264d89fa1833d8212d146111ba87535efe1ab7137e97aa16f741db597726af82aeeda9024"}, {0x80, 0x6, 0x1, "36752f5254a5e2e08aa8682eb289b0d6338dd874c93395e5e5628ed45b93238082d55046977db69ada6838b5f5194d70cc30699dd4ae0b4e411c573416132bf40322f8ce348845f4cfa20a407fb2cbcfee8a6ed21daf6b80fa59e8273b92cc4258402033ca3e5fc1e8b9d23d3f"}, {0x108, 0xff, 0x3, "86908a26003bb346d086e6e82aaba03362126f7a21c1642306041ff041929a208621a66807dbafbecbeba0f8627034e1b1d7145447d50e58891bdb68c66a6747601394999751c17e94c88fa143eb6a02f781052655f468d93f77a621427c46c28311cd08202f634788a08eaab3b0989b40d6a588fd65f503957a017bf3e211d277d62eb32e4369b1ac0d64cfd8aa444418e5f9a3e97741a30c45abf1b62652d32bdb8029e7b97e8369c37e16f0ba6858722ed7682d861331b95002c69e125e3ae28cac0c8da7b5c67a1b337bc690a1e63c7aa38ed10ec142938e19761af5359576557535ab7cb0e0ac4955ef7a0da424ebcf"}], 0x2d8}, 0x4004000) (async, rerun: 64) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003740)={r7, &(0x7f0000002700)="0b16508ae7d67439e3b7fd642a87e5a71b115f03", &(0x7f0000002740)=""/4096}, 0x20) (rerun: 64) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000003780), 0x1, 0x0) ioctl$TUNSETTXFILTER(r11, 0x400454d1, &(0x7f00000037c0)={0x1, 0x9, [@empty, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @random="b6fb67b7777c", @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="af2628c42979", @broadcast, @remote]}) ioctl$TUNSETLINK(r11, 0x400454cd, 0x338) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003900)={@fallback=r2, 0x6e, 0x1, 0x20da, &(0x7f0000003800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000003840)=[0x0], &(0x7f0000003880)=[0x0, 0x0], &(0x7f00000038c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003b80)={r12, 0x58, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003e80)={r12, 0xe0, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000003c00)=[0x0, 0x0], &(0x7f0000003c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000003c80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000003cc0), &(0x7f0000003d00), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000003d40)}}, 0x10) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000003f40)={0x1, 0x26, &(0x7f0000003940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffbda5, 0x0, 0x0, 0x0, 0xb5dc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x4, 0x1, 0x9, 0x5, 0x7, 0x1e, 0xffffffffffffffff}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ldst={0x2, 0x0, 0x2, 0xa, 0x6, 0x14}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003a80)='GPL\x00', 0x3, 0x2d, &(0x7f0000003ac0)=""/45, 0x41000, 0x56, '\x00', r13, @fallback=0xc, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r15, r12, 0x5, 0x0, &(0x7f0000003ec0)=[{0x1, 0x3, 0xa, 0x2}, {0x5, 0x4, 0xa, 0x7}, {0x1, 0x1, 0x8, 0x6}, {0x5, 0x2, 0xe, 0x9}, {0x4, 0x2, 0x9, 0x9}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000004000)={@cgroup, r16, 0x5, 0x20, 0x0, @void, @void, @void, @value=r14, r6}, 0x20) (async) r17 = gettid() r18 = perf_event_open(&(0x7f0000004100)={0xa6a6167c16244db3, 0x80, 0x8, 0x67, 0x1e, 0xf, 0x0, 0x0, 0x10042, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_config_ext={0x1, 0x8}, 0x1080, 0xffffffffffff8001, 0x101, 0x9, 0x9, 0x2, 0x1, 0x0, 0x8, 0x0, 0x5}, r17, 0xd, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000004080)={0x3, 0x80, 0x4, 0x1, 0x9, 0x0, 0x0, 0x20000000, 0x2042, 0x13ee4bc304572ba3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xf, 0x4, @perf_bp={&(0x7f0000004040), 0x8}, 0x40, 0xfffffffffffffffd, 0x7ff, 0x6, 0x0, 0x6, 0x80, 0x0, 0x4, 0x0, 0x86}, r17, 0x2, r18, 0xc) 4.390612691s ago: executing program 5 (id=20219): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r2, 0x4) 3.661649229s ago: executing program 5 (id=20220): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000000000000000000510000c0003", 0x21}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='%9\x00\x00 '], 0x33fe0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x4e, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab070004000523"], 0xfe33) 2.02094139s ago: executing program 2 (id=20221): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007900a200000000000000000000c212cf76d9bf996158a625"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000300)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b000000000000000000000010000000000000000a010000080000"], 0x28}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c30002000c0031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$sock(r4, &(0x7f00000026c0)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000340)="8f47ea99", 0x4}, {&(0x7f0000000380)="5d24345e0cb192571c3e0eed10e8b701e45a", 0x12}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="960b9c4339c5d7b704ff15", 0xb}], 0x4, &(0x7f00000025c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5845}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xf0}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.02043069s ago: executing program 3 (id=20222): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0xa080, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808e784fadd0ffe184b000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bfa10000000000000701000000feffffb702000008000000b703000000000000850000002d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x25) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) (rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x8000) (async) recvmsg(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008d0000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) (async) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.960959841s ago: executing program 5 (id=20223): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2e0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r3, &(0x7f0000000100)="a57e7399a3186508b5d0d4f5b2370b4bd6886fc12b905fb222c1c34ada17af5e43af17abd7205815e9", &(0x7f0000000200)=""/128}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0x9f, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb01001800000000000000440005004400000003000000000000002f000000000000000d0000000200000009000000050000000900000000000010060000000d00aef970e9b47cf80772ecf58aab000000000012030000000b0000000000"], &(0x7f0000000980)=""/60, 0x5f, 0x3c, 0x1, 0x2, 0x10000}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e40)={0x6, 0x28, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000000000000000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000010000001507320101000000181b0000", @ANYRES32=r3, @ANYBLOB="000000000000000006180500ab00000018230000", @ANYRES32=r3, @ANYBLOB="0000000005000000181200008dbaaec150891f8448128182fea5f039753ad1d91285be05bafe622558d07d0b007a7283efabf71021", @ANYRES32=r3, @ANYBLOB="00000000000000850000000c000000b700000000000000181200"/36, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008417f8ff0800000018410000070000000000000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3, 0xff, &(0x7f0000000c80)=""/255, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x4, 0x4, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000002c0)=[{0x0, 0x5, 0xa}, {0x3, 0x3, 0x6, 0x9}, {0x5, 0x1, 0xa, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_tracing={0x1a, 0x16, &(0x7f0000001340)=ANY=[@ANYBLOB="2eb59ac7c4a19b0217af30fb29cfa50684bbf0a97f927adbe6bab135a036b647571754a0aa88dad4efc324efd0b9468e00a1b0dd3ab6ab2ae7dac07cbc004ea596bf893a58f91900c694ac2caa99b65b2e28cea2de7a06ac017b97d7d95ac0e95ab85e24b800a1c850421d0ceee3781ff6966cb5210e16b1a39c73e66c42136c99803db0f53598d46d1fc117765a216601601a892d3ff4372ff4a9ff703751cdefef33949093c37a4cca272966179f4820066c9636b09e289747febb4c3fb564d4e7f2c7cfb9beacf863467c29d381aaac8e82e894", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000867750f17dbf850000000c000000b70000000000000085100000feffffff181a0000", @ANYRES32=r3, @ANYRES64=0x0, @ANYRESDEC=r5, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000580)='syzkaller\x00', 0x1000, 0x8, &(0x7f00000005c0)=""/8, 0x41000, 0x49, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x40000005, 0x9, 0x1, 0x13}, 0x10, 0x19fa5, r8, 0x0, 0x0, 0x0, 0x10, 0xff1e}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600)}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x2000000000000068, &(0x7f0000000040)=ANY=[@ANYBLOB="750a0000000061116800000000001800000000000000000000000000040095000000000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000001900000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e054"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) 1.861871454s ago: executing program 0 (id=20224): socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x200000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffc}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2}, 0xb00) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x7}, @generic={0xfc, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891c, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b9a2ffa25922fee4db5d86075d7965b", 0x13}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xffffffffffff8000) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000ff03000002000000fbffffff00680000", @ANYRES32, @ANYBLOB="0900030000042000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 1.671519049s ago: executing program 2 (id=20225): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pi6 \x00'}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xb, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xdf}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x95, &(0x7f0000000080)=""/149, 0x41100, 0x10, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000180)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x3, 0x3, 0x1926}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r2], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r3, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x2e, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x58, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r4, r0, 0x3, 0x0, 0x4}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x7, '\x00', r4, r0, 0x3, 0x0, 0x4}, 0x50) socket$kcm(0x29, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x8000, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) r7 = socket$kcm(0x29, 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x7, &(0x7f0000000800)=@raw=[@exit, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x23}], &(0x7f0000000840)='syzkaller\x00', 0x250, 0xce, &(0x7f0000000880)=""/206, 0x41000, 0x4, '\x00', r4, 0x0, r8, 0x8, &(0x7f00000009c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0x2, 0x9, 0x7ff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)=[{0x2, 0x4, 0x6, 0xa}, {0x1, 0x5, 0x1, 0x6}], 0x10, 0xa}, 0x94) r9 = perf_event_open(&(0x7f0000000c40)={0x5, 0x80, 0xfd, 0x3, 0x9, 0x1, 0x0, 0x4362a564, 0x3010, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000c00)}, 0x1000, 0xffff, 0x1000, 0x8, 0x7, 0x8001, 0x7, 0x0, 0x9, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000b80)={0x4, 0x80, 0x3, 0x4, 0x10, 0x8, 0x0, 0xbebf, 0x200, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000b40)}, 0x10504, 0x4, 0xff, 0xe, 0x5, 0xff, 0xc8e, 0x0, 0x2, 0x0, 0x80000000}, 0x0, 0xd, r9, 0x0) (async) r10 = perf_event_open(&(0x7f0000000b80)={0x4, 0x80, 0x3, 0x4, 0x10, 0x8, 0x0, 0xbebf, 0x200, 0xd, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000b40)}, 0x10504, 0x4, 0xff, 0xe, 0x5, 0xff, 0xc8e, 0x0, 0x2, 0x0, 0x80000000}, 0x0, 0xd, r9, 0x0) mkdir(&(0x7f0000000cc0)='./file0\x00', 0x1) (async) mkdir(&(0x7f0000000cc0)='./file0\x00', 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000d00)='\'%^\x00') recvmsg$kcm(r7, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/156, 0x9c}, {&(0x7f0000002e00)=""/48, 0x30}, {&(0x7f0000002e40)=""/21, 0x15}, {&(0x7f0000002e80)=""/25, 0x19}], 0x6, &(0x7f0000002f40)=""/208, 0xd0}, 0x10000) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000003080)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) gettid() (async) r11 = gettid() r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003140)='cpuacct.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f00000030c0)={0x0, 0x80, 0x1, 0xa, 0x6, 0x75, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x3, 0x6}, 0x20, 0x62, 0x7, 0x6, 0x5, 0x2, 0xdbf0, 0x0, 0x5, 0x0, 0x9}, r11, 0xffffffffffffffff, r12, 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003200)={{r1}, &(0x7f0000003180), &(0x7f00000031c0)='%ps \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003200)={{r1}, &(0x7f0000003180), &(0x7f00000031c0)='%ps \x00'}, 0x20) r13 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003240)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003240)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003280)={r1, 0xffffffffffffffff}, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003440)={r14, &(0x7f00000032c0)="1ee71c8e75a7083b5e3b9668b4dea44a5cf09c27db4505888a40c02e585561726ef0dd4b557f9e9bc26e8c1f549a3664d14bdf951d0e1fd827d475acf14d69c25618fffbe3e2a69926827eac421cee4955c27ed613a1c53684451ce53cd89dbd57063178e33aa27975299c4229cf89799156c58a4be122375cafe2f091664060a7107e", &(0x7f0000003380)=""/190}, 0x20) r15 = perf_event_open(&(0x7f00000034c0)={0x4, 0x80, 0x3, 0x7, 0x0, 0xf7, 0x0, 0x3, 0x40, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x365, 0x4, @perf_bp={&(0x7f0000003480), 0x1}, 0x0, 0x1, 0x18, 0x3, 0x2, 0x6, 0x8, 0x0, 0xe0, 0x0, 0x8}, r13, 0x6, r10, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r15, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r15, 0x40042408, r3) r16 = perf_event_open$cgroup(&(0x7f0000003640)={0x3, 0x80, 0x1, 0xfa, 0x9, 0x5, 0x0, 0x9, 0x8000, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xd, 0x2, @perf_bp={&(0x7f0000003600)}, 0x2041, 0x7, 0x1, 0x1, 0x7f, 0x1, 0x7, 0x0, 0xe, 0x0, 0x6}, r12, 0xc, r9, 0x2) perf_event_open$cgroup(&(0x7f0000003580)={0x3, 0x80, 0x9, 0x4, 0xf, 0xc, 0x0, 0x8, 0x88, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000003540), 0x1}, 0x400, 0x1, 0x0, 0x3, 0x8, 0x8, 0x1, 0x0, 0x4, 0x0, 0x3}, r12, 0xf, r16, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004780)={&(0x7f00000036c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @datasec={0xa, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x1, 0xfffffffd}, {0x2, 0x7, 0x9}], 'g'}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0xd, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x1000}, {0x1, 0x0, 0x4}, {0x1, 0x3ff, 0x6}, {0x5, 0x2, 0x8000}], '9'}, @restrict={0xf, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x0, 0x0]}}, &(0x7f0000003780)=""/4096, 0xb7, 0x1000, 0x0, 0x70}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004780)={&(0x7f00000036c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x96, 0x96, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x4}, @datasec={0xa, 0x2, 0x0, 0xf, 0x1, [{0x5, 0x1, 0xfffffffd}, {0x2, 0x7, 0x9}], 'g'}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @var={0x4, 0x0, 0x0, 0xe, 0x4}, @datasec={0xd, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x0, 0x1000}, {0x1, 0x0, 0x4}, {0x1, 0x3ff, 0x6}, {0x5, 0x2, 0x8000}], '9'}, @restrict={0xf, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x2e, 0x61, 0x0, 0x0, 0x0]}}, &(0x7f0000003780)=""/4096, 0xb7, 0x1000, 0x0, 0x70}, 0x28) 1.61152856s ago: executing program 3 (id=20226): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x42}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x28, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) close(0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.476736054s ago: executing program 5 (id=20227): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0)=r1, 0x55) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080300002000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938ba3495169ea70948047ec4a5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d00004ef5d6d9342484286f95728886fffcc44841a6db702f071f468430dfe1d9d322fe7c0acfa5fefec64193071e9f00feffff16ac9609f4fb00"/216, 0xd8}], 0x1}, 0x4004) socket$kcm(0x11, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0)=r1, 0x55) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080300002000000000a118001500060014000040a8002b000e00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9bbc7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938ba3495169ea70948047ec4a5d060a517898516277ce06bbace6f177ccbec4c2ee5a7cef4260027836b0d00004ef5d6d9342484286f95728886fffcc44841a6db702f071f468430dfe1d9d322fe7c0acfa5fefec64193071e9f00feffff16ac9609f4fb00"/216, 0xd8}], 0x1}, 0x4004) (async) 1.409040705s ago: executing program 2 (id=20228): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000)=r3, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xf, 0x5}, 0x105a64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe", 0x1a}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000002a80)={&(0x7f0000000080), 0x6e, &(0x7f0000002980)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x2, &(0x7f00000029c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0xa8}, 0x12023) 472.968168ms ago: executing program 5 (id=20229): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x1b, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xed66, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9e2d}, @exit, @alu={0x4, 0x0, 0x0, 0x7, 0x2, 0x8, 0xfffffffffffffffc}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @ringbuf_query]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0xc1, &(0x7f0000000200)=""/193, 0x100, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x7, 0x67}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x4, 0x6, 0x9}, {0x5, 0x5, 0x0, 0xa}], 0x10, 0xb33}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001300), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x846a, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001340)='cpuacct.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000000a80)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002040)=[{0x0}, {0x0}, {&(0x7f0000000c40)="79fc14d558978a572b65325f7c990d0bda9f57f1f4113a68578f17124557207376", 0x21}, {0x0}, {&(0x7f0000000dc0)="33037ca7f24592ca16e7924d162703010695751acbaec6dd78865b1ad3cce2aff9139204bee2b9a86e50d7582bbb1eed5adecf86adb8595c1218df898b9aeb2e28151564991b770946b346965e5b87fbacc131ed7d19029340a630a3cc10d94c08ad69376d5689195929755876778cc0c3489f60968388d8c7ed74ae369a0a3761b9cbf8cee4aef443974de1c51c21", 0x8f}, {0x0}, {&(0x7f0000001f80)="feb61550fd3f272e36c013ba6ca8d7ab377099f2b42c86d4c6aa622dbc91732da74d2a", 0x23}, {0x0}], 0x8, &(0x7f0000002300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x83, 0x2}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x68}, 0x40804) socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum={0x3}, @struct={0x8, 0x1, 0x0, 0x4, 0x0, 0xfffffff5, [{0x4, 0x1}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x5f, 0x30, 0x5f, 0x30]}}, 0x0, 0x45, 0x0, 0x9, 0x6}, 0x28) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) 344.008491ms ago: executing program 0 (id=20230): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), 0xffffffffffffffff, 0x6}, 0x38) 249.220354ms ago: executing program 2 (id=20231): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x80000001, 0x12) 246.344024ms ago: executing program 3 (id=20232): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@o_path={&(0x7f0000000200)='./file0\x00', r1, 0x4000, r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], &(0x7f00000015c0)=""/4110, 0x2f, 0x100e, 0x1, 0xfffffffc}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x5, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRESDEC=r2, @ANYRESDEC=r4], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0xfe33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r13}, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x104002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 175.068355ms ago: executing program 0 (id=20233): socketpair(0x28, 0x0, 0x28, &(0x7f0000000240)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x78}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, 0x0, 0x0, 0x5}, 0x0, 0xa, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000003600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x9, [@enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x5}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000003680)=""/4096, 0x35, 0x1000, 0x1}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x23, 0x5, 0x2, &(0x7f0000000b80)) 1.04778ms ago: executing program 0 (id=20234): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x2, 0xfffffffd, 0x8, 0x4}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0xffffffffffffffff) socket$kcm(0xa, 0x7, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) (async) socket$kcm(0x1e, 0x4, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r6 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36de77c620243ba2511d", 0x19, 0x0, &(0x7f00000007c0), 0x0) r7 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a40)="c04a07fc8b805e531e1da65d63b864955d1356754edd0b9647ef82f4e9af3cab6695316b12e72f42983d5e5f45871183da") sendmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000440)="b8d7b79ff3d9156f602f764eaade3c142a6d6bef0415fc7951bc37c517fc06356a30cbc7671f512037627fb0798692f4b729eacd02ec4614e3", 0x39}, {&(0x7f0000000500)="113a11f5949a17b491122ec76a345556bd8c", 0x12}, {&(0x7f0000000a80)="554e60df5418a2a40f09d02fabc292ea1e911268424071d96622bc47210d9dddfaa8acbb3d5a47a07c5c0e3ca45a382296709d13b6192d5a7d5c7ef1a5b746fef4c38d2263f831023d96feaac82e190837a28f57eaa247b665331bcece4819af595ea363ee4a77005cb4c8214e7a218f5acbd7ba856e3474db53c82e8c5ba81cb03e84513c5e35864c54370a2bb1996b5ae9f43a01b575007f96d4baad5755a177379033144d5f28c9af404becbbb9b9732b23f198356ba8", 0xb8}, {&(0x7f0000000600)="782b7903ab9d0c8174ef41ec32bd85763073d77f6305978bf9655085a7ba2b5e7ee52145521bf4000000000000b812a8b93bb5c150f2c98b4b629172eba1e5dea02301a679ae40263c81e8151f1a0e5932ce6f5e9e391d", 0x57}], 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="00000000180000001d0000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRESHEX=r4, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="000000001c00000000000000010000000200", @ANYRES32=r7, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x98, 0x20048040}, 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x51}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000300)="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", 0x3c5}], 0x1}, 0x0) (async) r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) (async) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1fff, 0x10000, @value=r5}, 0x28) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) 0s ago: executing program 2 (id=20235): socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000a542fd290000006e0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008000000000000016bd6259d2b7dbbc0dfd2e6daf0c03840a1ebac929e1efa2ad894e20a1a33dc166fa080000005844ff433b9ef0c9ed35f36738a1da09791ff5a96e38b33c918d"], 0x0, 0x26}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x20000000) sendmsg$kcm(r2, 0x0, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000300)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) kernel console output (not intermixed with test programs): 1(bridge_slave_0) entered disabled state [ 3332.319307][T24657] device veth1_macvtap left promiscuous mode [ 3332.332347][T24657] device veth0_macvtap left promiscuous mode [ 3332.339593][T24657] device veth1_vlan left promiscuous mode [ 3332.358896][T24657] device veth0_vlan left promiscuous mode [ 3332.716642][ T7223] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.18367'. [ 3333.246770][T24657] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 3333.429076][ T4328] Bluetooth: hci0: command 0x0419 tx timeout [ 3334.037836][T24657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3334.147257][T24657] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3334.685023][T24657] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 3334.736648][T24657] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3334.749210][T24657] bond0 (unregistering): Released all slaves [ 3334.914527][ T7255] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.18372'. [ 3335.050716][ T6973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3335.086837][ T7260] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.18373'. [ 3335.149160][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3335.174291][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3335.213155][ T6973] 8021q: adding VLAN 0 to HW filter on device team0 [ 3335.331526][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3335.357790][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3335.385644][T24659] bridge0: port 1(bridge_slave_0) entered blocking state [ 3335.392794][T24659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3335.434515][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3335.450966][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3335.486587][T24659] bridge0: port 2(bridge_slave_1) entered blocking state [ 3335.493708][T24659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3335.529884][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3335.545860][ T7268] netlink: 'syz.1.18375': attribute type 3 has an invalid length. [ 3335.553858][ T7268] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.18375'. [ 3335.878139][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3335.903901][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3335.965351][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3335.985395][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3336.014711][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3336.047475][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3336.080249][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3336.105624][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3336.125068][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3336.144965][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3336.184197][T24659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3336.202030][ T6973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3336.552424][ T7306] netlink: 'syz.2.18382': attribute type 3 has an invalid length. [ 3336.611241][ T7306] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18382'. [ 3337.064138][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3337.081645][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3337.218518][ T6973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3337.391609][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3337.411903][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3337.534483][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3337.543166][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3337.592118][ T6973] device veth0_vlan entered promiscuous mode [ 3337.616300][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3337.636118][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3337.686819][ T6973] device veth1_vlan entered promiscuous mode [ 3337.842931][ T6973] device veth0_macvtap entered promiscuous mode [ 3337.899773][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3337.925618][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3337.984895][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3338.044876][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3338.096969][ T6973] device veth1_macvtap entered promiscuous mode [ 3338.104009][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3338.124891][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3338.227728][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3338.258600][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3338.278892][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3338.302619][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3338.325308][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3338.332948][T24641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3338.378013][T24641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3338.558250][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3338.604137][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3338.614022][ T6973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3338.661259][ T6973] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3338.706408][ T6973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3338.714055][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3338.745044][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3338.789917][ T6973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3338.830256][ T6973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3338.867315][ T6973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3338.897087][ T6973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3339.286828][T24641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3339.309072][T24641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3339.341395][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3339.424736][T24641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3339.432614][T24641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3339.464541][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3340.607508][T15263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3340.619007][T15263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3340.627163][T15263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3340.637393][T15263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3340.653639][T15263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3340.664200][T15263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3340.685553][ T7433] netlink: 'syz.2.18413': attribute type 2 has an invalid length. [ 3340.748515][ T7433] netlink: 'syz.2.18413': attribute type 1 has an invalid length. [ 3340.794582][ T7433] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.18413'. [ 3341.382045][T24657] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.501936][ T4328] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 3341.504024][ T7449] pimreg: tun_chr_ioctl cmd 2147767511 [ 3341.550132][T24657] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.590646][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 3341.640695][T24657] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.800355][T24657] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3341.874269][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 3341.909034][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 3341.928151][ T7429] device bridge_slave_0 entered promiscuous mode [ 3341.950307][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 3341.965501][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 3341.981581][ T7429] device bridge_slave_1 entered promiscuous mode [ 3342.042782][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3342.088035][ T7466] netlink: 'syz.2.18420': attribute type 3 has an invalid length. [ 3342.125868][ T7466] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18420'. [ 3342.128915][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3342.376573][ T7429] team0: Port device team_slave_0 added [ 3342.453641][ T7429] team0: Port device team_slave_1 added [ 3342.479839][T24657] tipc: Left network mode [ 3342.513854][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3342.540162][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3342.566923][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3342.694375][ T4328] Bluetooth: hci3: command 0x0409 tx timeout [ 3342.837541][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3342.867600][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3342.945239][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3343.138525][ T7485] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18423'. [ 3343.287963][ T7429] device hsr_slave_0 entered promiscuous mode [ 3343.345076][ T7429] device hsr_slave_1 entered promiscuous mode [ 3343.362463][ T7429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3343.414330][ T7429] Cannot create hsr debugfs directory [ 3343.739160][ T7509] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18427'. [ 3343.836746][ T7509] netlink: 105 bytes leftover after parsing attributes in process `syz.0.18427'. [ 3343.924453][ T7509] netlink: 105 bytes leftover after parsing attributes in process `syz.0.18427'. [ 3344.776184][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 3344.882236][ T7535] netlink: 'syz.3.18434': attribute type 1 has an invalid length. [ 3344.899153][ T7535] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.18434'. [ 3346.864649][ T4328] Bluetooth: hci3: command 0x040f tx timeout [ 3348.532425][ T7576] netlink: 'syz.2.18442': attribute type 2 has an invalid length. [ 3348.656846][ T7576] netlink: 10 bytes leftover after parsing attributes in process `syz.2.18442'. [ 3348.763469][ T4328] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 3348.944395][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 3350.054166][T15263] Bluetooth: hci4: command 0x0406 tx timeout [ 3350.923739][ T7610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18447'. [ 3350.989108][ T7610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18447'. [ 3351.273286][ T7624] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.18452'. [ 3351.598328][T24657] device veth1_vlan left promiscuous mode [ 3351.630885][T15263] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 3352.417013][T24657] team0 (unregistering): Port device team_slave_1 removed [ 3352.470948][T24657] team0 (unregistering): Port device team_slave_0 removed [ 3352.510771][T24657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3352.553150][T24657] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3352.797507][T24657] bond0 (unregistering): Released all slaves [ 3352.833384][ T7643] netlink: 'syz.2.18456': attribute type 10 has an invalid length. [ 3352.844313][ T7643] netlink: 2 bytes leftover after parsing attributes in process `syz.2.18456'. [ 3352.878263][ T7429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3352.895517][ T7429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3352.928509][ T7429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3352.970740][ T7429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3353.126379][ T7657] netlink: 'syz.0.18458': attribute type 10 has an invalid length. [ 3353.177400][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3353.198037][ T7657] device bridge_slave_1 left promiscuous mode [ 3353.226282][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3353.251601][ T7657] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3353.266243][ T7672] netlink: 'syz.2.18462': attribute type 3 has an invalid length. [ 3353.289887][ T7672] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.18462'. [ 3353.457840][ T7671] netlink: 'syz.3.18461': attribute type 2 has an invalid length. [ 3353.502504][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3353.511711][ T7671] netlink: 10 bytes leftover after parsing attributes in process `syz.3.18461'. [ 3353.563227][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3353.579565][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3353.622286][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 3353.663246][T24641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3353.678100][T24641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3353.780650][T24641] bridge0: port 1(bridge_slave_0) entered blocking state [ 3353.787854][T24641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3353.843430][T24641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3353.913670][ T7689] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 3353.930489][ T7689] syzkaller1: linktype set to 786 [ 3353.941084][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3353.966361][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3353.995360][T24648] bridge0: port 2(bridge_slave_1) entered blocking state [ 3354.002522][T24648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3354.041083][ T7686] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18464'. [ 3354.075385][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3354.098281][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3354.127475][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3354.138058][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3354.149244][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3354.159756][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3354.260975][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3354.275080][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3354.292220][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3354.314877][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3354.345598][T24648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3354.386309][ T7429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3354.845458][ T7724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18473'. [ 3354.901412][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18473'. [ 3355.875609][ T7761] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.18480'. [ 3356.021174][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3356.034508][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3356.075724][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3356.264830][ T7779] netlink: 'syz.0.18487': attribute type 29 has an invalid length. [ 3356.324956][ T7779] netlink: 'syz.0.18487': attribute type 29 has an invalid length. [ 3356.333186][ T7783] netlink: 'syz.0.18487': attribute type 29 has an invalid length. [ 3356.567469][ T7779] can: request_module (can-proto-0) failed. [ 3356.827940][ T7805] netlink: 188 bytes leftover after parsing attributes in process `syz.0.18493'. [ 3356.834958][ T7808] netlink: 'syz.1.18494': attribute type 7 has an invalid length. [ 3356.873001][ T7808] netlink: 'syz.1.18494': attribute type 6 has an invalid length. [ 3356.910404][ T7810] netlink: 'syz.2.18495': attribute type 10 has an invalid length. [ 3356.954411][ T7810] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18495'. [ 3357.083204][ T7810] netlink: 'syz.2.18495': attribute type 11 has an invalid length. [ 3357.113247][ T7810] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18495'. [ 3357.161697][ T7811] netlink: 'syz.2.18495': attribute type 11 has an invalid length. [ 3357.185227][ T7811] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18495'. [ 3357.290006][ T7810] netlink: 'syz.2.18495': attribute type 21 has an invalid length. [ 3357.329063][ T7810] netlink: 164 bytes leftover after parsing attributes in process `syz.2.18495'. [ 3357.409844][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3357.424709][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3357.437489][ T7809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3357.479662][ T7827] netlink: 'syz.3.18500': attribute type 2 has an invalid length. [ 3357.493911][ T7429] device veth0_vlan entered promiscuous mode [ 3357.515336][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3357.525690][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3357.541514][ T7827] device 0 entered promiscuous mode [ 3357.574392][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3357.588988][T24663] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3357.616365][ T7429] device veth1_vlan entered promiscuous mode [ 3357.692563][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3357.749285][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3357.757743][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3357.791849][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3357.805418][ T7429] device veth0_macvtap entered promiscuous mode [ 3357.817733][ T7834] netlink: 'syz.2.18502': attribute type 10 has an invalid length. [ 3358.067389][ T7429] device veth1_macvtap entered promiscuous mode [ 3358.159588][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3358.195982][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.222727][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3358.251722][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.270079][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3358.282551][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.303067][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3358.311704][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3358.328889][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3358.340870][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3358.361923][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3358.403062][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3358.425718][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.442543][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3358.461289][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.472842][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3358.498412][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3358.512196][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3358.528253][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3358.552049][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3358.603010][ T7429] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3358.639282][ T7429] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3358.658511][ T7429] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3358.681930][ T7429] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3358.840063][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3358.859953][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3358.886826][ T7851] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.18509'. [ 3358.910400][ T5364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3359.050764][ T7857] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.18510'. [ 3359.115910][ T5364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3359.123779][ T5364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3359.150178][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3359.200889][ T7857] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 3359.295030][ T7857] CPU: 0 PID: 7857 Comm: syz.1.18510 Not tainted syzkaller #0 [ 3359.302562][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3359.312724][ T7857] Call Trace: [ 3359.316025][ T7857] [ 3359.318978][ T7857] dump_stack_lvl+0x188/0x24e [ 3359.323684][ T7857] ? show_regs_print_info+0x12/0x12 [ 3359.328891][ T7857] ? load_image+0x410/0x410 [ 3359.333432][ T7857] sysfs_warn_dup+0x8a/0xa0 [ 3359.337967][ T7857] sysfs_do_create_link_sd+0xc0/0x110 [ 3359.343369][ T7857] device_add+0x83b/0x1050 [ 3359.347818][ T7857] wiphy_register+0x1d8b/0x2aa0 [ 3359.352720][ T7857] ? cfg80211_event_work+0x40/0x40 [ 3359.357861][ T7857] ? minstrel_ht_alloc+0x894/0xa20 [ 3359.363010][ T7857] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3359.369105][ T7857] ieee80211_register_hw+0x2d48/0x39f0 [ 3359.374609][ T7857] ? ieee80211_register_hw+0xee1/0x39f0 [ 3359.380181][ T7857] ? ieee80211_register_hw+0xee1/0x39f0 [ 3359.385760][ T7857] ? ieee80211_tasklet_handler+0x20/0x20 [ 3359.391415][ T7857] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3359.397335][ T7857] ? __debug_object_init+0xed/0x440 [ 3359.402567][ T7857] ? memset+0x1e/0x40 [ 3359.406570][ T7857] ? __hrtimer_init+0x189/0x270 [ 3359.411447][ T7857] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3359.417204][ T7857] ? memcpy+0x3c/0x60 [ 3359.421207][ T7857] hwsim_new_radio_nl+0xab7/0xc90 [ 3359.426276][ T7857] genl_family_rcv_msg_doit+0x22f/0x350 [ 3359.431843][ T7857] ? end_current_label_crit_section+0x170/0x170 [ 3359.438123][ T7857] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3359.444045][ T7857] ? bpf_lsm_capable+0x5/0x10 [ 3359.448741][ T7857] ? security_capable+0x85/0xb0 [ 3359.453621][ T7857] genl_rcv_msg+0x601/0x790 [ 3359.458159][ T7857] ? genl_bind+0x360/0x360 [ 3359.462594][ T7857] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3359.468970][ T7857] netlink_rcv_skb+0x1ef/0x440 [ 3359.473762][ T7857] ? genl_bind+0x360/0x360 [ 3359.478204][ T7857] ? netlink_ack+0x1160/0x1160 [ 3359.483007][ T7857] ? down_read+0x1a8/0x2d0 [ 3359.487445][ T7857] genl_rcv+0x24/0x40 [ 3359.491443][ T7857] netlink_unicast+0x7ad/0x920 [ 3359.496247][ T7857] netlink_sendmsg+0x8ad/0xbd0 [ 3359.501051][ T7857] ? netlink_getsockopt+0x550/0x550 [ 3359.506278][ T7857] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3359.511841][ T7857] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3359.517135][ T7857] ? security_socket_sendmsg+0x7c/0xa0 [ 3359.522597][ T7857] ? netlink_getsockopt+0x550/0x550 [ 3359.527813][ T7857] ____sys_sendmsg+0x5ed/0x9a0 [ 3359.532601][ T7857] ? __sys_sendmsg_sock+0x30/0x30 [ 3359.537638][ T7857] ? __import_iovec+0x306/0x510 [ 3359.542527][ T7857] ? import_iovec+0x6f/0xa0 [ 3359.547058][ T7857] ___sys_sendmsg+0x2a2/0x360 [ 3359.551768][ T7857] ? __sys_sendmsg+0x2a0/0x2a0 [ 3359.556585][ T7857] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 3359.562359][ T7857] __se_sys_sendmsg+0x1c3/0x2b0 [ 3359.567239][ T7857] ? __x64_sys_sendmsg+0x80/0x80 [ 3359.572214][ T7857] ? syscall_enter_from_user_mode+0x2a/0x80 [ 3359.578132][ T7857] do_syscall_64+0x4c/0xa0 [ 3359.582571][ T7857] ? clear_bhb_loop+0x60/0xb0 [ 3359.587270][ T7857] ? clear_bhb_loop+0x60/0xb0 [ 3359.591976][ T7857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3359.597886][ T7857] RIP: 0033:0x7f111939e0d9 [ 3359.602320][ T7857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3359.621948][ T7857] RSP: 002b:00007f111a2b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3359.630382][ T7857] RAX: ffffffffffffffda RBX: 00007f1119626090 RCX: 00007f111939e0d9 [ 3359.638375][ T7857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 3359.646368][ T7857] RBP: 00007f1119435024 R08: 0000000000000000 R09: 0000000000000000 [ 3359.654365][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3359.662350][ T7857] R13: 00007f1119626128 R14: 00007f1119626090 R15: 00007ffc9d771ef8 [ 3359.670355][ T7857] [ 3359.782044][ T7870] device pim6reg1 entered promiscuous mode [ 3362.699109][ T7891] netlink: 152 bytes leftover after parsing attributes in process `syz.0.18518'. [ 3362.770627][ T7891] bond0: (slave bond_slave_0): Releasing backup interface [ 3362.857192][ T7891] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 3362.954567][ T7906] netlink: 37035 bytes leftover after parsing attributes in process `syz.3.18522'. [ 3363.021097][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18526'. [ 3363.030696][ T7907] delete_channel: no stack [ 3363.189242][ T7912] netlink: 'syz.4.18527': attribute type 21 has an invalid length. [ 3363.203770][ T7912] netlink: 'syz.4.18527': attribute type 6 has an invalid length. [ 3363.227224][ T7912] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18527'. [ 3363.276489][ T7920] netlink: 35671 bytes leftover after parsing attributes in process `syz.2.18529'. [ 3363.328989][ T7923] netlink: 830 bytes leftover after parsing attributes in process `syz.0.18530'. [ 3363.688156][ T7934] netlink: 'syz.3.18535': attribute type 7 has an invalid length. [ 3363.738729][ T7934] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.18535'. [ 3364.024691][ T7961] netlink: 'syz.4.18539': attribute type 21 has an invalid length. [ 3365.350639][ T7998] netlink: 'syz.0.18553': attribute type 1 has an invalid length. [ 3365.382161][ T7998] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18553'. [ 3365.487785][ T8001] delete_channel: no stack [ 3365.524049][ T8001] delete_channel: no stack [ 3367.349933][ T8031] netlink: 'syz.1.18563': attribute type 29 has an invalid length. [ 3367.374547][ T8031] netlink: 'syz.1.18563': attribute type 29 has an invalid length. [ 3367.400314][ T8031] netlink: 'syz.1.18563': attribute type 29 has an invalid length. [ 3367.430513][ T8031] netlink: 148 bytes leftover after parsing attributes in process `syz.1.18563'. [ 3367.565669][ T8038] netlink: 'syz.2.18565': attribute type 21 has an invalid length. [ 3367.836027][ T8051] netlink: 'syz.4.18571': attribute type 29 has an invalid length. [ 3368.186334][ T8059] ªªªªª6: renamed from veth0_vlan [ 3368.220165][ T8062] validate_nla: 2 callbacks suppressed [ 3368.220182][ T8062] netlink: 'syz.3.18572': attribute type 17 has an invalid length. [ 3369.086387][ T8081] netlink: 'syz.1.18577': attribute type 15 has an invalid length. [ 3369.129610][ T8081] netlink: 'syz.1.18577': attribute type 7 has an invalid length. [ 3369.577153][ T8091] netlink: 'syz.0.18580': attribute type 3 has an invalid length. [ 3369.603509][ T8091] netlink: 42732 bytes leftover after parsing attributes in process `syz.0.18580'. [ 3369.663861][ T8099] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.18583'. [ 3370.015615][ T8105] netlink: 'syz.2.18585': attribute type 10 has an invalid length. [ 3370.057931][ T8105] device macvlan0 entered promiscuous mode [ 3370.205549][ T8105] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 3370.352483][ T8128] netlink: 'syz.4.18592': attribute type 10 has an invalid length. [ 3370.437197][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.455955][ T8128] device bridge_slave_1 left promiscuous mode [ 3370.462256][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 3370.521656][ T8128] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3370.543604][ T8137] netlink: 152 bytes leftover after parsing attributes in process `syz.1.18595'. [ 3370.564708][ T8131] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.18593'. [ 3370.657214][ T8142] netlink: 'syz.2.18596': attribute type 2 has an invalid length. [ 3371.067467][ T8161] netlink: 'syz.1.18602': attribute type 3 has an invalid length. [ 3371.107485][ T8161] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.18602'. [ 3371.119497][ T8165] device bond_slave_1 entered promiscuous mode [ 3371.319387][ T8172] netlink: 'syz.3.18604': attribute type 2 has an invalid length. [ 3371.335691][ T8172] netlink: 128 bytes leftover after parsing attributes in process `syz.3.18604'. [ 3373.434275][ T8222] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.18614'. [ 3373.755583][ T8240] netlink: 'syz.3.18621': attribute type 46 has an invalid length. [ 3373.844642][ T8242] mac80211_hwsim hwsim199 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3374.173564][ T8258] netlink: 168 bytes leftover after parsing attributes in process `syz.3.18624'. [ 3374.348692][ T8272] syz.1.18627[8272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3375.180027][ T8302] netlink: 'syz.3.18634': attribute type 1 has an invalid length. [ 3375.543230][ T8314] netlink: 128 bytes leftover after parsing attributes in process `syz.3.18638'. [ 3375.584691][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3375.658417][ T8314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3376.695413][T24657] wlan1: Trigger new scan to find an IBSS to join [ 3376.710818][ T8352] netlink: 'syz.2.18648': attribute type 4 has an invalid length. [ 3376.741695][ T8352] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.18648'. [ 3377.379193][ T8362] tipc: Started in network mode [ 3377.410720][ T8362] tipc: Node identity 9215a268, cluster identity 4711 [ 3377.446721][ T8362] tipc: Node number set to 2450891368 [ 3377.697455][ T8372] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18655'. [ 3377.765445][ T8374] netlink: 'syz.4.18657': attribute type 21 has an invalid length. [ 3377.773705][ T8374] netlink: 'syz.4.18657': attribute type 6 has an invalid length. [ 3377.812464][ T8374] netlink: 132 bytes leftover after parsing attributes in process `syz.4.18657'. [ 3378.523496][ T8399] netlink: 'syz.3.18665': attribute type 10 has an invalid length. [ 3378.579688][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 3378.629050][ T8399] device bridge_slave_1 left promiscuous mode [ 3378.644859][ T8399] bridge0: port 2(bridge_slave_1) entered disabled state [ 3379.154461][ T8428] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 3379.160467][ T8428] syzkaller1: linktype set to 786 [ 3380.024468][ T8462] netlink: 144 bytes leftover after parsing attributes in process `syz.4.18680'. [ 3380.052052][ T8463] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.18681'. [ 3380.630121][T24659] wlan1: Trigger new scan to find an IBSS to join [ 3380.648836][ T8485] device pim6reg1 entered promiscuous mode [ 3380.777671][ T8492] netlink: 'syz.0.18690': attribute type 10 has an invalid length. [ 3380.778487][ T8491] netlink: 'syz.1.18691': attribute type 1 has an invalid length. [ 3380.814622][ T8491] netlink: 5 bytes leftover after parsing attributes in process `syz.1.18691'. [ 3381.900107][T24643] wlan1: Creating new IBSS network, BSSID 8e:3b:8f:77:92:c4 [ 3382.094456][ T8492] team0: Port device netdevsim0 added [ 3382.248828][ T8508] netlink: 'syz.0.18695': attribute type 4 has an invalid length. [ 3382.266503][ T8508] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.18695'. [ 3382.505305][ T8522] tap0: tun_chr_ioctl cmd 2147767521 [ 3382.520402][ T8522] netlink: 'syz.3.18698': attribute type 9 has an invalid length. [ 3382.529732][ T8527] netlink: 'syz.1.18700': attribute type 3 has an invalid length. [ 3382.534799][ T8526] netlink: 'syz.1.18700': attribute type 3 has an invalid length. [ 3382.567987][ T8522] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.18698'. [ 3382.607215][ T8527] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.18700'. [ 3382.607668][ T8526] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.18700'. [ 3382.880488][ T8534] netlink: 128 bytes leftover after parsing attributes in process `syz.0.18702'. [ 3382.905581][ T8534] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3382.930964][ T8534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3386.263334][ T8573] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.18715'. [ 3388.950138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3388.956637][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3389.792792][ T8619] netlink: 10 bytes leftover after parsing attributes in process `syz.2.18728'. [ 3389.827358][ T8626] netlink: 'syz.1.18729': attribute type 1 has an invalid length. [ 3389.858931][ T8616] netlink: 128 bytes leftover after parsing attributes in process `syz.0.18727'. [ 3389.895522][ T8616] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3389.918173][ T8616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3390.380189][ T8649] netlink: 'syz.3.18735': attribute type 10 has an invalid length. [ 3390.436398][ T8649] netlink: 2 bytes leftover after parsing attributes in process `syz.3.18735'. [ 3390.474572][ T8649] device hsr0 entered promiscuous mode [ 3390.489918][ T8649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3390.529318][ T8649] bridge0: port 2(hsr0) entered blocking state [ 3390.549805][ T8649] bridge0: port 2(hsr0) entered disabled state [ 3390.565104][ T8649] bridge0: port 2(hsr0) entered blocking state [ 3390.571400][ T8649] bridge0: port 2(hsr0) entered forwarding state [ 3390.855665][ T8668] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.18739'. [ 3391.216174][ T8687] netlink: 'syz.3.18743': attribute type 21 has an invalid length. [ 3391.257998][ T8687] IPv6: NLM_F_CREATE should be specified when creating new route [ 3391.292217][ T8687] IPv6: Can't replace route, no match found [ 3391.374810][ T8697] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.18747'. [ 3391.805888][ T8700] netlink: 'syz.3.18748': attribute type 10 has an invalid length. [ 3391.878489][ T8700] team0: Device hsr_slave_0 failed to register rx_handler [ 3395.014302][ T8714] netlink: 'syz.2.18751': attribute type 39 has an invalid length. [ 3395.365157][ T8743] netlink: 'syz.0.18760': attribute type 3 has an invalid length. [ 3395.373030][ T8743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18760'. [ 3395.668419][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18761'. [ 3395.701481][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18761'. [ 3395.833413][ T8750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18761'. [ 3395.854478][ T8749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.18761'. [ 3396.181718][ T8766] netlink: 'syz.2.18766': attribute type 9 has an invalid length. [ 3396.831869][ T8790] netlink: 'syz.2.18773': attribute type 3 has an invalid length. [ 3396.849034][ T8790] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.18773'. [ 3397.057146][ T8796] netlink: 'syz.2.18775': attribute type 25 has an invalid length. [ 3397.084309][ T8796] netlink: 'syz.2.18775': attribute type 29 has an invalid length. [ 3397.103272][ T8796] netlink: 5 bytes leftover after parsing attributes in process `syz.2.18775'. [ 3397.485337][ T8820] netlink: 'syz.2.18781': attribute type 21 has an invalid length. [ 3398.239750][ T8841] netlink: 'syz.3.18786': attribute type 3 has an invalid length. [ 3398.257646][ T8841] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18786'. [ 3398.308255][ T8842] netlink: 'syz.1.18787': attribute type 10 has an invalid length. [ 3398.324068][ T8842] netlink: 'syz.1.18787': attribute type 19 has an invalid length. [ 3398.377111][ T8842] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.18787'. [ 3398.848593][ T8860] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.18791'. [ 3401.675888][ T8866] netlink: 'syz.1.18792': attribute type 39 has an invalid length. [ 3403.227678][T15263] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 3404.252813][ T8922] netlink: 830 bytes leftover after parsing attributes in process `syz.3.18808'. [ 3404.987544][ T8938] can: request_module (can-proto-0) failed. [ 3406.030338][ T8948] netlink: 'syz.4.18814': attribute type 13 has an invalid length. [ 3406.054455][ T8948] netlink: 140 bytes leftover after parsing attributes in process `syz.4.18814'. [ 3406.242371][ T8955] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.18817'. [ 3408.015806][ T8957] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18818'. [ 3409.093827][ T9017] netlink: 'syz.1.18832': attribute type 12 has an invalid length. [ 3409.103135][ T9017] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18832'. [ 3409.151541][ T9026] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.18834'. [ 3409.299295][ T9040] netlink: 'syz.1.18837': attribute type 5 has an invalid length. [ 3409.344221][ T9040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18837'. [ 3409.948386][ T9074] bond0: (slave wlan1): Error: Slave device does not support XDP [ 3409.969060][ T9074] netlink: 140 bytes leftover after parsing attributes in process `syz.2.18846'. [ 3409.998303][ T9074] netlink: 10 bytes leftover after parsing attributes in process `syz.2.18846'. [ 3410.023836][ T9074] bond0: (slave bond_slave_0): Releasing backup interface [ 3410.123395][ T9074] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 3410.341196][ T9085] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.18850'. [ 3410.682395][ T9102] netlink: 'syz.3.18855': attribute type 10 has an invalid length. [ 3410.705328][ T9102] netlink: 'syz.3.18855': attribute type 19 has an invalid length. [ 3410.727194][ T9102] netlink: 6344 bytes leftover after parsing attributes in process `syz.3.18855'. [ 3411.444119][ T9100] device syzkaller0 entered promiscuous mode [ 3414.416785][ T9110] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18857'. [ 3414.702111][ T9139] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.18865'. [ 3414.732854][ T9139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18865'. [ 3414.798972][ T9139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18865'. [ 3414.813141][ T9145] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18865'. [ 3414.824957][ T9139] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18865'. [ 3414.876274][ T9139] netlink: 125212 bytes leftover after parsing attributes in process `syz.1.18865'. [ 3414.895853][ T9139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18865'. [ 3415.003015][ T9154] netlink: 'syz.0.18870': attribute type 16 has an invalid length. [ 3415.029928][ T9154] netlink: 156 bytes leftover after parsing attributes in process `syz.0.18870'. [ 3415.123298][ T9160] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.18872'. [ 3415.571133][ T9168] device syzkaller0 entered promiscuous mode [ 3415.731282][ T9175] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 3415.764208][ T9175] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 3417.249600][ T9225] netlink: 'syz.1.18892': attribute type 10 has an invalid length. [ 3417.263307][ T9225] device hsr0 entered promiscuous mode [ 3417.271801][ T9225] bridge0: port 4(hsr0) entered blocking state [ 3417.289558][ T9225] bridge0: port 4(hsr0) entered disabled state [ 3417.308274][ T9225] bridge0: port 4(hsr0) entered blocking state [ 3417.315030][ T9225] bridge0: port 4(hsr0) entered forwarding state [ 3417.378217][ T9221] netlink: 'syz.2.18890': attribute type 2 has an invalid length. [ 3417.622093][ T9242] netlink: 'syz.2.18896': attribute type 29 has an invalid length. [ 3417.669492][ T9242] netlink: 'syz.2.18896': attribute type 29 has an invalid length. [ 3418.426860][ T9284] syz.2.18908[9284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3418.427011][ T9284] syz.2.18908[9284] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3418.605763][ T9295] netlink: 'syz.1.18911': attribute type 6 has an invalid length. [ 3418.703261][ T9298] netlink: 'syz.2.18910': attribute type 28 has an invalid length. [ 3418.766626][ T9298] netlink: 'syz.2.18910': attribute type 3 has an invalid length. [ 3421.745376][ T9309] device wlan1 entered promiscuous mode [ 3422.412629][ T9328] delete_channel: no stack [ 3422.471157][ T9337] __nla_validate_parse: 7 callbacks suppressed [ 3422.471176][ T9337] netlink: 56803 bytes leftover after parsing attributes in process `syz.1.18917'. [ 3422.789622][ T9345] netlink: 'syz.3.18925': attribute type 2 has an invalid length. [ 3422.804685][ T9345] netlink: 'syz.3.18925': attribute type 8 has an invalid length. [ 3422.828332][ T9345] netlink: 132 bytes leftover after parsing attributes in process `syz.3.18925'. [ 3422.885719][ T9343] netlink: 128 bytes leftover after parsing attributes in process `syz.0.18924'. [ 3423.079551][ T9366] netlink: 'syz.0.18931': attribute type 16 has an invalid length. [ 3423.092494][ T9366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18931'. [ 3423.123853][ T9366] netlink: 'syz.0.18931': attribute type 2 has an invalid length. [ 3423.137477][ T9366] netlink: 'syz.0.18931': attribute type 1 has an invalid length. [ 3423.151308][ T9366] netlink: 'syz.0.18931': attribute type 4 has an invalid length. [ 3423.159860][ T9366] netlink: 208312 bytes leftover after parsing attributes in process `syz.0.18931'. [ 3423.793472][ T9382] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.18935'. [ 3424.272051][ T9394] netlink: 'syz.0.18939': attribute type 2 has an invalid length. [ 3424.314447][ T9394] netlink: 10 bytes leftover after parsing attributes in process `syz.0.18939'. [ 3425.026893][ T4328] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3425.040806][ T4328] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3425.052851][ T4328] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3425.066759][ T4328] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3425.075813][ T4328] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3425.083527][ T4328] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3426.131427][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 3426.249981][ T9402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18941'. [ 3426.604788][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 3426.623287][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 3426.666193][ T9396] device bridge_slave_0 entered promiscuous mode [ 3426.718147][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 3426.765445][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 3426.804898][ T9396] device bridge_slave_1 entered promiscuous mode [ 3426.953889][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3426.990609][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3427.102112][ T9396] team0: Port device team_slave_0 added [ 3427.146845][ T9396] team0: Port device team_slave_1 added [ 3427.174279][ T4328] Bluetooth: hci5: command 0x0409 tx timeout [ 3427.219299][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3427.226366][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3427.314254][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3427.410378][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3427.443557][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3427.505980][ T9431] netlink: 'syz.0.18947': attribute type 3 has an invalid length. [ 3427.522301][ T9431] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18947'. [ 3427.535685][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3427.699935][ T9396] device hsr_slave_0 entered promiscuous mode [ 3427.802702][ T9396] device hsr_slave_1 entered promiscuous mode [ 3427.850033][ T9396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3427.864409][ T9396] Cannot create hsr debugfs directory [ 3427.870123][ T9438] netlink: 'syz.0.18949': attribute type 12 has an invalid length. [ 3427.894373][ T9438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.18949'. [ 3428.076300][ T9438] netlink: 'syz.0.18949': attribute type 2 has an invalid length. [ 3428.213799][ T9438] netlink: 17083 bytes leftover after parsing attributes in process `syz.0.18949'. [ 3428.655860][ T9444] netlink: 'syz.3.18952': attribute type 16 has an invalid length. [ 3428.667679][ T9444] netlink: 152 bytes leftover after parsing attributes in process `syz.3.18952'. [ 3428.683510][ T9444] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3428.755785][ T9448] netlink: 'syz.0.18954': attribute type 2 has an invalid length. [ 3428.979628][ T9448] device 0 entered promiscuous mode [ 3429.034527][ T9396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3429.273514][ T4328] Bluetooth: hci5: command 0x041b tx timeout [ 3429.749595][ T9396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3429.801970][ T9458] netlink: 'syz.0.18957': attribute type 21 has an invalid length. [ 3429.820077][ T9396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3429.867848][ T9396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3429.991994][ T9474] netlink: 'syz.3.18959': attribute type 11 has an invalid length. [ 3430.071034][ T9474] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.18959'. [ 3430.184669][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3430.219816][T24664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3430.245334][T24664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3430.295663][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 3430.343391][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3430.355983][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3430.416450][T24643] bridge0: port 1(bridge_slave_0) entered blocking state [ 3430.423640][T24643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3430.487457][ T9474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3430.524793][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3430.538728][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3430.588868][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3430.647189][T24643] bridge0: port 2(bridge_slave_1) entered blocking state [ 3430.654400][T24643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3430.763884][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3430.803771][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3430.893298][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3430.980736][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3431.026204][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3431.081311][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3431.110305][ T9396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3431.129974][ T9396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3431.153226][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3431.171280][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3431.218215][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3431.245521][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3431.293187][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3431.336750][T15263] Bluetooth: hci5: command 0x040f tx timeout [ 3431.343727][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3431.382337][ T9499] netlink: 'syz.0.18966': attribute type 3 has an invalid length. [ 3431.482285][ T9499] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18966'. [ 3431.808041][ T9510] netlink: 'syz.0.18968': attribute type 11 has an invalid length. [ 3431.884356][ T9510] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.18968'. [ 3431.986059][ T9510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3432.022494][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3432.060608][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3432.091752][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3432.191447][ T9518] -1: renamed from syzkaller0 [ 3433.414980][T15263] Bluetooth: hci5: command 0x0419 tx timeout [ 3433.618715][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3433.645564][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3433.756611][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3433.795584][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3433.820885][ T9396] device veth0_vlan entered promiscuous mode [ 3433.862365][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3433.871596][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3433.901829][ T9396] device veth1_vlan entered promiscuous mode [ 3433.980084][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3434.004068][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3434.022822][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3434.041147][T24643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3434.070055][ T9396] device veth0_macvtap entered promiscuous mode [ 3434.091332][ T9396] device veth1_macvtap entered promiscuous mode [ 3434.143830][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3434.164047][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.210659][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3434.241456][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.255117][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3434.272752][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.284798][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3434.306659][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.328160][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3434.348895][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3434.361284][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3434.381339][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3434.395075][T24655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3434.430906][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3434.475300][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.492849][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3434.505457][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.522239][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3434.543435][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.555168][ T9396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3434.577633][ T9396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3434.593915][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3434.636458][T24664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3434.663568][T24664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3434.701225][ T9396] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3434.723211][ T9396] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3434.740021][ T9396] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3434.750841][ T9396] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3435.043470][ T9244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3435.067294][ T9244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3435.115090][ T9244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3435.184890][T29619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3435.192756][T29619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3435.366814][T24662] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3435.731691][ T9607] netlink: 169976 bytes leftover after parsing attributes in process `syz.0.18991'. [ 3435.852197][ T9611] netlink: 'syz.5.18936': attribute type 16 has an invalid length. [ 3435.891650][ T9611] netlink: 152 bytes leftover after parsing attributes in process `syz.5.18936'. [ 3435.971207][ T9610] netlink: 14719 bytes leftover after parsing attributes in process `syz.5.18936'. [ 3436.533969][ T9630] netlink: 'syz.0.18998': attribute type 3 has an invalid length. [ 3436.634151][ T9630] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.18998'. [ 3436.693091][ T9624] delete_channel: no stack [ 3436.755055][ T9636] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.18997'. [ 3437.692528][ T9668] netlink: 'syz.2.19008': attribute type 2 has an invalid length. [ 3437.726221][ T9668] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.19008'. [ 3438.655538][ T9693] netlink: 'syz.1.19013': attribute type 3 has an invalid length. [ 3438.940484][ T9693] netlink: 'syz.1.19013': attribute type 1 has an invalid length. [ 3439.179151][ T9693] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19013'. [ 3440.707388][ T9719] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.19020'. [ 3441.604369][ T9737] netlink: 172 bytes leftover after parsing attributes in process `syz.2.19024'. [ 3441.658043][ T9737] netlink: 'syz.2.19024': attribute type 10 has an invalid length. [ 3442.008263][ T9760] netlink: 'syz.0.19030': attribute type 10 has an invalid length. [ 3442.032551][ T9760] netlink: 55 bytes leftover after parsing attributes in process `syz.0.19030'. [ 3445.557248][ T9771] device syzkaller0 entered promiscuous mode [ 3445.735515][ T9788] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.19039'. [ 3445.758936][ T9787] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.19039'. [ 3447.336540][ T4328] Bluetooth: hci0: command 0x0406 tx timeout [ 3447.733069][ T9783] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.19037'. [ 3447.755042][ T9794] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.19038'. [ 3448.260563][ T9826] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.19047'. [ 3448.656375][ T9833] netlink: 'syz.2.19050': attribute type 29 has an invalid length. [ 3448.865266][ T9833] netlink: 'syz.2.19050': attribute type 29 has an invalid length. [ 3449.004764][ T9836] netlink: 'syz.2.19050': attribute type 29 has an invalid length. [ 3450.407414][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.413749][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3451.484794][ T9839] netlink: 'syz.2.19050': attribute type 29 has an invalid length. [ 3452.517731][ T9874] netlink: 'syz.1.19060': attribute type 2 has an invalid length. [ 3452.542696][ T9874] netlink: 'syz.1.19060': attribute type 1 has an invalid length. [ 3452.574908][ T9874] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.19060'. [ 3452.943454][ T9889] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 3452.974397][ T9889] syzkaller0: linktype set to 8 [ 3453.611164][ T9907] delete_channel: no stack [ 3454.072872][ T9906] delete_channel: no stack [ 3454.184235][ T9918] netlink: 'syz.1.19071': attribute type 21 has an invalid length. [ 3454.212593][ T9918] netlink: 'syz.1.19071': attribute type 12 has an invalid length. [ 3454.294342][ T9918] netlink: 'syz.1.19071': attribute type 13 has an invalid length. [ 3454.302288][ T9918] netlink: 'syz.1.19071': attribute type 14 has an invalid length. [ 3454.381775][ T9918] netlink: 'syz.1.19071': attribute type 15 has an invalid length. [ 3454.414899][ T9918] netlink: 'syz.1.19071': attribute type 16 has an invalid length. [ 3454.422936][ T9918] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.19071'. [ 3454.441182][ T9922] netlink: 'syz.5.19072': attribute type 27 has an invalid length. [ 3454.728382][ T9922] bond0: (slave bond_slave_0): Releasing backup interface [ 3454.938093][ T9945] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.19078'. [ 3455.045064][ T9945] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 3455.527641][ T9948] netlink: 'syz.5.19080': attribute type 10 has an invalid length. [ 3455.652252][ T9955] netlink: 'syz.3.19081': attribute type 29 has an invalid length. [ 3455.809294][ T9958] netlink: 'syz.3.19081': attribute type 4 has an invalid length. [ 3455.819570][ T9958] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19081'. [ 3456.011166][ T9962] netlink: 144 bytes leftover after parsing attributes in process `syz.2.19083'. [ 3456.055654][ T9948] team0 (unregistering): Port device team_slave_0 removed [ 3456.160023][ T9948] team0 (unregistering): Port device team_slave_1 removed [ 3458.403302][T10002] bridge0: port 2(hsr0) entered disabled state [ 3458.409690][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 3458.491090][T10002] bridge0: port 2(hsr0) entered disabled state [ 3458.529307][T10002] device bridge_slave_0 left promiscuous mode [ 3458.567216][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 3459.323212][T10052] netlink: 148 bytes leftover after parsing attributes in process `syz.1.19108'. [ 3459.702195][T10071] validate_nla: 4 callbacks suppressed [ 3459.702220][T10071] netlink: 'syz.1.19114': attribute type 3 has an invalid length. [ 3459.813825][T10071] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.19114'. [ 3462.562851][T10082] netlink: 'syz.5.19113': attribute type 10 has an invalid length. [ 3462.647497][T10082] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 3463.051298][T10098] netlink: 184 bytes leftover after parsing attributes in process `syz.2.19118'. [ 3463.285106][T10100] netlink: 'syz.5.19121': attribute type 39 has an invalid length. [ 3463.329672][T10102] netlink: 'syz.1.19122': attribute type 2 has an invalid length. [ 3463.591409][T10102] netlink: 'syz.1.19122': attribute type 10 has an invalid length. [ 3463.703801][T10102] team0: Device hsr_slave_0 failed to register rx_handler [ 3464.098796][T10108] netlink: 'syz.2.19123': attribute type 10 has an invalid length. [ 3464.166618][T10113] netlink: 'syz.0.19124': attribute type 10 has an invalid length. [ 3464.262057][T10113] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19124'. [ 3464.317957][T10116] netlink: 'syz.5.19125': attribute type 29 has an invalid length. [ 3464.363002][T10116] netlink: 'syz.5.19125': attribute type 29 has an invalid length. [ 3464.402934][T10117] netlink: 'syz.5.19125': attribute type 29 has an invalid length. [ 3464.665073][T10116] can: request_module (can-proto-0) failed. [ 3464.675273][T10124] netlink: 830 bytes leftover after parsing attributes in process `syz.0.19128'. [ 3464.895266][T10135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19132'. [ 3464.944627][T10135] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19132'. [ 3464.982486][T10138] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19132'. [ 3465.310743][T10145] device netdevsim0 entered promiscuous mode [ 3466.869258][T10188] validate_nla: 2 callbacks suppressed [ 3466.869291][T10188] netlink: 'syz.3.19144': attribute type 6 has an invalid length. [ 3466.903527][T10188] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.19144'. [ 3467.814330][T15263] Bluetooth: hci3: command 0x0406 tx timeout [ 3468.057484][T10188] netlink: 64019 bytes leftover after parsing attributes in process `syz.3.19144'. [ 3468.396121][T10198] netlink: 'syz.2.19147': attribute type 3 has an invalid length. [ 3468.422105][T10198] netlink: 'syz.2.19147': attribute type 153 has an invalid length. [ 3468.465695][T10198] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.19147'. [ 3468.857706][T10205] netlink: 'syz.3.19149': attribute type 2 has an invalid length. [ 3468.903336][T10205] netlink: 'syz.3.19149': attribute type 8 has an invalid length. [ 3468.958963][T10205] netlink: 132 bytes leftover after parsing attributes in process `syz.3.19149'. [ 3469.143723][T10214] netlink: 'syz.2.19152': attribute type 6 has an invalid length. [ 3469.172677][T10214] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.19152'. [ 3469.379991][T10220] netlink: 'syz.3.19154': attribute type 10 has an invalid length. [ 3469.521766][T10226] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.19156'. [ 3469.732963][T10226] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19156'. [ 3471.067281][T10255] device syzkaller0 entered promiscuous mode [ 3471.089862][T10255] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3471.203310][T10255] €Â0: renamed from pim6reg1 [ 3471.601306][T10275] netlink: 'syz.5.19170': attribute type 49 has an invalid length. [ 3471.619485][T10275] netlink: 'syz.5.19170': attribute type 5 has an invalid length. [ 3471.756681][T10281] netlink: 'syz.1.19172': attribute type 10 has an invalid length. [ 3471.911091][T10281] team0 (unregistering): Port device team_slave_0 removed [ 3471.986582][T10281] team0 (unregistering): Port device team_slave_1 removed [ 3472.233015][T10297] __nla_validate_parse: 1 callbacks suppressed [ 3472.233032][T10297] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.19178'. [ 3472.265429][T10297] netlink: 'syz.3.19178': attribute type 10 has an invalid length. [ 3472.310846][T10297] team0: Device vxcan1 is of different type [ 3472.577537][T10313] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19183'. [ 3472.587133][T10313] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3472.603539][T10313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3476.862260][T10374] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3476.869903][T10374] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3478.697122][T10391] netlink: 'syz.0.19206': attribute type 10 has an invalid length. [ 3478.759115][T10391] device netdevsim0 left promiscuous mode [ 3478.812448][T10391] team0: Port device netdevsim0 removed [ 3478.827374][T10391] batman_adv: batadv0: Adding interface: netdevsim0 [ 3478.852721][T10391] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3478.882343][T10391] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 3478.937733][T10400] netlink: 'syz.3.19210': attribute type 2 has an invalid length. [ 3479.154231][T10404] device syzkaller0 entered promiscuous mode [ 3479.210716][T10411] tap0: tun_chr_ioctl cmd 1074025677 [ 3479.218134][T10411] tap0: linktype set to 769 [ 3479.386066][T10409] device syzkaller0 entered promiscuous mode [ 3479.509547][T10421] netlink: 'syz.3.19217': attribute type 29 has an invalid length. [ 3481.385774][T10419] netlink: 'syz.2.19216': attribute type 21 has an invalid length. [ 3481.393706][T10419] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.19216'. [ 3484.903034][T10421] netlink: 'syz.3.19217': attribute type 29 has an invalid length. [ 3484.918191][T10444] netlink: 'syz.0.19223': attribute type 10 has an invalid length. [ 3484.927234][T10444] bridge0: port 1(bridge_slave_0) entered disabled state [ 3484.956530][T10444] bridge0: port 1(bridge_slave_0) entered blocking state [ 3484.963861][T10444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3485.012959][T10444] team0: Port device bridge0 added [ 3485.281839][T10463] netlink: 'syz.3.19228': attribute type 29 has an invalid length. [ 3485.329592][T10463] netlink: 'syz.3.19228': attribute type 29 has an invalid length. [ 3486.616293][T10493] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 3486.636825][T10493] syzkaller1: linktype set to 823 [ 3487.819040][T10512] device syzkaller0 entered promiscuous mode [ 3492.798900][T10518] device syzkaller0 entered promiscuous mode [ 3495.871979][T10615] netlink: 'syz.0.19278': attribute type 21 has an invalid length. [ 3497.243339][T10642] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19287'. [ 3498.887295][T10655] netlink: 'syz.0.19290': attribute type 3 has an invalid length. [ 3498.921176][T10655] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.19290'. [ 3500.979920][T10695] netlink: 'syz.0.19302': attribute type 17 has an invalid length. [ 3501.035294][T10695] netlink: 'syz.0.19302': attribute type 16 has an invalid length. [ 3501.085154][T10695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.19302'. [ 3502.138466][T10724] netlink: 'syz.5.19310': attribute type 2 has an invalid length. [ 3502.199458][T10724] netlink: 'syz.5.19310': attribute type 1 has an invalid length. [ 3502.250643][T10724] netlink: 170140 bytes leftover after parsing attributes in process `syz.5.19310'. [ 3502.295626][T10707] netlink: 'syz.2.19305': attribute type 2 has an invalid length. [ 3502.352377][T10707] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.19305'. [ 3502.960446][T10707] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 3503.040027][T10707] syzkaller1: linktype set to 823 [ 3503.068607][T10731] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 3503.098729][T10731] syzkaller1: linktype set to 783 [ 3503.193644][T10745] device syzkaller0 entered promiscuous mode [ 3506.799523][T10779] netlink: 'syz.2.19322': attribute type 22 has an invalid length. [ 3506.809135][T10779] netlink: 14526 bytes leftover after parsing attributes in process `syz.2.19322'. [ 3507.619885][T10810] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 3507.731848][T10810] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.19331'. [ 3508.083891][T10829] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.19337'. [ 3508.857411][T10854] netlink: 'syz.5.19344': attribute type 1 has an invalid length. [ 3508.865836][T10854] netlink: 144 bytes leftover after parsing attributes in process `syz.5.19344'. [ 3508.941806][T10861] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.19346'. [ 3509.048960][T10864] netlink: 'syz.3.19348': attribute type 21 has an invalid length. [ 3509.077500][T10864] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19348'. [ 3510.957706][T10939] netlink: 'syz.5.19367': attribute type 1 has an invalid length. [ 3510.972155][T10939] netlink: 'syz.5.19367': attribute type 1 has an invalid length. [ 3510.980088][T10939] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.19367'. [ 3511.827293][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.833621][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.719934][T10924] netlink: 'syz.2.19364': attribute type 10 has an invalid length. [ 3512.961370][T10950] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.19369'. [ 3512.972514][T10950] netlink: 6328 bytes leftover after parsing attributes in process `syz.5.19369'. [ 3512.985334][T10950] tc_dump_action: action bad kind [ 3513.764345][T10976] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19376'. [ 3514.397305][T10998] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.19382'. [ 3516.048440][T11045] netlink: 48 bytes leftover after parsing attributes in process `syz.0.19395'. [ 3516.194365][T11050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19395'. [ 3516.234980][T11045] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.19395'. [ 3516.354162][T11059] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19399'. [ 3516.402087][T11059] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19399'. [ 3516.439646][T11061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19399'. [ 3517.165223][T11077] netlink: 'syz.3.19404': attribute type 1 has an invalid length. [ 3518.876973][T11101] pimreg: tun_chr_ioctl cmd 2147767511 [ 3518.886658][T11102] netlink: 'syz.2.19410': attribute type 19 has an invalid length. [ 3518.950194][T11102] netlink: 'syz.2.19410': attribute type 21 has an invalid length. [ 3518.970304][T11102] netlink: 'syz.2.19410': attribute type 1 has an invalid length. [ 3518.991303][T11102] __nla_validate_parse: 2 callbacks suppressed [ 3518.991317][T11102] netlink: 144 bytes leftover after parsing attributes in process `syz.2.19410'. [ 3519.262415][T11121] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.19414'. [ 3519.343858][T11121] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 3519.399724][T11121] CPU: 0 PID: 11121 Comm: syz.2.19414 Not tainted syzkaller #0 [ 3519.407319][T11121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3519.417390][T11121] Call Trace: [ 3519.420677][T11121] [ 3519.423649][T11121] dump_stack_lvl+0x188/0x24e [ 3519.428363][T11121] ? show_regs_print_info+0x12/0x12 [ 3519.433583][T11121] ? load_image+0x410/0x410 [ 3519.438117][T11121] sysfs_warn_dup+0x8a/0xa0 [ 3519.442655][T11121] sysfs_do_create_link_sd+0xc0/0x110 [ 3519.448057][T11121] device_add+0x83b/0x1050 [ 3519.452507][T11121] wiphy_register+0x1d8b/0x2aa0 [ 3519.457398][T11121] ? cfg80211_event_work+0x40/0x40 [ 3519.462535][T11121] ? minstrel_ht_alloc+0x894/0xa20 [ 3519.467675][T11121] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 3519.473757][T11121] ieee80211_register_hw+0x2d48/0x39f0 [ 3519.479249][T11121] ? ieee80211_register_hw+0xee1/0x39f0 [ 3519.484820][T11121] ? ieee80211_register_hw+0xee1/0x39f0 [ 3519.490398][T11121] ? ieee80211_tasklet_handler+0x20/0x20 [ 3519.496052][T11121] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3519.501966][T11121] ? __debug_object_init+0xed/0x440 [ 3519.507198][T11121] ? memset+0x1e/0x40 [ 3519.511200][T11121] ? __hrtimer_init+0x189/0x270 [ 3519.516072][T11121] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 3519.521838][T11121] ? memcpy+0x3c/0x60 [ 3519.525847][T11121] hwsim_new_radio_nl+0xab7/0xc90 [ 3519.530910][T11121] genl_family_rcv_msg_doit+0x22f/0x350 [ 3519.536481][T11121] ? end_current_label_crit_section+0x170/0x170 [ 3519.542750][T11121] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 3519.548672][T11121] ? bpf_lsm_capable+0x5/0x10 [ 3519.553368][T11121] ? security_capable+0x85/0xb0 [ 3519.558240][T11121] genl_rcv_msg+0x601/0x790 [ 3519.562751][T11121] ? genl_bind+0x360/0x360 [ 3519.567175][T11121] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 3519.573545][T11121] netlink_rcv_skb+0x1ef/0x440 [ 3519.578335][T11121] ? genl_bind+0x360/0x360 [ 3519.582774][T11121] ? netlink_ack+0x1160/0x1160 [ 3519.587572][T11121] ? down_read+0x1a8/0x2d0 [ 3519.592007][T11121] genl_rcv+0x24/0x40 [ 3519.596007][T11121] netlink_unicast+0x7ad/0x920 [ 3519.600805][T11121] netlink_sendmsg+0x8ad/0xbd0 [ 3519.605605][T11121] ? netlink_getsockopt+0x550/0x550 [ 3519.610829][T11121] ? apparmor_socket_sendmsg+0x8a/0x330 [ 3519.616394][T11121] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 3519.621696][T11121] ? security_socket_sendmsg+0x7c/0xa0 [ 3519.627876][T11121] ? netlink_getsockopt+0x550/0x550 [ 3519.633100][T11121] ____sys_sendmsg+0x5ed/0x9a0 [ 3519.637907][T11121] ? __sys_sendmsg_sock+0x30/0x30 [ 3519.642953][T11121] ? __import_iovec+0x306/0x510 [ 3519.647837][T11121] ? import_iovec+0x6f/0xa0 [ 3519.652364][T11121] ___sys_sendmsg+0x2a2/0x360 [ 3519.657067][T11121] ? __sys_sendmsg+0x2a0/0x2a0 [ 3519.661907][T11121] __se_sys_sendmsg+0x1c3/0x2b0 [ 3519.666785][T11121] ? __x64_sys_sendmsg+0x80/0x80 [ 3519.671760][T11121] ? lockdep_hardirqs_on+0x94/0x140 [ 3519.676979][T11121] do_syscall_64+0x4c/0xa0 [ 3519.681418][T11121] ? clear_bhb_loop+0x60/0xb0 [ 3519.686121][T11121] ? clear_bhb_loop+0x60/0xb0 [ 3519.690821][T11121] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3519.696737][T11121] RIP: 0033:0x7f05bfd9e0d9 [ 3519.701165][T11121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3519.720784][T11121] RSP: 002b:00007f05c0cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3519.729212][T11121] RAX: ffffffffffffffda RBX: 00007f05c0025fa0 RCX: 00007f05bfd9e0d9 [ 3519.737185][T11121] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 3519.745151][T11121] RBP: 00007f05bfe35024 R08: 0000000000000000 R09: 0000000000000000 [ 3519.753115][T11121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3519.761077][T11121] R13: 00007f05c0026038 R14: 00007f05c0025fa0 R15: 00007ffc650bdb38 [ 3519.769057][T11121] [ 3520.180007][T11143] netlink: 10 bytes leftover after parsing attributes in process `syz.2.19420'. [ 3520.580612][T11156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19422'. [ 3520.628515][T11156] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19422'. [ 3520.656566][T11156] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3520.732965][T11159] netlink: 128 bytes leftover after parsing attributes in process `syz.0.19422'. [ 3520.775421][T11159] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3520.802029][T11159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3520.928431][T11161] netlink: 'syz.2.19425': attribute type 10 has an invalid length. [ 3520.959873][T11161] bridge0: port 3(ip6gretap0) entered disabled state [ 3520.960063][T11163] netlink: 'syz.1.19426': attribute type 29 has an invalid length. [ 3520.968408][T11161] bridge0: port 2(bridge_slave_1) entered disabled state [ 3520.985565][T11161] bridge0: port 1(bridge_slave_0) entered disabled state [ 3521.229792][T11161] bridge0: port 3(ip6gretap0) entered blocking state [ 3521.238070][T11161] bridge0: port 3(ip6gretap0) entered forwarding state [ 3521.249450][T11161] bridge0: port 2(bridge_slave_1) entered blocking state [ 3521.257244][T11161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3521.268582][T11161] bridge0: port 1(bridge_slave_0) entered blocking state [ 3521.276633][T11161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3521.418094][T11161] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 3521.435949][T11163] netlink: 'syz.1.19426': attribute type 29 has an invalid length. [ 3521.866894][T11179] netlink: 'syz.0.19429': attribute type 3 has an invalid length. [ 3521.921867][T11179] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19429'. [ 3522.150148][T11195] netlink: 180 bytes leftover after parsing attributes in process `syz.1.19434'. [ 3522.785017][T11213] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.19438'. [ 3522.860383][T11213] bridge_slave_1: default FDB implementation only supports local addresses [ 3523.289468][T11233] netlink: 'syz.5.19441': attribute type 2 has an invalid length. [ 3523.330038][T11233] device 0 entered promiscuous mode [ 3523.855187][T11259] netlink: 'syz.3.19450': attribute type 2 has an invalid length. [ 3523.939328][T11259] device 1 entered promiscuous mode [ 3524.054444][T11266] netlink: 'syz.0.19452': attribute type 2 has an invalid length. [ 3524.168950][T11268] netlink: 'syz.2.19454': attribute type 10 has an invalid length. [ 3524.181694][T11266] netlink: 10 bytes leftover after parsing attributes in process `syz.0.19452'. [ 3524.280906][T11268] bridge0: port 3(ip6gretap0) entered disabled state [ 3524.294559][T11268] bridge0: port 2(bridge_slave_1) entered disabled state [ 3524.314836][T11268] bridge0: port 1(bridge_slave_0) entered disabled state [ 3525.012776][T11281] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.19457'. [ 3525.212271][T11268] bond0: (slave bridge0): Releasing backup interface [ 3525.346638][T11283] netlink: 'syz.0.19457': attribute type 20 has an invalid length. [ 3525.373395][T11289] netlink: 140 bytes leftover after parsing attributes in process `syz.5.19459'. [ 3525.414853][T11281] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.19457'. [ 3525.454950][T11288] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.19457'. [ 3526.134040][T11324] netlink: 'syz.3.19466': attribute type 4 has an invalid length. [ 3526.154405][T11324] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19466'. [ 3526.328444][T11328] netlink: 'syz.0.19467': attribute type 10 has an invalid length. [ 3526.329978][T11324] netlink: 'syz.3.19466': attribute type 29 has an invalid length. [ 3526.440144][T11324] netlink: 'syz.3.19466': attribute type 29 has an invalid length. [ 3526.465729][T11334] netlink: 'syz.3.19466': attribute type 29 has an invalid length. [ 3526.476862][T11338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19469'. [ 3526.560674][T11329] netlink: 'syz.3.19466': attribute type 29 has an invalid length. [ 3527.066877][T11356] netlink: 'syz.3.19474': attribute type 21 has an invalid length. [ 3529.738095][T11467] netlink: 16202 bytes leftover after parsing attributes in process `syz.2.19508'. [ 3530.286099][T11487] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19514'. [ 3530.945071][T11518] validate_nla: 7 callbacks suppressed [ 3530.945285][T11518] netlink: 'syz.5.19523': attribute type 3 has an invalid length. [ 3530.996341][T11518] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.19523'. [ 3532.021465][T11558] netlink: 'syz.2.19534': attribute type 2 has an invalid length. [ 3532.040178][T11558] netlink: 10 bytes leftover after parsing attributes in process `syz.2.19534'. [ 3532.185382][T11568] netlink: 152 bytes leftover after parsing attributes in process `syz.3.19537'. [ 3533.039375][T11599] netlink: 'syz.3.19546': attribute type 3 has an invalid length. [ 3533.053594][T11599] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19546'. [ 3533.089618][T11599] netlink: 'syz.3.19546': attribute type 3 has an invalid length. [ 3533.097682][T11599] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.19546'. [ 3533.438317][T11615] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.19550'. [ 3533.470145][T11615] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.19550'. [ 3533.487903][T11615] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.19550'. [ 3536.559416][T11651] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3536.572803][T11651] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3536.596087][T11651] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3536.890526][ T4328] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 3536.935751][T11662] netlink: 'syz.0.19565': attribute type 153 has an invalid length. [ 3537.005867][T11662] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.19565'. [ 3537.490725][T11687] netlink: 180 bytes leftover after parsing attributes in process `syz.2.19572'. [ 3537.649210][T11695] netlink: 'syz.3.19573': attribute type 1 has an invalid length. [ 3537.674328][T11695] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.19573'. [ 3537.789593][T11689] netlink: 'syz.3.19573': attribute type 2 has an invalid length. [ 3537.915538][T11709] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.19578'. [ 3537.949683][T11709] netlink: 'syz.5.19578': attribute type 1 has an invalid length. [ 3537.958375][T11709] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.19578'. [ 3538.464028][T11735] netlink: 'syz.0.19585': attribute type 29 has an invalid length. [ 3538.483371][T11735] netlink: 'syz.0.19585': attribute type 29 has an invalid length. [ 3538.608836][T11745] netlink: 'syz.1.19586': attribute type 1 has an invalid length. [ 3538.671808][T11747] netlink: 'syz.5.19588': attribute type 21 has an invalid length. [ 3538.680301][T11747] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.19588'. [ 3538.703576][T11745] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.19586'. [ 3538.799403][T11745] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 3538.862350][T11747] device bridge_slave_1 left promiscuous mode [ 3538.871536][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 3538.934564][ T4328] Bluetooth: hci4: command 0x2016 tx timeout [ 3538.955931][T11747] device bridge_slave_0 left promiscuous mode [ 3538.962473][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 3539.771566][T11772] netlink: 'syz.1.19595': attribute type 27 has an invalid length. [ 3539.792361][T11772] netlink: 'syz.1.19595': attribute type 4 has an invalid length. [ 3539.814314][T11772] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19595'. [ 3539.854616][T11777] tap0: tun_chr_ioctl cmd 1074025673 [ 3539.867593][T11777] tap0: tun_chr_ioctl cmd 1074025673 [ 3539.887828][T11776] tap0: tun_chr_ioctl cmd 2147767521 [ 3540.071406][ T4328] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3540.629336][T11810] netlink: 164 bytes leftover after parsing attributes in process `syz.0.19604'. [ 3542.053682][T11841] netlink: 152 bytes leftover after parsing attributes in process `syz.2.19613'. [ 3542.336778][T11861] netlink: 132 bytes leftover after parsing attributes in process `syz.5.19619'. [ 3542.471098][T11863] netlink: 763 bytes leftover after parsing attributes in process `syz.0.19621'. [ 3542.512846][T11863] validate_nla: 1 callbacks suppressed [ 3542.512862][T11863] netlink: 'syz.0.19621': attribute type 12 has an invalid length. [ 3542.555017][T11863] netlink: 'syz.0.19621': attribute type 15 has an invalid length. [ 3545.377929][T11879] netlink: 'syz.1.19624': attribute type 15 has an invalid length. [ 3545.409008][T11879] netlink: 'syz.1.19624': attribute type 7 has an invalid length. [ 3545.452408][T11876] netlink: 'syz.0.19622': attribute type 10 has an invalid length. [ 3545.579099][T11876] team0: Port device geneve1 added [ 3545.609420][T11885] netlink: 'syz.1.19624': attribute type 39 has an invalid length. [ 3548.830634][T11908] netlink: 'syz.3.19631': attribute type 13 has an invalid length. [ 3548.842843][T11908] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.19631'. [ 3549.734211][T15263] Bluetooth: hci5: command 0x0406 tx timeout [ 3549.758998][T11944] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19639'. [ 3550.513470][T11962] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.19646'. [ 3550.569382][T11966] netlink: 'syz.0.19647': attribute type 21 has an invalid length. [ 3550.599122][T11962] openvswitch: netlink: Message has 48126 unknown bytes. [ 3550.634558][T11966] IPv6: NLM_F_CREATE should be specified when creating new route [ 3550.713528][T11966] IPv6: Can't replace route, no match found [ 3550.785209][T11971] netlink: 'syz.2.19649': attribute type 3 has an invalid length. [ 3550.793470][T11962] netlink: 'syz.1.19646': attribute type 2 has an invalid length. [ 3550.814865][T11966] netlink: 'syz.0.19647': attribute type 1 has an invalid length. [ 3550.833946][T11966] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.19647'. [ 3550.875948][T11971] netlink: 'syz.2.19649': attribute type 1 has an invalid length. [ 3550.889607][T11962] netlink: 'syz.1.19646': attribute type 8 has an invalid length. [ 3550.929403][T11971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19649'. [ 3550.943399][T11962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19646'. [ 3550.986011][T11968] netlink: 14 bytes leftover after parsing attributes in process `syz.0.19647'. [ 3551.820668][T11986] netlink: 'syz.1.19652': attribute type 10 has an invalid length. [ 3555.579101][T12045] device syzkaller0 entered promiscuous mode [ 3557.971866][T12080] netlink: 'syz.0.19683': attribute type 2 has an invalid length. [ 3557.979951][T12080] netlink: 'syz.0.19683': attribute type 8 has an invalid length. [ 3557.988524][T12080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19683'. [ 3558.852862][T12134] netlink: 48 bytes leftover after parsing attributes in process `syz.5.19698'. [ 3558.861540][T12132] netlink: 'syz.0.19697': attribute type 3 has an invalid length. [ 3558.909060][T12132] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.19697'. [ 3559.054542][T12143] netlink: 'syz.2.19695': attribute type 39 has an invalid length. [ 3559.263816][T12150] netlink: 'syz.3.19701': attribute type 10 has an invalid length. [ 3559.445967][T12150] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 3560.432419][T12178] netlink: 'syz.1.19710': attribute type 21 has an invalid length. [ 3560.468839][T12178] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19710'. [ 3561.550466][T12209] netlink: 10 bytes leftover after parsing attributes in process `syz.0.19716'. [ 3561.714792][T12217] netlink: 'syz.3.19718': attribute type 21 has an invalid length. [ 3561.762629][T12217] IPv6: Can't replace route, no match found [ 3562.178773][T12245] netlink: 'syz.2.19719': attribute type 7 has an invalid length. [ 3562.309458][T12249] netlink: 'syz.3.19724': attribute type 7 has an invalid length. [ 3562.580245][T12260] netlink: 'syz.0.19728': attribute type 10 has an invalid length. [ 3562.604191][T12260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19728'. [ 3562.631610][T12260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19728'. [ 3563.316544][T12284] validate_nla: 1 callbacks suppressed [ 3563.316560][T12284] netlink: 'syz.2.19733': attribute type 15 has an invalid length. [ 3563.330823][T12284] netlink: 'syz.2.19733': attribute type 7 has an invalid length. [ 3564.296623][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19739'. [ 3565.085322][T12318] netlink: 'syz.3.19744': attribute type 7 has an invalid length. [ 3566.308724][T12356] netlink: 'syz.0.19753': attribute type 21 has an invalid length. [ 3566.324565][T12356] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19753'. [ 3566.354207][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19753'. [ 3566.799912][T12374] netlink: 'syz.3.19759': attribute type 2 has an invalid length. [ 3566.841187][T12374] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19759'. [ 3566.932659][T12377] netlink: 'syz.3.19759': attribute type 10 has an invalid length. [ 3567.115077][T12385] netlink: 'syz.1.19758': attribute type 10 has an invalid length. [ 3567.174916][T12385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.19758'. [ 3567.432791][T12390] netlink: 'syz.3.19763': attribute type 29 has an invalid length. [ 3567.523572][T12379] device syzkaller0 entered promiscuous mode [ 3567.632755][T12390] netlink: 'syz.3.19763': attribute type 29 has an invalid length. [ 3567.731081][T12402] netlink: 212940 bytes leftover after parsing attributes in process `syz.1.19764'. [ 3567.789090][T12396] netlink: 'syz.3.19763': attribute type 29 has an invalid length. [ 3568.132939][T12408] device syzkaller0 entered promiscuous mode [ 3572.419696][T12426] validate_nla: 2 callbacks suppressed [ 3572.419708][T12426] netlink: 'syz.3.19770': attribute type 21 has an invalid length. [ 3572.448888][T12431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19772'. [ 3573.005146][T12433] netlink: 'syz.3.19773': attribute type 19 has an invalid length. [ 3573.134233][T12447] netlink: 'syz.0.19775': attribute type 14 has an invalid length. [ 3573.157896][T12447] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.19775'. [ 3573.271883][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.278248][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.389066][T12460] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.19779'. [ 3573.482633][T12460] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.19779'. [ 3573.806582][T12472] netlink: 'syz.5.19782': attribute type 10 has an invalid length. [ 3574.926437][T12505] netlink: 'syz.0.19791': attribute type 10 has an invalid length. [ 3575.396932][T12505] team0: Device wg1 is of different type [ 3575.723924][T12519] can: request_module (can-proto-0) failed. [ 3578.518452][T12535] netlink: 156 bytes leftover after parsing attributes in process `syz.3.19799'. [ 3581.347330][T12570] netlink: 'syz.5.19806': attribute type 19 has an invalid length. [ 3581.355550][T12570] netlink: 172 bytes leftover after parsing attributes in process `syz.5.19806'. [ 3581.729432][T12622] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.19822'. [ 3582.870401][T12661] netlink: 'syz.1.19836': attribute type 2 has an invalid length. [ 3582.914344][T12661] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.19836'. [ 3582.984223][T12665] netlink: 'syz.1.19836': attribute type 2 has an invalid length. [ 3583.036713][T12665] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.19836'. [ 3583.247346][T12674] netlink: 'syz.0.19838': attribute type 15 has an invalid length. [ 3583.274569][T12667] netlink: 'syz.3.19837': attribute type 29 has an invalid length. [ 3583.281735][T12674] netlink: 'syz.0.19838': attribute type 7 has an invalid length. [ 3583.322650][T12667] netlink: 'syz.3.19837': attribute type 29 has an invalid length. [ 3583.359700][T12673] netlink: 'syz.3.19837': attribute type 29 has an invalid length. [ 3583.570074][T12682] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.19841'. [ 3584.536755][T12731] netlink: 'syz.3.19852': attribute type 10 has an invalid length. [ 3584.556777][T12731] team0: Device hsr_slave_0 failed to register rx_handler [ 3584.708345][T12747] netlink: 'syz.2.19856': attribute type 3 has an invalid length. [ 3584.741663][T12747] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.19856'. [ 3585.124857][T12755] device macvlan0 entered promiscuous mode [ 3585.216110][T12755] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 3585.289087][T12759] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19858'. [ 3585.392869][T12759] syz_tun: refused to change device tx_queue_len [ 3585.424234][T12759] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3586.532124][T12801] device lo entered promiscuous mode [ 3586.561518][T12801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3586.608497][T12806] validate_nla: 3 callbacks suppressed [ 3586.608532][T12806] netlink: 'syz.5.19875': attribute type 21 has an invalid length. [ 3586.633660][T12812] netlink: 'syz.1.19873': attribute type 29 has an invalid length. [ 3586.656738][T12806] netlink: 'syz.5.19875': attribute type 11 has an invalid length. [ 3586.675237][T12801] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.19872'. [ 3586.693047][T12806] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.19875'. [ 3586.711462][T12812] netlink: 'syz.1.19873': attribute type 29 has an invalid length. [ 3586.764505][T12804] netlink: 'syz.1.19873': attribute type 29 has an invalid length. [ 3587.691889][T12835] netlink: 'syz.2.19882': attribute type 4 has an invalid length. [ 3587.944026][T12847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19887'. [ 3587.984314][T12847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19887'. [ 3588.004843][T12847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19887'. [ 3588.069862][T12847] netlink: 60 bytes leftover after parsing attributes in process `syz.1.19887'. [ 3588.340605][T12883] netlink: 'syz.3.19893': attribute type 10 has an invalid length. [ 3588.354983][T12883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19893'. [ 3588.417710][T12883] device team0 entered promiscuous mode [ 3588.521037][T12883] device team_slave_0 entered promiscuous mode [ 3588.555887][T12883] device team_slave_1 entered promiscuous mode [ 3588.597884][T12883] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3588.672326][T12892] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19896'. [ 3588.694019][T12892] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3588.721025][T12892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3588.999632][T12903] netlink: 'syz.3.19900': attribute type 11 has an invalid length. [ 3589.007159][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19898'. [ 3589.024272][T12903] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19900'. [ 3589.049410][T12913] netlink: 'syz.3.19900': attribute type 10 has an invalid length. [ 3589.767956][T12902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3590.327099][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19909'. [ 3590.354913][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19909'. [ 3590.407128][T12942] netlink: 33 bytes leftover after parsing attributes in process `syz.2.19909'. [ 3590.459506][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19909'. [ 3590.507624][T12942] netlink: 33 bytes leftover after parsing attributes in process `syz.2.19909'. [ 3590.574513][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19909'. [ 3590.587092][T12942] netlink: 33 bytes leftover after parsing attributes in process `syz.2.19909'. [ 3593.792069][T12965] netlink: 'syz.5.19918': attribute type 10 has an invalid length. [ 3593.878058][T12974] netlink: 'syz.3.19917': attribute type 10 has an invalid length. [ 3593.888090][T12965] __nla_validate_parse: 3 callbacks suppressed [ 3593.888104][T12965] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19918'. [ 3593.928397][T12965] netlink: 'syz.5.19918': attribute type 10 has an invalid length. [ 3593.979459][T12965] netlink: 40 bytes leftover after parsing attributes in process `syz.5.19918'. [ 3594.219537][T12984] netlink: 164 bytes leftover after parsing attributes in process `syz.5.19920'. [ 3594.276642][T12984] tc_dump_action: action bad kind [ 3594.531470][T12957] delete_channel: no stack [ 3594.832437][T12996] netlink: 'syz.0.19923': attribute type 1 has an invalid length. [ 3594.855711][T12996] netlink: 144 bytes leftover after parsing attributes in process `syz.0.19923'. [ 3594.878014][T13000] netlink: 'syz.1.19926': attribute type 3 has an invalid length. [ 3594.903165][T13000] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.19926'. [ 3594.973520][T13004] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 3594.999948][T13004] dvmrp1: ignored: set checksum disabled [ 3595.125466][T13010] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19930'. [ 3595.701582][T13038] netlink: 'syz.5.19938': attribute type 2 has an invalid length. [ 3595.733486][T13038] netlink: 164 bytes leftover after parsing attributes in process `syz.5.19938'. [ 3596.058053][T13050] netlink: 'syz.2.19942': attribute type 21 has an invalid length. [ 3596.110994][T13050] netlink: 164 bytes leftover after parsing attributes in process `syz.2.19942'. [ 3596.184196][T13055] netlink: 'syz.1.19944': attribute type 1 has an invalid length. [ 3596.192887][T13055] netlink: 'syz.1.19944': attribute type 3 has an invalid length. [ 3596.203256][T13055] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19944'. [ 3596.616722][T13071] netlink: 'syz.1.19949': attribute type 1 has an invalid length. [ 3596.630200][T13071] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.19949'. [ 3598.409636][T13108] sctp: [Deprecated]: syz.1.19960 (pid 13108) Use of int in max_burst socket option deprecated. [ 3598.409636][T13108] Use struct sctp_assoc_value instead [ 3601.602762][T13133] __nla_validate_parse: 2 callbacks suppressed [ 3601.602779][T13133] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.19967'. [ 3601.676924][T13141] validate_nla: 2 callbacks suppressed [ 3601.676941][T13141] netlink: 'syz.5.19971': attribute type 1 has an invalid length. [ 3601.691161][T13141] netlink: 'syz.5.19971': attribute type 3 has an invalid length. [ 3601.699577][T13141] netlink: 132 bytes leftover after parsing attributes in process `syz.5.19971'. [ 3601.709112][T13139] netlink: 128 bytes leftover after parsing attributes in process `syz.1.19970'. [ 3601.726958][T13141] netlink: 'syz.5.19971': attribute type 21 has an invalid length. [ 3601.840717][T13144] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.19971'. [ 3601.869875][T13144] netlink: zone id is out of range [ 3601.876242][T13144] netlink: zone id is out of range [ 3601.914379][T13144] netlink: zone id is out of range [ 3601.951602][T13144] netlink: zone id is out of range [ 3601.974651][T13144] netlink: zone id is out of range [ 3601.979928][T13144] netlink: zone id is out of range [ 3602.021423][T13144] netlink: zone id is out of range [ 3602.071558][T13144] netlink: zone id is out of range [ 3602.107480][T13144] netlink: zone id is out of range [ 3602.112824][T13144] netlink: zone id is out of range [ 3602.835090][T13180] netlink: 'syz.0.19980': attribute type 13 has an invalid length. [ 3602.876567][T13180] netlink: 'syz.0.19980': attribute type 14 has an invalid length. [ 3602.894385][T13180] netlink: 156 bytes leftover after parsing attributes in process `syz.0.19980'. [ 3602.943620][T13191] netlink: 'syz.3.19983': attribute type 29 has an invalid length. [ 3602.976250][T13191] netlink: 'syz.3.19983': attribute type 29 has an invalid length. [ 3603.036650][T13197] netlink: 'syz.3.19983': attribute type 29 has an invalid length. [ 3603.063346][T13191] netlink: 'syz.3.19983': attribute type 29 has an invalid length. [ 3603.388962][T13206] device lo entered promiscuous mode [ 3603.431251][T13206] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3604.094910][T13228] netlink: 'syz.1.19994': attribute type 3 has an invalid length. [ 3604.135034][T13228] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.19994'. [ 3605.248519][T13258] IPv6: Can't replace route, no match found [ 3605.319003][T13259] IPv6: Can't replace route, no match found [ 3605.596093][T13267] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20005'. [ 3605.948515][T13276] netlink: 694 bytes leftover after parsing attributes in process `syz.3.20007'. [ 3607.047063][T13280] delete_channel: no stack [ 3608.201518][T13317] validate_nla: 2 callbacks suppressed [ 3608.201554][T13317] netlink: 'syz.3.20019': attribute type 4 has an invalid length. [ 3608.323781][T13317] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20019'. [ 3608.570953][T13334] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.20025'. [ 3609.122820][T13342] netlink: 'syz.3.20026': attribute type 10 has an invalid length. [ 3609.184034][T13342] device bridge_slave_1 entered promiscuous mode [ 3609.228500][T13342] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3609.911575][T13369] can: request_module (can-proto-0) failed. [ 3611.132225][T13417] netlink: 'syz.1.20047': attribute type 10 has an invalid length. [ 3613.384006][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 3613.475949][T13417] device bridge_slave_1 left promiscuous mode [ 3613.501882][T13417] bridge0: port 2(bridge_slave_1) entered disabled state [ 3613.539001][T13417] device bridge_slave_1 entered promiscuous mode [ 3613.568961][T13417] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3614.014371][T13438] netlink: 'syz.0.20053': attribute type 2 has an invalid length. [ 3614.053884][T13438] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.20053'. [ 3614.143720][T13444] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.20056'. [ 3614.199375][T13444] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 3614.308530][T13448] netlink: 'syz.2.20057': attribute type 21 has an invalid length. [ 3614.469118][T13454] netlink: 'syz.1.20058': attribute type 1 has an invalid length. [ 3614.910023][T13465] netlink: 'syz.3.20060': attribute type 22 has an invalid length. [ 3614.945223][T13465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20060'. [ 3615.349691][T13473] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.20061'. [ 3615.379712][T13476] netlink: 'syz.2.20064': attribute type 29 has an invalid length. [ 3615.440173][T13476] netlink: 'syz.2.20064': attribute type 29 has an invalid length. [ 3615.479505][T13477] netlink: 'syz.2.20064': attribute type 29 has an invalid length. [ 3615.491284][T13481] netlink: 'syz.2.20064': attribute type 29 has an invalid length. [ 3615.501615][T13476] netlink: 'syz.2.20064': attribute type 29 has an invalid length. [ 3615.719367][T13489] delete_channel: no stack [ 3615.725865][T13491] netlink: 'syz.5.20065': attribute type 10 has an invalid length. [ 3615.790141][T13491] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 3615.816150][T13493] sctp: [Deprecated]: syz.3.20067 (pid 13493) Use of int in max_burst socket option deprecated. [ 3615.816150][T13493] Use struct sctp_assoc_value instead [ 3615.901010][T13495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20068'. [ 3616.093002][T13499] netlink: 132 bytes leftover after parsing attributes in process `syz.2.20070'. [ 3616.410988][T13517] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.20076'. [ 3616.501462][T13519] device syz_tun entered promiscuous mode [ 3616.692424][T13519] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 3616.729956][T13521] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20077'. [ 3617.047630][T13528] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.20081'. [ 3617.939136][T13547] mac80211_hwsim hwsim195 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3621.136729][T13572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20089'. [ 3621.168699][T13572] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20089'. [ 3621.203531][T13564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20089'. [ 3621.296653][T13564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.20089'. [ 3623.812593][T13607] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3623.833567][T13607] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3623.843742][T13607] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3624.073605][T13619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20102'. [ 3624.194316][T13619] netlink: 164 bytes leftover after parsing attributes in process `syz.0.20102'. [ 3624.315017][T13625] netlink: 148 bytes leftover after parsing attributes in process `syz.2.20103'. [ 3624.337967][T13625] validate_nla: 5 callbacks suppressed [ 3624.337983][T13625] netlink: 'syz.2.20103': attribute type 21 has an invalid length. [ 3624.379227][T13629] netlink: 763 bytes leftover after parsing attributes in process `syz.5.20105'. [ 3624.394385][T13626] netlink: 'syz.1.20104': attribute type 10 has an invalid length. [ 3624.402334][T13626] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.20104'. [ 3624.561662][T13624] netlink: 'syz.1.20104': attribute type 10 has an invalid length. [ 3624.574400][T13624] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.20104'. [ 3624.587329][T13622] net_ratelimit: 16 callbacks suppressed [ 3624.587361][T13622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3624.698896][T13639] netlink: 'syz.3.20108': attribute type 27 has an invalid length. [ 3624.888092][T13639] bond0: (slave bond_slave_0): Releasing backup interface [ 3626.003255][T15263] Bluetooth: hci5: ISO packet for unknown connection handle 2622 [ 3626.357482][T13680] __nla_validate_parse: 3 callbacks suppressed [ 3626.357519][T13680] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.20120'. [ 3626.403457][T13684] netlink: 60 bytes leftover after parsing attributes in process `syz.5.20120'. [ 3626.477423][T13680] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 3626.752381][T13696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3626.759963][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 3626.767681][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 3626.775308][T13696] IPv6: NLM_F_CREATE should be set when creating new route [ 3626.809392][T13698] device sit0 entered promiscuous mode [ 3627.039459][T13708] netlink: 'syz.3.20127': attribute type 11 has an invalid length. [ 3627.087450][T13708] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20127'. [ 3627.133980][T13706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3627.183477][T13717] netlink: 156 bytes leftover after parsing attributes in process `syz.5.20130'. [ 3628.120581][T13743] netlink: 'syz.2.20138': attribute type 10 has an invalid length. [ 3628.139756][T13743] netlink: 40 bytes leftover after parsing attributes in process `syz.2.20138'. [ 3628.208867][T13743] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 3628.582439][T13761] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.20141'. [ 3628.753753][T13765] netlink: 'syz.0.20143': attribute type 21 has an invalid length. [ 3628.773424][T13764] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20142'. [ 3628.813173][T13764] netlink: 164 bytes leftover after parsing attributes in process `syz.2.20142'. [ 3629.681385][T13788] netlink: 'syz.5.20149': attribute type 10 has an invalid length. [ 3629.723035][ T4328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3629.733885][ T4328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3629.770136][ T4328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3629.778328][ T4328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3629.787505][T13788] device macvlan0 entered promiscuous mode [ 3629.798627][ T4328] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3629.808103][ T4328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3630.071164][T13788] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 3630.220952][ T4377] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3630.254512][T13793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20151'. [ 3630.263704][T13793] : renamed from caif0 [ 3630.288545][T13793] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 3630.379125][ T4377] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3630.494031][T13808] netlink: 'syz.2.20155': attribute type 21 has an invalid length. [ 3630.593720][ T4377] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3630.625301][T13818] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.20158'. [ 3630.758107][ T4377] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3631.367673][T13828] netlink: 'syz.5.20162': attribute type 29 has an invalid length. [ 3631.405566][T13824] C: renamed from team_slave_0 [ 3631.522552][T13824] netlink: 'syz.3.20159': attribute type 2 has an invalid length. [ 3631.530517][T13824] netlink: 128 bytes leftover after parsing attributes in process `syz.3.20159'. [ 3631.539741][T13824] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 3631.749278][T13840] netlink: 'syz.5.20164': attribute type 10 has an invalid length. [ 3631.895353][T15263] Bluetooth: hci2: command 0x0409 tx timeout [ 3631.913443][T13789] chnl_net:caif_netlink_parms(): no params data found [ 3631.924803][T13844] netlink: 60 bytes leftover after parsing attributes in process `syz.5.20164'. [ 3632.381123][T13846] netlink: 'syz.3.20166': attribute type 21 has an invalid length. [ 3632.397449][T13846] netlink: 'syz.3.20166': attribute type 6 has an invalid length. [ 3632.781494][T13856] netlink: 'syz.5.20169': attribute type 2 has an invalid length. [ 3632.790022][T13854] netlink: 'syz.0.20167': attribute type 11 has an invalid length. [ 3632.793036][T13856] netlink: 'syz.5.20169': attribute type 1 has an invalid length. [ 3632.846853][T13854] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.20167'. [ 3632.935561][T13854] netlink: 'syz.0.20167': attribute type 10 has an invalid length. [ 3632.949829][T13855] delete_channel: no stack [ 3633.024895][T13854] device wlan1 left promiscuous mode [ 3633.081293][T13854] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 3633.101767][ T4377] tipc: Left network mode [ 3633.110722][T13852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3633.257372][T13871] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20172'. [ 3633.314921][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 3633.322056][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 3633.345313][T13789] device bridge_slave_0 entered promiscuous mode [ 3633.606466][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 3633.613611][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 3633.654318][T13789] device bridge_slave_1 entered promiscuous mode [ 3633.911395][T13900] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 3633.912724][T13789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3633.946213][T13900] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 3633.974636][T15263] Bluetooth: hci2: command 0x041b tx timeout [ 3634.011678][T13900] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 3634.028631][T13789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3634.398463][T13789] team0: Port device team_slave_0 added [ 3634.481875][T13789] team0: Port device team_slave_1 added [ 3634.683211][T13789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3634.690666][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3634.723969][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3634.730307][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3634.742194][T13789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3634.780060][T13928] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.20183'. [ 3634.789588][T13928] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.20183'. [ 3634.800029][T13928] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.20183'. [ 3634.855222][T13789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3634.862194][T13789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3634.937979][T13789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3635.140529][T13936] validate_nla: 8 callbacks suppressed [ 3635.140544][T13936] netlink: 'syz.0.20185': attribute type 10 has an invalid length. [ 3635.275042][T13936] team0 (unregistering): Port device team_slave_0 removed [ 3635.336468][T13936] team0 (unregistering): Port device team_slave_1 removed [ 3635.389346][T13936] bridge0: port 1(bridge_slave_0) entered disabled state [ 3635.428591][T13936] team0 (unregistering): Port device bridge0 removed [ 3635.463023][T13936] team0 (unregistering): Port device geneve1 removed [ 3635.530499][T13789] device hsr_slave_0 entered promiscuous mode [ 3635.537500][T13789] device hsr_slave_1 entered promiscuous mode [ 3635.544709][T13789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3635.564194][T13789] Cannot create hsr debugfs directory [ 3636.054498][T15263] Bluetooth: hci2: command 0x040f tx timeout [ 3636.228220][T13974] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20192'. [ 3636.408637][T13978] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.20193'. [ 3637.111034][ T4377] device hsr_slave_0 left promiscuous mode [ 3637.129794][ T4377] device hsr_slave_1 left promiscuous mode [ 3637.146819][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3637.174283][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3637.201932][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3637.214282][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3637.222231][ T4377] bridge0: port 4(hsr0) entered disabled state [ 3637.237706][ T4377] device bond0 left promiscuous mode [ 3637.243491][ T4377] device bond_slave_1 left promiscuous mode [ 3637.250890][ T4377] device bridge_slave_1 left promiscuous mode [ 3637.260583][ T4377] bridge0: port 3(bond0) entered disabled state [ 3637.280146][ T4377] device bridge_slave_0 left promiscuous mode [ 3637.286893][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state [ 3637.303389][ T4377] device veth1_vlan left promiscuous mode [ 3637.547836][ T4377] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 3637.940591][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3638.018502][ T4377] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3638.134281][T15263] Bluetooth: hci2: command 0x0419 tx timeout [ 3638.225367][ T4377] bond0 (unregistering): Released all slaves [ 3638.320245][T14011] netlink: 'syz.2.20201': attribute type 10 has an invalid length. [ 3638.328471][T14011] netlink: 'syz.2.20201': attribute type 19 has an invalid length. [ 3638.338750][T14011] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.20201'. [ 3638.352428][T14009] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.20200'. [ 3638.601766][T13789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3638.639033][T13789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3638.666718][T13789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3638.700364][T13789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3638.942158][T13789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3638.980715][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3638.992747][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3639.008890][T13789] 8021q: adding VLAN 0 to HW filter on device team0 [ 3639.044315][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3639.061159][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3639.083431][T11738] bridge0: port 1(bridge_slave_0) entered blocking state [ 3639.090630][T11738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3639.106669][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3639.137382][T24649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3639.153980][T24649] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3639.170381][T24649] bridge0: port 2(bridge_slave_1) entered blocking state [ 3639.177586][T24649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3639.187127][T24649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3639.200879][T24658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3639.265032][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3639.302773][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3639.328777][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3639.780135][T14049] device syzkaller0 entered promiscuous mode [ 3639.831579][T14062] netlink: 763 bytes leftover after parsing attributes in process `syz.5.20211'. [ 3639.850194][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3639.860369][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3639.869847][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3639.894911][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3640.014049][T14083] sock: sock_timestamping_bind_phc: sock not bind to device [ 3642.639343][T14079] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.20215'. [ 3642.662090][T14097] netlink: 'syz.5.20220': attribute type 12 has an invalid length. [ 3642.680411][T14097] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.20220'. [ 3642.733777][T14098] netlink: 16170 bytes leftover after parsing attributes in process `syz.5.20220'. [ 3642.774552][T13789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3642.798984][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3642.846304][T11738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3643.464805][T14131] netlink: 132 bytes leftover after parsing attributes in process `syz.5.20227'. [ 3643.857496][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3643.871475][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3643.890833][T13789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3643.924992][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3643.939818][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3643.967457][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3643.983711][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3643.996125][T13789] device veth0_vlan entered promiscuous mode [ 3644.013421][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3644.022083][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3644.043855][T13789] device veth1_vlan entered promiscuous mode [ 3644.114282][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3644.128781][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3644.142538][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3644.160216][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3644.173644][T13789] device veth0_macvtap entered promiscuous mode [ 3644.197795][T13789] device veth1_macvtap entered promiscuous mode [ 3644.244268][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3644.272586][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.282700][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3644.302455][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.313347][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3644.323879][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.333818][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3644.344640][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.356159][T13789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3644.398433][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3644.454641][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3644.462820][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3644.482977][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3644.508556][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3644.536392][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.571380][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3644.582277][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.602598][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3644.623938][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.643683][T13789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3644.664718][T13789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3644.690567][T13789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3644.711781][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3644.774777][T29621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3644.803353][T13789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3644.833787][T13789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3644.866741][T13789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3644.904205][T13789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3644.944186][ T27] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 3644.952133][ T27] Not tainted syzkaller #0 [ 3644.990958][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3644.991938][T13789] ieee80211 phy214: Selected rate control algorithm 'minstrel_ht' [ 3645.047346][ T27] task:rcu_tasks_kthre state:D stack:28256 pid:12 ppid:2 flags:0x00004000 [ 3645.092266][ T27] Call Trace: [ 3645.113165][ T27] [ 3645.127631][ T27] __schedule+0x107f/0x4030 [ 3645.141826][T24658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3645.151526][T13789] ieee80211 phy215: Selected rate control algorithm 'minstrel_ht' [ 3645.154329][T24658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3645.173275][ T27] ? __sched_text_start+0x8/0x8 [ 3645.187599][ T27] schedule+0xb9/0x180 [ 3645.196228][ T27] schedule_timeout+0xbd/0x2d0 [ 3645.201044][ T27] ? console_conditional_schedule+0x40/0x40 [ 3645.225201][T24658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3645.233279][T24649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3645.234116][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3645.242082][T24658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3645.255485][T24649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3645.263077][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 3645.275827][ T27] ? lock_chain_count+0x20/0x20 [ 3645.285929][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 3645.291041][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 3645.314126][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 3645.319380][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 3645.334122][ T27] ? wait_for_completion+0x26f/0x590 [ 3645.339460][ T27] wait_for_completion+0x2c2/0x590 [ 3645.360751][ T27] ? io_schedule+0xd0/0xd0 [ 3645.365735][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3645.373046][ T27] ? debug_object_active_state+0x6b/0x380 [ 3645.384782][ T27] __synchronize_srcu+0x2b3/0x350 [ 3645.390093][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 3645.400906][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 3645.409121][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 3645.423107][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 3645.429144][ T27] ? synchronize_srcu+0x18f/0x1b0 [ 3645.434427][ T27] rcu_tasks_wait_gp+0x49f/0xac0 [ 3645.439622][ T27] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 3645.445037][ T27] ? lock_chain_count+0x20/0x20 [ 3645.450153][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 3645.456512][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 3645.461961][ T27] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 3645.467590][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 3645.473727][ T27] ? _raw_spin_unlock+0x40/0x40 [ 3645.479491][ T27] rcu_tasks_one_gp+0xd27/0xef0 [ 3645.488088][ T27] ? rcu_tasks_one_gp+0xe5/0xef0 [ 3645.493119][ T27] rcu_tasks_kthread+0x6e/0x90 [ 3645.500468][ T27] kthread+0x29d/0x330 [ 3645.508689][ T27] ? rcu_tasks_postgp+0x10/0x10 [ 3645.513936][ T27] ? kthread_blkcg+0xd0/0xd0 [ 3645.521567][ T27] ret_from_fork+0x1f/0x30 [ 3645.530190][ T27] [ 3645.570786][ T27] [ 3645.570786][ T27] Showing all locks held in the system: [ 3645.579490][ T27] 1 lock held by rcu_tasks_kthre/12: [ 3645.609834][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 3645.645726][ T27] 1 lock held by rcu_tasks_trace/13: [ 3645.651053][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 3645.675089][ T27] 1 lock held by khungtaskd/27: [ 3645.690909][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 3645.713393][ T27] 2 locks held by getty/4025: [ 3645.729331][ T27] #0: ffff88814d780098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 3645.768269][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 3645.811809][ T27] 3 locks held by kworker/1:6/4405: [ 3645.830947][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 3645.844166][ T27] #1: ffffc90002e87d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 3645.856640][ T27] #2: ffff88804f682240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x283/0x3320 [ 3645.867153][ T27] 5 locks held by kworker/u4:16/24657: [ 3645.872686][ T27] #0: ffff8880b8f3ad18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 3645.882747][ T27] #1: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x184/0x6d0 [ 3645.894187][ T27] #2: ffff888066c307a8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 3645.906240][ T27] #3: ffff88803aee8d40 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xa8/0x1100 [ 3645.917543][ T27] #4: ffff888066c31760 (&local->sta_mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0x580/0x1100 [ 3645.928880][ T27] 2 locks held by kworker/0:7/6802: [ 3645.934069][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 3645.944931][ T27] #1: ffffc900039bfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 3645.956862][ T27] 6 locks held by syz-executor/13789: [ 3645.962238][ T27] #0: ffff888020378460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 3645.971243][ T27] #1: ffff88803a24c488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 3645.983339][ T27] #2: ffffffff8cb56648 (cgroup_mutex){+.+.}-{3:3}, at: cgroup_kn_lock_live+0xe5/0x220 [ 3645.993478][ T27] #3: ffffffff8c9ca530 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x186/0x610 [ 3646.004192][ T27] #4: ffffffff8cb56830 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: cgroup_procs_write_start+0x19c/0x610 [ 3646.015573][ T27] #5: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 3646.026604][ T27] 1 lock held by syz.5.20229/14147: [ 3646.031884][ T27] #0: ffffffff8cb82e28 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 3646.041407][ T27] 2 locks held by syz.2.20235/14162: [ 3646.046963][ T27] #0: ffffffff8dd5de88 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 3646.059975][ T27] #1: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 3646.070929][ T27] [ 3646.073364][ T27] ============================================= [ 3646.073364][ T27] [ 3646.082569][ T27] NMI backtrace for cpu 1 [ 3646.086908][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 3646.094112][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3646.104164][ T27] Call Trace: [ 3646.107431][ T27] [ 3646.110356][ T27] dump_stack_lvl+0x188/0x24e [ 3646.115035][ T27] ? irq_work_queue+0xb8/0x140 [ 3646.119799][ T27] ? show_regs_print_info+0x12/0x12 [ 3646.124999][ T27] ? load_image+0x410/0x410 [ 3646.129489][ T27] ? vprintk_emit+0x59f/0x6a0 [ 3646.134162][ T27] ? printk_sprint+0x460/0x460 [ 3646.138920][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 3646.143852][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 3646.149993][ T27] ? _printk+0xda/0x130 [ 3646.154137][ T27] ? load_image+0x410/0x410 [ 3646.158632][ T27] ? load_image+0x410/0x410 [ 3646.163123][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 3646.169180][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 3646.175240][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 3646.181214][ T27] watchdog+0xf0e/0xf50 [ 3646.185365][ T27] ? watchdog+0x1ed/0xf50 [ 3646.189686][ T27] kthread+0x29d/0x330 [ 3646.193739][ T27] ? hungtask_pm_notify+0x40/0x40 [ 3646.198844][ T27] ? kthread_blkcg+0xd0/0xd0 [ 3646.203420][ T27] ret_from_fork+0x1f/0x30 [ 3646.207837][ T27] [ 3646.211527][ T27] Sending NMI from CPU 1 to CPUs 0: [ 3646.216775][ C0] NMI backtrace for cpu 0 [ 3646.216785][ C0] CPU: 0 PID: 14148 Comm: syz.5.20229 Not tainted syzkaller #0 [ 3646.216800][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3646.216809][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x2c/0x80 [ 3646.216854][ C0] Code: 04 24 65 48 8b 15 b4 3d 80 7e 65 8b 0d b5 3d 80 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 <8b> 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc [ 3646.216866][ C0] RSP: 0018:ffffc90004a4f758 EFLAGS: 00000246 [ 3646.216880][ C0] RAX: ffffffff8831f4cc RBX: 000000003000c085 RCX: 0000000000000000 [ 3646.216891][ C0] RDX: ffff88802f101e00 RSI: 00000000fffffe00 RDI: 00000000ffffffe0 [ 3646.216901][ C0] RBP: 00000000fffffe00 R08: ffff88802f101e00 R09: 0000000000000002 [ 3646.216911][ C0] R10: 00000000ffffff8d R11: 0000000000000002 R12: ffff88803369a4c0 [ 3646.216921][ C0] R13: dffffc0000000000 R14: ffff88803369a4c0 R15: 00000000fffffe00 [ 3646.216931][ C0] FS: 00007f154fae56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3646.216945][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3646.216955][ C0] CR2: 00007efe6ddf1000 CR3: 000000004d157000 CR4: 00000000003506f0 [ 3646.216968][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 3646.216978][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3646.216988][ C0] Call Trace: [ 3646.216993][ C0] [ 3646.216997][ C0] sk_stream_error+0x1c/0x120 [ 3646.217019][ C0] tcp_sendmsg_locked+0x33d4/0x39e0 [ 3646.217040][ C0] ? __might_sleep+0xd0/0xd0 [ 3646.217055][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3646.217078][ C0] ? mark_lock+0x94/0x320 [ 3646.217098][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 3646.217119][ C0] ? lock_chain_count+0x20/0x20 [ 3646.217140][ C0] ? tcp_set_state+0x520/0x520 [ 3646.217163][ C0] tcp_sendmsg+0x2b/0x40 [ 3646.217177][ C0] ? inet_send_prepare+0x250/0x250 [ 3646.217192][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 3646.217212][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 3646.217234][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 3646.217253][ C0] ? __import_iovec+0x306/0x510 [ 3646.217278][ C0] ? import_iovec+0x6f/0xa0 [ 3646.217298][ C0] ___sys_sendmsg+0x2a2/0x360 [ 3646.217321][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 3646.217350][ C0] ? ktime_get+0x7b/0x270 [ 3646.217377][ C0] __se_sys_sendmsg+0x1c3/0x2b0 [ 3646.217397][ C0] ? ct_nmi_exit+0x145/0x1c0 [ 3646.217413][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 3646.217440][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 3646.217456][ C0] do_syscall_64+0x4c/0xa0 [ 3646.217474][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3646.217493][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3646.217512][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3646.217530][ C0] RIP: 0033:0x7f154eb9e0d9 [ 3646.217542][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3646.217554][ C0] RSP: 002b:00007f154fae5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3646.217568][ C0] RAX: ffffffffffffffda RBX: 00007f154ee25fa0 RCX: 00007f154eb9e0d9 [ 3646.217579][ C0] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000007 [ 3646.217589][ C0] RBP: 00007f154ec35024 R08: 0000000000000000 R09: 0000000000000000 [ 3646.217597][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3646.217607][ C0] R13: 00007f154ee26038 R14: 00007f154ee25fa0 R15: 00007ffcbd217058 [ 3646.217624][ C0] [ 3646.278900][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 3646.278915][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 3646.278932][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 3646.278942][ T27] Call Trace: [ 3646.278948][ T27] [ 3646.278955][ T27] dump_stack_lvl+0x188/0x24e [ 3646.278991][ T27] ? memcpy+0x3c/0x60 [ 3646.279009][ T27] ? show_regs_print_info+0x12/0x12 [ 3646.279031][ T27] ? load_image+0x410/0x410 [ 3646.279057][ T27] panic+0x2d3/0x710 [ 3646.279074][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 3646.279099][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 3646.279115][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 3646.279143][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 3646.279166][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 3646.279189][ T27] watchdog+0xf4d/0xf50 [ 3646.279210][ T27] ? watchdog+0x1ed/0xf50 [ 3646.279233][ T27] kthread+0x29d/0x330 [ 3646.279248][ T27] ? hungtask_pm_notify+0x40/0x40 [ 3646.279266][ T27] ? kthread_blkcg+0xd0/0xd0 [ 3646.279283][ T27] ret_from_fork+0x1f/0x30 [ 3646.279313][ T27] [ 3646.286718][ T27] Kernel Offset: disabled [ 3646.678764][ T27] Rebooting in 86400 seconds..