last executing test programs: 11.058894542s ago: executing program 1 (id=742): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000711021000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYRES16], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee01}}}], 0x20, 0xd0}, 0x810) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x4) (async) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) (async) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000746111700000000000180000000000000000000000000000009500c0ada0155d8d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r5], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], 0x0, 0x34, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000680), &(0x7f0000000400), 0x8, 0x52, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x9, 0x0}, 0x8) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0xb, 0x42, 0x3a, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) (async) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=r8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x1208, 0xffffffffffffffff, 0x0, '\x00', 0x0, r13}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0)=r9, 0x4) 10.771129209s ago: executing program 1 (id=749): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xb, 0x6, 0x59, 0xfa, 0x0, 0x960, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000001480), 0x7}, 0x12000, 0x9, 0xb, 0x5, 0x6, 0x4, 0xc, 0x0, 0x18}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x7f, 0x10, 0x9, 0x8, 0x0, 0x10000, 0x10, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3974, 0x2, @perf_config_ext={0x5, 0x9}, 0x14, 0x2, 0x7, 0xba8b64d009fb795f, 0x24bf, 0x101, 0x1e, 0x0, 0x6, 0x0, 0x7}, r0, 0x9, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="000700004200913b4547e8492b58f854516df06d8203"], 0xfe33) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4066, 0xfe2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000001"], 0x0, 0x3e, 0x0, 0x1}, 0x28) r5 = socket$kcm(0xa, 0x5, 0x73) setsockopt$sock_attach_bpf(r5, 0x29, 0x2a, 0x0, 0xfcd8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xb, 0x6, 0x59, 0xfa, 0x0, 0x960, 0x80000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000001480), 0x7}, 0x12000, 0x9, 0xb, 0x5, 0x6, 0x4, 0xc, 0x0, 0x18}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000001400)={0x2, 0x80, 0x7f, 0x10, 0x9, 0x8, 0x0, 0x10000, 0x10, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3974, 0x2, @perf_config_ext={0x5, 0x9}, 0x14, 0x2, 0x7, 0xba8b64d009fb795f, 0x24bf, 0x101, 0x1e, 0x0, 0x6, 0x0, 0x7}, r0, 0x9, r1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x4, 0x7, 0x0, 0x1, 0xffffffff}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="000700004200913b4547e8492b58f854516df06d8203"], 0xfe33) (async) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4066, 0xfe2}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071002700000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000001"], 0x0, 0x3e, 0x0, 0x1}, 0x28) (async) socket$kcm(0xa, 0x5, 0x73) (async) setsockopt$sock_attach_bpf(r5, 0x29, 0x2a, 0x0, 0xfcd8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) 10.089814546s ago: executing program 3 (id=750): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000010630182000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6579, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100, 0xb}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b9040220005c06007c09e8fe55a10a0015400100142603600e1208000b000a000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 9.54094352s ago: executing program 1 (id=754): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb01001800000000000000b5000000b500000009000000100000000100000f0100000005000000000000000c000000d7f10e000002000085a40000000600000000000000080000000200000003000000000200000720000000000007000000000000000400004002000000010000000600000000000007000000000e00000000000008035bc1ba0a0000006b20100242166dc20000000a0000000000000000000000030000000001000000030000000a000000030000000000000903000000010000000000000802000000000000005f615f2e5f5f6100"], &(0x7f0000001180)=""/151, 0xd9, 0x97, 0x0, 0x3b, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001480)={r0, 0x20, &(0x7f0000001440)={&(0x7f0000001280)=""/230, 0xe6, 0x0, &(0x7f0000001380)=""/159, 0x9f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0xffffffffffffff54, 0x30, 0x1, 0x5, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa01d, 0x2, @perf_config_ext={0x294, 0x3fff8000}, 0x100108, 0x32, 0x43a1bd76, 0x2, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x37, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87dc, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x800000, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x40}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000029000000", @ANYRESHEX=0x0], 0x18}, 0x8080) sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socketpair(0x1, 0x801, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x104090, 0x0, 0x4000003, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d08020100000040f0ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) 9.241869048s ago: executing program 1 (id=755): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x26, 0x0, 0x5d31, 0x10000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x737}, 0x2800, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x3) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f00008000007b00000001"], 0x50) (async) r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, r0, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r2}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000093ab3121d65aa0b9000000000000000000000000000000009feb0000928cfa5f7f91ac4892bca8c4bfac248187c2ab24063074ed91d77a0ef0da56af3e9d86bb7cc35f6ec8c5f2666b2bd70528ad5d4f48daf20bc9eea6fd3ef2c67c7e98c7d9d071ede01b39909d1cefd93f2e0a15d43e22411dd28da7bd7fa6ecd2aada42789f1ee0efca7e0c03ddbec8"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000002300000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x10, 0x0, 0x10) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = syz_clone(0xa2800000, &(0x7f0000000380)="6f1051c68f7c24fa91aafa12fc9fa44203f4e20fac33501ab6abe2b8b45dc66dac01b748454ac6c731c493338ccfdb672d16d0a3c3d0a6f01953d981ad18a9c3ef9c057d2be506feb0304d3d0c8fc867ac537c9b73b6d904ef01a2447ead4282deba410585b989baa304c2d66ff34b292fc3f93c16cc7d988a61cfb0bfbb449dfbaa376f10a909fcd1e3a86ffdaf5576d53757d58821e72987325c23999a567bb3a0fa50a50fa409b6c7734497139f18932370b460c3edae881d3089b8e4173988f09ca524662453f18acbb054186d9ec8755ef73530fcd4881286e56fbde7", 0xdf, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000500)="e98246f476224f8113757692122a6a72be8f900d8f503c6edc5acec5f1ef6d9e6b9a5342cb0b17c52aa4527a93ee0089622b2f8c77154e38600568d0b6bc9b14e56f4e55befa7252b02d66627f02293c7b3f6e0f2da5af5fedc6e9423e8ef67a314ab44af05ac4b46339383c7a030a2b9ff22121d9a9d6a7f6dcd0535b58537347bf4bd9d7b0083a63488c5ef9e274f1912df893155d00a99deaad") (async) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x11cd09, 0x4, 0xffffffff, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r8, &(0x7f0000000740)=ANY=[@ANYBLOB="00696f207a61d14f5735b053815ac759fd6e0f484e2d56672b614a4bc64fd5db831590b17601542a3a2a862070340442feee9bfa8aea00"/68], 0x4) (async) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x2, 0x3, 0x48, 0x3, 0x0, 0x6, 0x8b, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3, 0x3465}, 0x21281, 0x5c0695fe, 0x1, 0x0, 0x401, 0x9, 0x6, 0x0, 0x9, 0x0, 0x1}, r5, 0xf, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) write$cgroup_devices(r10, 0x0, 0x9) 6.664162603s ago: executing program 0 (id=756): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x7, 0xa) sendmsg$kcm(r1, 0x0, 0x4044454) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000020000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000540)=@isdn={0x22, 0x1, 0x9, 0x1, 0xa}, 0x80, 0x0}, 0x20000800) recvmsg$unix(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f00000001c0)=0xe) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb011e872dae7e8cfeb1fa1b0068001c00000007000700000000000000000a0300000044942d050040000010000f0100000084002e2e2e5f6100"], &(0x7f00000000c0)=""/3, 0x3b, 0x3, 0x1}, 0x28) close(r8) 6.37136244s ago: executing program 1 (id=757): r0 = perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xf, 0x7, 0x3, 0x8, 0x0, 0xec1, 0x800, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x9}, 0x4028, 0x0, 0x1, 0x7, 0x40, 0x762c, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xe, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x11410d, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1, 0x0, 0xc, 0x0, 0x20000000000000}, 0x0, 0x1, r0, 0xc) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x2, 0x0, 0xa, 0x6, 0x0, 0x1000, 0x21, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f00000002c0), 0x2}, 0x82, 0x6, 0x7, 0x6, 0x2, 0xf, 0x9b7f, 0x0, 0x6, 0x0, 0x425e}, 0x0, 0xffffffffffffffff, r1, 0xa) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0xa, 0x8, 0x40, 0x42, 0x1}, 0x50) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) recvmsg$kcm(r4, 0x0, 0x20000000) (async) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x201100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) (async) socket$kcm(0x10, 0x2, 0x10) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x1ff, 0x10}, 0xc) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) (async, rerun: 64) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) (rerun: 64) 6.249921183s ago: executing program 2 (id=758): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000"], 0x0, 0x80}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000380)={0x0, 0xffffffffffffff53, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x394b, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000ac0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x1, 0xa3}, {0x4, 0x10}, {0xd, 0x6}, {0x8, 0x2}]}]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000b40)=""/82, 0x49, 0x52, 0x0, 0x100, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0xc, 0x3, 0xb, 0xc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x8000, 0x2e, &(0x7f0000000640)=""/46, 0x41100, 0x40, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x10, 0xfffffffc, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[r0, r0], &(0x7f0000000cc0)=[{0x2, 0x1, 0x3, 0xb}], 0x10, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.249332173s ago: executing program 3 (id=759): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r0}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x24, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb3}}, @alu={0x7, 0x1, 0x7, 0x5, 0x2, 0x10}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4003}}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}]}, &(0x7f0000000440)='syzkaller\x00', 0x80000001, 0x81, &(0x7f0000000900)=""/129, 0x41000, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x5, 0xf, 0xffffed95, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a40)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000a80)=[{0x5, 0x4, 0x4, 0x6}, {0x0, 0x1, 0x3, 0x9}, {0x3, 0x2, 0x2, 0xc}, {0x4, 0x5, 0x7, 0x9}, {0x5, 0x4, 0xf0cb, 0x5}, {0x2, 0x5, 0x5, 0x1}], 0x10, 0x6}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4000000, '\x00', r2, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x4, 0x0, r4, 0x5, '\x00', r2, 0xffffffffffffffff, 0x2, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r3, 0x0, 0xfd, 0xdd, &(0x7f0000000bc0)="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", &(0x7f0000000cc0)=""/221, 0xfffffffc, 0x0, 0xe7, 0x1000, &(0x7f0000000dc0)="039676eb9c7162497da8023b404361af6d5aa92b5f2ad6ad9e0149ebca6df843d356d90b4be4d8ce22be4ab823ee7a9615d5ccb6004953f1cba3de121c045119d0832e6519c77c4ac64983197bffee5b2832aab6e38b7f49c8dacbf27de3a5f308785a4fb65b27259d8c601a6038e908a8a50ea0f160a2106feba81846c596a56415402b9ee66b319693d04b5676c36798457a69b2b31a4ae365dbacc9f64f6c40fc9e8395dc5849a2818b967c7c2e8fc320e1cdb7397831bbe5f4ff60e903f0478570a75a7467f7e6fda9e52fbd4abbac10bd5d8c9d981b0a324cba5a6e3a5b487a745d87062a", &(0x7f0000000ec0)="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", 0x0, 0x0, 0x9}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="20f391510f5f51831914941137a1daa31dc9963b262cc65c17c01c9683fe61b0094e5bca02223aa5e4ca19e4b25d4b7565", 0x31}, {&(0x7f0000000080)="38cab3f040c3b96049625a2f508b7a85514e65e76bbd2eaf84eae021ff11b0a30b2c4cee4869e69af186b464f59c3845419a481208eb0ca717a01b48e314def61a81f4c6fd7e03d793d2d18d4cfbd3dce89ba3d78b954caa588c8efe0962a47cd580019bab12daa1aaa0eab7e70be987e801be75df75b5a6ab35036fb96e29aee7e61a41", 0x84}], 0x2, &(0x7f0000000580)=[@ip_retopts={{0x78, 0x0, 0x7, {[@end, @ssrr={0x89, 0x23, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @broadcast]}, @cipso={0x86, 0x38, 0x3, [{0x0, 0x11, "2eade15f3c4218ad5e55ec727ecec8"}, {0x5, 0x3, "b6"}, {0x6, 0xe, "907dbfbf79f5c86c807b1a76"}, {0x5, 0x10, "a787b6ecc44c8eca04a14ca77d94"}]}, @noop, @generic={0x7, 0x7, "310f97d30b"}, @ra={0x94, 0x4}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0x34, 0xe9, 0x1, 0x9, [{@broadcast, 0x4}, {@local, 0x15}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10}, {@multicast1}, {@empty, 0x800}, {@remote}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@cipso={0x86, 0x31, 0x0, [{0x7, 0x8, "4b1401f14e45"}, {0x7, 0x10, "abdd23618d19e628702bccc08bd8"}, {0x5, 0xd, "b22abb3aef58583bf89e48"}, {0x7, 0x6, "87241047"}]}, @ssrr={0x89, 0x1b, 0xc, [@empty, @remote, @broadcast, @empty, @multicast1, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x108, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x32, 0x1, 0x1, [{@private=0xa010102, 0xfffffff2}, {@local, 0x80000000}, {@local, 0xc0000000}, {@multicast1, 0x5}, {@loopback, 0xf}, {@broadcast, 0x6}, {@multicast1, 0xff}, {@loopback, 0x8001}]}, @cipso={0x86, 0x6c, 0x3, [{0x6, 0xb, "110dde8a2b31f42095"}, {0x6, 0xe, "4d43bcb8cf92e9a29e23b413"}, {0x4, 0x11, "810ad4775899683a3d3cd70016a626"}, {0x7, 0x10, "9350805901773ab43fc7dd6299e7"}, {0x5, 0x3, "8c"}, {0x0, 0x6, "12eb771c"}, {0x4, 0xb, "9f1f89b11a5a917fd3"}, {0x2, 0x7, "68d77b8e6e"}, {0x5, 0x11, "b5a9d7ac760ba49d01c3ec8dcf3f2a"}]}, @end, @noop, @timestamp_prespec={0x44, 0x3c, 0xfe, 0x3, 0x9, [{@loopback, 0x4}, {@loopback, 0x8}, {@private=0xa010101, 0xcef}, {@multicast2, 0xc}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80d}, {@local}]}, @timestamp={0x44, 0x8, 0x61, 0x0, 0x0, [0x3]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0x49, [@broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1d}, @remote, @multicast1]}, @end, @cipso={0x86, 0xe, 0x3, [{0x0, 0x8, "1873228a3d9e"}]}, @timestamp_prespec={0x44, 0x1c, 0x9a, 0x3, 0xc, [{@rand_addr=0x64010100, 0x80000000}, {@broadcast, 0x617}, {@remote, 0x7}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fff}}], 0x308}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) 6.233718113s ago: executing program 0 (id=760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000004000002cf500000000000000000000000000e3000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003b40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b7fa72543b8c86d513c69b3e6e13991f7fd04f27bbb0f0127a3b3aa4ae54d971d281fd7db596f4ab455a9a73203eedc995b47b6d0a467500d7e42e3aa09494365fe06ef3557935eab9bb6e44cca5dbbdd28337a0999f1eb1ed1ef584aab9d7aa048006e200cb9cdedb22bf2d5e61f788f687d7938384c7938351b57ad886b59b1c748acde8c687e29222645a04926bf84ead3b9c2d4a5b2e377b063c7d1fe56696"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1e000000090000040500000000fcffff30560110", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000000000000600"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x1c, &(0x7f0000000340)=ANY=[@ANYRES8=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000020000008500006fa6f8940e53f12cf1ed0084000000b70000000000000095000000000000000908aa1e9c05d94cb0a88e7a0c1381f310"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="6eaa000000000000711095000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9) (async) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r8, 0xffffffffffffffff}, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000004c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0xee, 0x8, 0x8, &(0x7f0000002a00)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000000000000000800100730109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000", @ANYRES32=r11, @ANYBLOB="24d500"/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB="0100000002000000020000000700"/28], 0x50) (async, rerun: 64) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async, rerun: 64) setsockopt$sock_attach_bpf(r10, 0x6, 0xd, &(0x7f00000000c0), 0x4) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r13) (async) socket$kcm(0x10, 0x2, 0x0) (async) r14 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r14}) 5.752845526s ago: executing program 2 (id=761): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0xb, [@func={0xc, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x9, 0x5}, {0xd, 0x5}, {0x8, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8000}}, @datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x2, 0x56bd, 0x9250}, {0x2, 0x3, 0x1fe}, {0x1, 0x10, 0x3}, {0x3, 0x1ff, 0x6}, {0x1, 0x217, 0x4}, {0x3, 0x84, 0x401}, {0x3, 0x1, 0x7}], "e8"}, @fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7f}}]}, {0x0, [0x61, 0x2e, 0x61, 0x61, 0x2e, 0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f0000001480)=""/145, 0xfb, 0x91, 0x1, 0x7, 0x10000}, 0x28) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001840)={r0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0a00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="000000400000000000000000000200f38e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000640), &(0x7f00000002c0), 0x700}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x7, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000eaa5e49e00b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7f, 0x1000, &(0x7f0000000080)=""/4096, 0x41000, 0x40, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000001580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x6, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r5, r6, r7], 0x0, 0x10, 0x400}, 0x94) 5.533913381s ago: executing program 0 (id=762): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x19c565, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0xfffffffffffffffc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000feffffff00000000020004008500000053000000b7080000000000007b8af8ff00000000b7080000baa42c567b8af0ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000500010000000000", @ANYRES32, @ANYBLOB="ffffff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00 \x00'/19], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080), 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f000000000000010000000000000000006d482f31000014000000000000000000000002000000000000000000000014000000000000000000000002000000000000000000000011000000000000000000000001000000000000000000000011000000000000ff01000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1281857a0041290"], 0xf}, 0x0) 5.425525984s ago: executing program 3 (id=763): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7b, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x5, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x20, 0x0, 0x5, 0x550e4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x42, 0x0, 0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffdffffffffd, 0xffffffffffffffff, 0xb) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x8, 0x0, 0x0, 0x0, 0x4, 0x80001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r3, 0x0, 0x3, &(0x7f0000000280)='\xe2\xfch'}, 0x30) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xe}, 0x803, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) 5.187984269s ago: executing program 2 (id=764): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000e40)={'geneve0\x00', @random="ae1dc50cc74a"}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000"], 0xfdef) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) r3 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r3, 0x0, 0xfefb) r4 = socket$kcm(0x21, 0x2, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0)) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf7b2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 1.709865087s ago: executing program 1 (id=765): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000900)="5490", 0x2}], 0x1}, 0x4048841) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYRES32], 0x20) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff94f90429fc60010f5ddf", 0x6a}], 0x1}, 0x40014) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c2bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0x87da}, 0x0, 0x0, 0xffffffffffffffff, 0x5) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="2e00000011008188040f80ec59acbc0413a1f848090000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x3, 0x10) close(r9) socket$kcm(0x10, 0x2, 0x0) 1.704917747s ago: executing program 3 (id=766): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@lli}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 1.650896198s ago: executing program 0 (id=767): socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0cd7ecc1c31b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x4c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.650410309s ago: executing program 2 (id=768): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x7, 0xa) sendmsg$kcm(r1, 0x0, 0x4044454) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf6100ffffffc1000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, 0x0, 0xfc00) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000540)=@isdn={0x22, 0x1, 0x9, 0x1, 0xa}, 0x80, 0x0}, 0x20000800) recvmsg$unix(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f00000001c0)=0xe) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) socket$kcm(0x29, 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb011e872dae7e8cfeb1fa1b0068001c00000007000700000000000000000a0300000044942d050040000010000f0100000084002e2e2e5f6100"], &(0x7f00000000c0)=""/3, 0x3b, 0x3, 0x1}, 0x28) close(r8) 1.299944067s ago: executing program 0 (id=769): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c00000000000000000000010400000020000000050000000100000404000000"], 0x0, 0x80}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000063010c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000380)={0x0, 0xffffffffffffff53, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x8}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x394b, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000ac0)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r1, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x5, [@enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x1, 0xa3}, {0x4, 0x10}, {0xd, 0x6}, {0x8, 0x2}]}]}, {0x0, [0x2e, 0x0, 0x30]}}, &(0x7f0000000b40)=""/82, 0x49, 0x52, 0x0, 0x100, 0x10000, @value=r0}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d00)={0x6, 0x19, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x8, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0xc, 0x3, 0xb, 0xc, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xb9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x8000, 0x2e, &(0x7f0000000640)=""/46, 0x41100, 0x40, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000c00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000c40)={0x4, 0x10, 0xfffffffc, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000c80)=[r0, r0], &(0x7f0000000cc0)=[{0x2, 0x1, 0x3, 0xb}], 0x10, 0x6}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.1895995s ago: executing program 3 (id=770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) (async, rerun: 64) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]}) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xad, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xae, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYRES8]) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780), &(0x7f00000007c0)=[0x0], 0x0, 0x4d, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000300000000000000000000000000007b7b1af8ff00000000bf0000000007010000f8ffffffb70200000800000003000000000000008500000065970eb3c5f5836339baaa240f77fb06000000953d97d82630cab56c9634"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580)={0xffffffffffffffff}, 0x4) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r9, &(0x7f00000000c0), &(0x7f0000000100)=""/180, 0x4}, 0x20) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async, rerun: 64) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r12}, 0x94) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0xc, 0x1, 0x58, 0xba208, 0xffffffffffffffff, 0x46, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3, 0xc, @value, @void, @value=r1}, 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x400, 0xf, 0x0, 0x1, 0x7160b73}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff8850000002d00000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0xffff0000, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0x28, &(0x7f00000002c0)=@raw=[@ringbuf_query, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x4}, @tail_call, @jmp={0x5, 0x1, 0x0, 0x4, 0xa, 0xc, 0xffffffffffffffff}, @map_fd={0x18, 0x1}], &(0x7f0000000400)='syzkaller\x00', 0x80000000, 0x6a, &(0x7f0000000440)=""/106, 0x41000, 0x0, '\x00', r3, @fallback=0x8, r4, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x9, 0x3ff, 0x4}, 0x10, r6, r7, 0x6, &(0x7f00000006c0)=[r9, r10, r13, 0xffffffffffffffff, 0x1, r14, r15], &(0x7f0000000700)=[{0x5, 0x2, 0x6, 0x5}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x5, 0xe, 0xb}, {0x0, 0x3, 0xc, 0x7}, {0x0, 0x5, 0x3, 0x8}, {0x1, 0x1, 0x4, 0x7}], 0x10, 0x7}, 0x94) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r16 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r16, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r16, &(0x7f0000000280), 0x9) 891.069678ms ago: executing program 2 (id=771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000900bb04000000000000008aaaaaaa02f5ff00aaaa8aaaaabb0177c200000400ffffffffffaaaa050000003d05b5ead8bbbb12f36e7a5f6c2003c43f3de5f1aade594a75805baa00"]) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 35.124499ms ago: executing program 3 (id=772): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000001140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd5, 0xd5, 0xb, [@func={0xc, 0x0, 0x0, 0xc, 0x3}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x3}, {0x9, 0x5}, {0xd, 0x5}, {0x8, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x8000}}, @datasec={0x3, 0x7, 0x0, 0xf, 0x1, [{0x2, 0x56bd, 0x9250}, {0x2, 0x3, 0x1fe}, {0x1, 0x10, 0x3}, {0x3, 0x1ff, 0x6}, {0x1, 0x217, 0x4}, {0x3, 0x84, 0x401}, {0x3, 0x1, 0x7}], "e8"}, @fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7f}}]}, {0x0, [0x61, 0x2e, 0x61, 0x61, 0x2e, 0x0, 0x2e, 0x61, 0x5f]}}, &(0x7f0000001480)=""/145, 0xfb, 0x91, 0x1, 0x7, 0x10000}, 0x28) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000001840)={r0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0a00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="000000400000000000000000000200f38e000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000002d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000640), &(0x7f00000002c0), 0x700}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x7, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000eaa5e49e00b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7f, 0x1000, &(0x7f0000000080)=""/4096, 0x41000, 0x40, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000001580)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000015c0)={0x4, 0x6, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001680)=[r5, r6, r7], 0x0, 0x10, 0x400}, 0x94) 30.048179ms ago: executing program 2 (id=780): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000004cb300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000004cb300", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r1, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0xbf, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r6, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0xe4, &(0x7f0000000900)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xc9, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r6}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r10 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x22, &(0x7f0000000300)=@raw=[@generic={0x80, 0x3, 0x5, 0x7, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x5, 0x0, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x59, &(0x7f0000000500)=""/89, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x2, 0x2}, 0x10, r7, r1, 0x2, &(0x7f0000000c00)=[r2, r2, r2, r8, r2, r2], &(0x7f0000000c40)=[{0x2, 0x1, 0xf}, {0x2, 0x2, 0xb, 0x5}], 0x10, 0xf8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x22, &(0x7f0000000300)=@raw=[@generic={0x80, 0x3, 0x5, 0x7, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x5, 0x0, 0x8, 0xfffffffffffffff4, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x59, &(0x7f0000000500)=""/89, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x5, 0x5, 0x2, 0x2}, 0x10, r7, r1, 0x2, &(0x7f0000000c00)=[r2, r2, r2, r8, r2, r2], &(0x7f0000000c40)=[{0x2, 0x1, 0xf}, {0x2, 0x2, 0xb, 0x5}], 0x10, 0xf8}, 0x94) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r13}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) 0s ago: executing program 0 (id=773): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x9, 0x4}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x29e0}, 0x1051ec, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x401}, 0x117e97, 0xc78, 0x10, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async, rerun: 64) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x2}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000780)={&(0x7f00000001c0), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/239, 0xef}, {&(0x7f0000000500)=""/181, 0xb5}], 0x2, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x10123) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 47.344430][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.362757][ T5434] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. syzkaller login: [ 67.996076][ T5763] cgroup: Unknown subsys name 'net' [ 68.126344][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.531136][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.950605][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.958812][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.980256][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.986235][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.994670][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.008282][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.017545][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.025402][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.029964][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.034620][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.047898][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.052389][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.055748][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.070475][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.071100][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.078215][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.086125][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.091517][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.099537][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.108472][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.112476][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.119314][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.129684][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.141164][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.526933][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 71.573896][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.580796][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.653188][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 71.681827][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.691884][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.712242][ T5774] bridge_slave_0: entered allmulticast mode [ 71.724987][ T5774] bridge_slave_0: entered promiscuous mode [ 71.735232][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.745120][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.752648][ T5774] bridge_slave_1: entered allmulticast mode [ 71.760207][ T5774] bridge_slave_1: entered promiscuous mode [ 71.794755][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 71.828447][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.848659][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.864114][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 71.924472][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.931766][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.938901][ T5777] bridge_slave_0: entered allmulticast mode [ 71.946362][ T5777] bridge_slave_0: entered promiscuous mode [ 71.955058][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.962562][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.970306][ T5777] bridge_slave_1: entered allmulticast mode [ 71.977019][ T5777] bridge_slave_1: entered promiscuous mode [ 72.005339][ T5774] team0: Port device team_slave_0 added [ 72.047904][ T5774] team0: Port device team_slave_1 added [ 72.080874][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.103328][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.110366][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.136369][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.161397][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.182853][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.190036][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.216488][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.227814][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.237514][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.244781][ T5775] bridge_slave_0: entered allmulticast mode [ 72.252252][ T5775] bridge_slave_0: entered promiscuous mode [ 72.281686][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.288845][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.296671][ T5775] bridge_slave_1: entered allmulticast mode [ 72.303498][ T5775] bridge_slave_1: entered promiscuous mode [ 72.337008][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.350789][ T5777] team0: Port device team_slave_0 added [ 72.358864][ T5777] team0: Port device team_slave_1 added [ 72.377807][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.397004][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.404324][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.414149][ T5776] bridge_slave_0: entered allmulticast mode [ 72.421061][ T5776] bridge_slave_0: entered promiscuous mode [ 72.455591][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.463025][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.470493][ T5776] bridge_slave_1: entered allmulticast mode [ 72.477180][ T5776] bridge_slave_1: entered promiscuous mode [ 72.509154][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.516699][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.543042][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.565492][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.572776][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.598840][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.620071][ T5775] team0: Port device team_slave_0 added [ 72.632915][ T5774] hsr_slave_0: entered promiscuous mode [ 72.639248][ T5774] hsr_slave_1: entered promiscuous mode [ 72.663825][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.674798][ T5775] team0: Port device team_slave_1 added [ 72.701623][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.708617][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.734985][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.748995][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.782520][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.790124][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.816211][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.847478][ T5776] team0: Port device team_slave_0 added [ 72.895147][ T5776] team0: Port device team_slave_1 added [ 72.927308][ T5777] hsr_slave_0: entered promiscuous mode [ 72.935837][ T5777] hsr_slave_1: entered promiscuous mode [ 72.942581][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.950528][ T5777] Cannot create hsr debugfs directory [ 72.957691][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.964925][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.991508][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.044877][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.051907][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.078096][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.143238][ T5775] hsr_slave_0: entered promiscuous mode [ 73.150371][ T5775] hsr_slave_1: entered promiscuous mode [ 73.156416][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.165745][ T5775] Cannot create hsr debugfs directory [ 73.169765][ T5787] Bluetooth: hci2: command tx timeout [ 73.176785][ T5787] Bluetooth: hci1: command tx timeout [ 73.239565][ T51] Bluetooth: hci0: command tx timeout [ 73.245347][ T5787] Bluetooth: hci3: command tx timeout [ 73.279022][ T5776] hsr_slave_0: entered promiscuous mode [ 73.285674][ T5776] hsr_slave_1: entered promiscuous mode [ 73.291832][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.299614][ T5776] Cannot create hsr debugfs directory [ 73.482882][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.511252][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.521138][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.537089][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.650277][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.667209][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.688593][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.716824][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.793002][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.819864][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.829115][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.858528][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.896997][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.909810][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.928627][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.938721][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.960343][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.001480][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.030008][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.037349][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.068021][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.075298][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.175044][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.223578][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.268713][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.287673][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.315372][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.348422][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.355620][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.377130][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.384362][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.402782][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.410013][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.437139][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.455323][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.462539][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.507704][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.514929][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.532270][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.539450][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.665275][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.799048][ T5774] veth0_vlan: entered promiscuous mode [ 74.838996][ T5774] veth1_vlan: entered promiscuous mode [ 74.952090][ T5774] veth0_macvtap: entered promiscuous mode [ 74.973754][ T5774] veth1_macvtap: entered promiscuous mode [ 75.026037][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.061517][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.095092][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.106123][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.117232][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.127242][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.181640][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.203680][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.223150][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.242110][ T5787] Bluetooth: hci1: command tx timeout [ 75.247541][ T5787] Bluetooth: hci2: command tx timeout [ 75.319883][ T5787] Bluetooth: hci3: command tx timeout [ 75.321286][ T51] Bluetooth: hci0: command tx timeout [ 75.336373][ T5777] veth0_vlan: entered promiscuous mode [ 75.368051][ T5777] veth1_vlan: entered promiscuous mode [ 75.424459][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.448296][ T5776] veth0_vlan: entered promiscuous mode [ 75.455771][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.476803][ T5775] veth0_vlan: entered promiscuous mode [ 75.511740][ T5776] veth1_vlan: entered promiscuous mode [ 75.527354][ T5777] veth0_macvtap: entered promiscuous mode [ 75.539664][ T5777] veth1_macvtap: entered promiscuous mode [ 75.549701][ T5775] veth1_vlan: entered promiscuous mode [ 75.575591][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.593011][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.614139][ T5775] veth0_macvtap: entered promiscuous mode [ 75.623336][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.635410][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.648845][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.673129][ T5775] veth1_macvtap: entered promiscuous mode [ 75.683549][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.704521][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.716064][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.742803][ T5776] veth0_macvtap: entered promiscuous mode [ 75.779243][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.789011][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.800031][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.808773][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.828025][ T5776] veth1_macvtap: entered promiscuous mode [ 75.870020][ T5836] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.934371][ T5837] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 75.943656][ T5837] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 75.951762][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.959735][ T5837] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 75.965087][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.974408][ T5837] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 75.981631][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.988038][ T5837] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.1'. [ 76.000119][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.019292][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.045699][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.057479][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.067991][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.079115][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.088975][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.099986][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.111414][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.127070][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.137754][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.149508][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.160632][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.173671][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.207006][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.217675][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.227801][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.238360][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.248417][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.262521][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.273476][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.288252][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.299979][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.308899][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.317922][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348220][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.357583][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.368701][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.379576][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.464026][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.494602][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.554945][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.581347][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.716972][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.732409][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.742291][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.753637][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.845389][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.870035][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.912825][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.949897][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.233973][ C0] hrtimer: interrupt took 61848 ns [ 77.326670][ T51] Bluetooth: hci1: command tx timeout [ 77.333205][ T51] Bluetooth: hci2: command tx timeout [ 77.399840][ T51] Bluetooth: hci0: command tx timeout [ 77.446741][ T5787] Bluetooth: hci3: command tx timeout [ 78.446585][ T5930] netlink: 'syz.1.13': attribute type 153 has an invalid length. [ 78.475575][ T5930] netlink: 'syz.1.13': attribute type 1 has an invalid length. [ 78.495836][ T5930] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.13'. [ 78.618815][ T5937] netlink: 'syz.3.14': attribute type 23 has an invalid length. [ 78.643267][ T5937] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.14'. [ 79.479945][ T5787] Bluetooth: hci3: command tx timeout [ 79.489866][ T5787] Bluetooth: hci2: command tx timeout [ 79.495385][ T5787] Bluetooth: hci1: command tx timeout [ 79.537872][ T5787] Bluetooth: hci0: command tx timeout [ 83.413160][ T6083] Zero length message leads to an empty skb [ 83.477438][ T6083] syzkaller0: entered promiscuous mode [ 83.483113][ T6083] syzkaller0: entered allmulticast mode [ 83.526743][ T6090] -: renamed from syzkaller0 [ 84.981549][ T6116] Illegal XDP return value 120 on prog (id 31) dev N/A, expect packet loss! [ 85.816471][ T6142] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 86.217579][ T6154] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 86.399820][ T6154] syzkaller0: entered promiscuous mode [ 86.406764][ T6154] syzkaller0: entered allmulticast mode [ 87.010005][ T788] cfg80211: failed to load regulatory.db [ 87.326363][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.633841][ T6174] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.80'. [ 88.661986][ T6207] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.82'. [ 88.939291][ T6221] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 89.026195][ T6221] team0: Port device netdevsim0 added [ 89.043407][ T6227] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 89.130998][ T6227] team0: Port device netdevsim0 removed [ 89.143831][ T6227] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 89.280221][ T6221] syz.2.83 (6221) used greatest stack depth: 20440 bytes left [ 90.398626][ T6242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.723350][ T6263] syz.1.98[6263] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.060650][ T6266] : renamed from bond_slave_1 (while UP) [ 91.697796][ T6282] netlink: 'syz.0.103': attribute type 3 has an invalid length. [ 91.714356][ T6282] netlink: 132 bytes leftover after parsing attributes in process `syz.0.103'. [ 92.642126][ T6309] netlink: 'syz.2.111': attribute type 9 has an invalid length. [ 92.722203][ T6309] netlink: 155304 bytes leftover after parsing attributes in process `syz.2.111'. [ 93.486041][ T6299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.652979][ T6322] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 93.676105][ T6322] veth0_vlan: entered allmulticast mode [ 93.750474][ T6322] veth0_vlan: left promiscuous mode [ 93.764551][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 93.764956][ T6322] veth0_vlan: entered promiscuous mode [ 93.797081][ T6322] team0: Device veth0_vlan failed to register rx_handler [ 93.926197][ T6331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 93.936651][ T6333] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 93.966329][ T6322] netlink: 60 bytes leftover after parsing attributes in process `syz.1.115'. [ 94.036383][ T6337] Â: renamed from ip6gretap0 (while UP) [ 94.164309][ T6340] netlink: 21 bytes leftover after parsing attributes in process `syz.0.121'. [ 94.184322][ T6340] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 94.241167][ T6340] netlink: 14 bytes leftover after parsing attributes in process `syz.0.121'. [ 95.375266][ T6351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.795735][ T6355] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.126'. [ 95.869006][ T6355] nbd: must specify a device to reconfigure [ 97.709608][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.737099][ T6372] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.130'. [ 97.753765][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.763114][ T6372] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.130'. [ 97.775993][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.784015][ T6372] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.130'. [ 97.796653][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.807867][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.818995][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.832807][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.848316][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.860437][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 97.896827][ T6372] netlink: 'syz.1.130': attribute type 1 has an invalid length. [ 100.632612][ T6391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.751304][ T6405] __nla_validate_parse: 30 callbacks suppressed [ 100.751319][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.141'. [ 100.820117][ T6405] bridge0: port 3(team0) entered blocking state [ 100.839664][ T6405] bridge0: port 3(team0) entered disabled state [ 100.862433][ T6405] team0: entered allmulticast mode [ 100.867614][ T6405] team_slave_0: entered allmulticast mode [ 100.939789][ T6405] team_slave_1: entered allmulticast mode [ 100.961603][ T6405] team0: entered promiscuous mode [ 100.966708][ T6405] team_slave_0: entered promiscuous mode [ 101.038518][ T6405] team_slave_1: entered promiscuous mode [ 101.090075][ T6405] bridge0: port 3(team0) entered blocking state [ 101.097285][ T6405] bridge0: port 3(team0) entered forwarding state [ 101.833386][ T6426] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.146'. [ 102.068495][ T6436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.492914][ T6447] netlink: 21 bytes leftover after parsing attributes in process `syz.2.152'. [ 102.506185][ T6447] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 102.552969][ T6447] netlink: 14 bytes leftover after parsing attributes in process `syz.2.152'. [ 103.284796][ T6444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.837661][ T6464] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 103.858552][ T6464] validate_nla: 24 callbacks suppressed [ 103.858570][ T6464] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 104.182815][ T6474] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.160'. [ 104.494565][ T6478] netlink: 'syz.1.165': attribute type 1 has an invalid length. [ 104.517552][ T6478] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.165'. [ 104.792303][ T6486] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 104.817775][ T6488] netlink: 21 bytes leftover after parsing attributes in process `syz.1.167'. [ 104.842944][ T6488] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 105.748296][ T6482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.777837][ T6486] bridge0: port 3(team0) entered disabled state [ 105.786991][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.804463][ T6486] team0: left allmulticast mode [ 105.812139][ T6486] team_slave_0: left allmulticast mode [ 105.817629][ T6486] team_slave_1: left allmulticast mode [ 105.823392][ T6486] team0: left promiscuous mode [ 105.828210][ T6486] team_slave_0: left promiscuous mode [ 105.834307][ T6486] team_slave_1: left promiscuous mode [ 105.842733][ T6486] bridge0: port 3(team0) entered disabled state [ 105.855792][ T6486] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.866048][ T6486] bond0: (slave team0): Enslaving as an active interface with an up link [ 105.878933][ T6491] netlink: 14 bytes leftover after parsing attributes in process `syz.0.175'. [ 105.982460][ T6491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.014014][ T6491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.060619][ T6491] bond0 (unregistering): (slave team0): Releasing backup interface [ 106.099694][ T6491] bond0 (unregistering): Released all slaves [ 106.112114][ T6488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.167'. [ 106.354469][ T6550] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.176'. [ 107.270809][ T6563] syzkaller0: entered promiscuous mode [ 107.276618][ T6563] syzkaller0: entered allmulticast mode [ 109.475769][ T6557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.039489][ T6576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.184'. [ 111.237359][ T6588] netlink: 128 bytes leftover after parsing attributes in process `syz.3.186'. [ 111.269131][ T6588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.560029][ T6591] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 111.677231][ T6591] syzkaller0: entered promiscuous mode [ 111.690890][ T6591] syzkaller0: entered allmulticast mode [ 111.726558][ T6593] netlink: 'syz.2.188': attribute type 10 has an invalid length. [ 111.750385][ T6593] netlink: 2 bytes leftover after parsing attributes in process `syz.2.188'. [ 111.765954][ T6593] hsr0: entered promiscuous mode [ 111.772991][ T6593] bridge0: port 3(hsr0) entered blocking state [ 111.786131][ T6593] bridge0: port 3(hsr0) entered disabled state [ 111.795370][ T6593] hsr0: entered allmulticast mode [ 111.810628][ T6593] hsr_slave_0: entered allmulticast mode [ 111.817079][ T6593] hsr_slave_1: entered allmulticast mode [ 111.858149][ T6593] bridge0: port 3(hsr0) entered blocking state [ 111.865062][ T6593] bridge0: port 3(hsr0) entered forwarding state [ 112.520677][ T6604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.761062][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.1.192'. [ 113.776170][ T6612] netlink: 128 bytes leftover after parsing attributes in process `syz.1.192'. [ 113.795711][ T6614] netlink: 29187 bytes leftover after parsing attributes in process `syz.1.192'. [ 113.819697][ T6614] netlink: 32770 bytes leftover after parsing attributes in process `syz.1.192'. [ 113.995096][ T6616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.002778][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 114.010248][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 114.017520][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 114.057907][ T6616] netlink: 'syz.0.193': attribute type 9 has an invalid length. [ 114.111022][ T6616] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.193'. [ 114.301421][ T6634] syz.2.198 uses obsolete (PF_INET,SOCK_PACKET) [ 114.384316][ T6626] netlink: 'syz.0.193': attribute type 9 has an invalid length. [ 114.392184][ T6626] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.193'. [ 114.712951][ T6647] netlink: 2895 bytes leftover after parsing attributes in process `syz.2.202'. [ 115.319331][ T6638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.539138][ T6650] netlink: 'syz.0.203': attribute type 16 has an invalid length. [ 115.836534][ T6652] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 115.850350][ T6652] hsr0: entered promiscuous mode [ 115.857767][ T6652] bridge0: port 3(hsr0) entered blocking state [ 115.872454][ T6652] bridge0: port 3(hsr0) entered disabled state [ 115.880624][ T6652] hsr0: entered allmulticast mode [ 115.886091][ T6652] hsr_slave_0: entered allmulticast mode [ 115.902183][ T6652] hsr_slave_1: entered allmulticast mode [ 115.940616][ T6652] bridge0: port 3(hsr0) entered blocking state [ 115.947633][ T6652] bridge0: port 3(hsr0) entered forwarding state [ 116.582079][ T6652] syz.3.204 (6652) used greatest stack depth: 20392 bytes left [ 116.593118][ T6653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.685843][ T6662] __nla_validate_parse: 3 callbacks suppressed [ 116.685858][ T6662] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.207'. [ 116.784217][ T6665] netlink: 'syz.3.208': attribute type 6 has an invalid length. [ 116.807209][ T6665] netlink: 164 bytes leftover after parsing attributes in process `syz.3.208'. [ 117.131052][ T6677] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.138613][ T6677] IPv6: NLM_F_CREATE should be set when creating new route [ 117.146315][ T6677] IPv6: NLM_F_CREATE should be set when creating new route [ 117.153902][ T6677] IPv6: NLM_F_CREATE should be set when creating new route [ 117.222823][ T6677] netlink: 'syz.1.213': attribute type 9 has an invalid length. [ 117.246846][ T6677] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.213'. [ 117.320031][ T6685] netlink: 'syz.3.215': attribute type 21 has an invalid length. [ 117.339813][ T6685] netlink: 'syz.3.215': attribute type 4 has an invalid length. [ 117.347541][ T6685] netlink: 156 bytes leftover after parsing attributes in process `syz.3.215'. [ 117.461833][ T6688] netlink: 'syz.0.217': attribute type 21 has an invalid length. [ 117.488245][ T6688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.217'. [ 117.521575][ T6689] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 117.529337][ T6689] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.217'. [ 117.542068][ T6688] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 117.592177][ T6688] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.217'. [ 117.662774][ T6688] netlink: 156 bytes leftover after parsing attributes in process `syz.0.217'. [ 117.668122][ T6687] netlink: 'syz.1.213': attribute type 9 has an invalid length. [ 117.682123][ T6687] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.213'. [ 118.216803][ T6700] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 118.248770][ T6700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.218'. [ 118.265640][ T6700] hsr0: entered promiscuous mode [ 118.276025][ T6700] bridge0: port 3(hsr0) entered blocking state [ 118.293359][ T6700] bridge0: port 3(hsr0) entered disabled state [ 118.303279][ T6700] hsr0: entered allmulticast mode [ 118.314901][ T6700] hsr_slave_0: entered allmulticast mode [ 118.327326][ T6700] hsr_slave_1: entered allmulticast mode [ 118.337041][ T6700] bridge0: port 3(hsr0) entered blocking state [ 118.343448][ T6700] bridge0: port 3(hsr0) entered forwarding state [ 119.132130][ T6727] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 119.301247][ T6734] ipvlan0: entered promiscuous mode [ 121.718774][ T6746] syzkaller0: entered promiscuous mode [ 121.725044][ T6746] syzkaller0: entered allmulticast mode [ 121.732899][ T6744] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.740502][ T6744] IPv6: NLM_F_CREATE should be set when creating new route [ 121.748402][ T6744] IPv6: NLM_F_CREATE should be set when creating new route [ 121.756225][ T6744] IPv6: NLM_F_CREATE should be set when creating new route [ 121.777918][ T6750] netlink: 'syz.3.231': attribute type 9 has an invalid length. [ 121.793892][ T6750] __nla_validate_parse: 5 callbacks suppressed [ 121.793909][ T6750] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.231'. [ 123.254340][ T6748] netlink: 'syz.1.233': attribute type 6 has an invalid length. [ 123.263405][ T6748] netlink: 164 bytes leftover after parsing attributes in process `syz.1.233'. [ 123.281581][ T6756] netlink: 144 bytes leftover after parsing attributes in process `syz.0.235'. [ 123.342291][ T6756] team0: Port device team_slave_0 removed [ 123.348406][ T6756] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 123.425267][ T6754] netlink: 'syz.3.231': attribute type 9 has an invalid length. [ 123.434384][ T6754] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.231'. [ 123.518407][ T6761] netlink: 'syz.2.237': attribute type 4 has an invalid length. [ 123.695173][ T6770] netlink: 'syz.0.247': attribute type 29 has an invalid length. [ 123.705817][ T6770] netlink: 'syz.0.247': attribute type 29 has an invalid length. [ 123.706766][ T6767] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 123.752300][ T6770] netlink: 'syz.0.247': attribute type 29 has an invalid length. [ 123.770220][ T6770] netlink: 'syz.0.247': attribute type 29 has an invalid length. [ 123.782737][ T6770] netlink: 'syz.0.247': attribute type 10 has an invalid length. [ 123.826081][ T6770] veth0_vlan: entered allmulticast mode [ 123.971041][ T6770] veth0_vlan: left promiscuous mode [ 123.995634][ T6770] veth0_vlan: entered promiscuous mode [ 124.019960][ T6770] team0: Device veth0_vlan failed to register rx_handler [ 124.497168][ T6777] netlink: 'syz.0.247': attribute type 29 has an invalid length. [ 124.546781][ T6785] netlink: 830 bytes leftover after parsing attributes in process `syz.0.247'. [ 124.780031][ T6805] netlink: 'syz.2.245': attribute type 6 has an invalid length. [ 124.787950][ T6805] netlink: 164 bytes leftover after parsing attributes in process `syz.2.245'. [ 125.045686][ T6812] FAULT_INJECTION: forcing a failure. [ 125.045686][ T6812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 125.072805][ T6812] CPU: 0 PID: 6812 Comm: syz.1.256 Not tainted syzkaller #0 [ 125.080148][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.090221][ T6812] Call Trace: [ 125.093501][ T6812] [ 125.096430][ T6812] dump_stack_lvl+0x18c/0x250 [ 125.101123][ T6812] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.107283][ T6812] ? show_regs_print_info+0x20/0x20 [ 125.112483][ T6812] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 125.118652][ T6812] should_fail_ex+0x394/0x4c0 [ 125.123336][ T6812] _copy_from_user+0x2f/0xe0 [ 125.127929][ T6812] ___sys_recvmsg+0x174/0x590 [ 125.132632][ T6812] ? __sys_recvmsg+0x2a0/0x2a0 [ 125.137409][ T6812] ? __fget_files+0x3fc/0x460 [ 125.142096][ T6812] __x64_sys_recvmsg+0x21e/0x2f0 [ 125.147033][ T6812] ? perf_trace_preemptirq_template+0x269/0x330 [ 125.153280][ T6812] ? ___sys_recvmsg+0x590/0x590 [ 125.158143][ T6812] ? lockdep_hardirqs_on+0x98/0x150 [ 125.163342][ T6812] do_syscall_64+0x55/0xb0 [ 125.167765][ T6812] ? clear_bhb_loop+0x40/0x90 [ 125.172463][ T6812] ? clear_bhb_loop+0x40/0x90 [ 125.177135][ T6812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.183041][ T6812] RIP: 0033:0x7f409019e199 [ 125.187459][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.207078][ T6812] RSP: 002b:00007f4091106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 125.215502][ T6812] RAX: ffffffffffffffda RBX: 00007f4090425fa0 RCX: 00007f409019e199 [ 125.223479][ T6812] RDX: 0000000040008140 RSI: 0000200000000000 RDI: 0000000000000004 [ 125.231456][ T6812] RBP: 00007f4091106090 R08: 0000000000000000 R09: 0000000000000000 [ 125.239424][ T6812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.247391][ T6812] R13: 00007f4090426038 R14: 00007f4090425fa0 R15: 00007fff492a8ce8 [ 125.255376][ T6812] [ 125.307928][ T6818] team0: Device ipvlan1 failed to register rx_handler [ 125.360289][ T6815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 125.368064][ T6815] IPv6: NLM_F_CREATE should be set when creating new route [ 125.375840][ T6815] IPv6: NLM_F_CREATE should be set when creating new route [ 125.383520][ T6815] IPv6: NLM_F_CREATE should be set when creating new route [ 125.441306][ T6815] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.248'. [ 125.549940][ T6822] netlink: 164 bytes leftover after parsing attributes in process `syz.0.250'. [ 125.587784][ T6826] netlink: 14 bytes leftover after parsing attributes in process `syz.1.251'. [ 125.686495][ T6826] hsr_slave_0: left promiscuous mode [ 125.932115][ T6826] hsr_slave_1: left promiscuous mode [ 126.056560][ T6825] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.248'. [ 126.072919][ T6836] veth1_macvtap: entered allmulticast mode [ 126.191068][ T6836] syzkaller0: entered promiscuous mode [ 126.196593][ T6836] syzkaller0: entered allmulticast mode [ 128.513170][ T6847] validate_nla: 7 callbacks suppressed [ 128.513189][ T6847] netlink: 'syz.2.259': attribute type 10 has an invalid length. [ 128.527714][ T6847] syz_tun: entered promiscuous mode [ 128.548018][ T6847] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.572772][ T6848] __nla_validate_parse: 1 callbacks suppressed [ 128.572791][ T6848] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.259'. [ 128.799096][ T6858] FAULT_INJECTION: forcing a failure. [ 128.799096][ T6858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.835810][ T6858] CPU: 0 PID: 6858 Comm: syz.0.261 Not tainted syzkaller #0 [ 128.843161][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.853247][ T6858] Call Trace: [ 128.856539][ T6858] [ 128.859490][ T6858] dump_stack_lvl+0x18c/0x250 [ 128.864212][ T6858] ? show_regs_print_info+0x20/0x20 [ 128.869449][ T6858] ? load_image+0x420/0x420 [ 128.870872][ T6863] netlink: 'syz.3.263': attribute type 11 has an invalid length. [ 128.873966][ T6858] ? __might_fault+0xaa/0x120 [ 128.874012][ T6858] ? __lock_acquire+0x7eb0/0x7eb0 [ 128.874039][ T6858] should_fail_ex+0x394/0x4c0 [ 128.896158][ T6858] _copy_to_iter+0x1ce/0x1110 [ 128.900869][ T6858] ? __lock_acquire+0x7eb0/0x7eb0 [ 128.905921][ T6858] ? __mutex_trylock_common+0x160/0x270 [ 128.911488][ T6858] ? trace_raw_output_contention_end+0xd0/0xd0 [ 128.917664][ T6858] ? iov_iter_init+0x1e0/0x1e0 [ 128.922454][ T6858] ? __virt_addr_valid+0x10c/0x380 [ 128.923274][ T6863] netlink: 168 bytes leftover after parsing attributes in process `syz.3.263'. [ 128.927574][ T6858] ? __check_object_size+0x4fc/0xa40 [ 128.927605][ T6858] __skb_datagram_iter+0xdb/0x780 [ 128.927628][ T6858] ? unix_stream_read_generic+0x657/0x1ea0 [ 128.927653][ T6858] ? skb_copy_datagram_iter+0x200/0x200 [ 128.927671][ T6858] ? do_raw_spin_lock+0x11f/0x2b0 [ 128.927698][ T6858] skb_copy_datagram_iter+0xb1/0x200 [ 128.968583][ T6858] unix_stream_read_actor+0x6c/0xa0 [ 128.973816][ T6858] unix_stream_read_generic+0xcf1/0x1ea0 [ 128.979484][ T6858] ? aa_sk_perm+0x970/0x970 [ 128.984024][ T6858] ? unix_stream_read_actor+0xa0/0xa0 [ 128.989414][ T6858] ? aa_sk_perm+0x83c/0x970 [ 128.993944][ T6858] unix_stream_recvmsg+0x169/0x1c0 [ 128.999093][ T6858] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 129.004408][ T6858] ? __lock_acquire+0x135d/0x7eb0 [ 129.009457][ T6858] ? __unix_stream_recvmsg+0x150/0x150 [ 129.014952][ T6858] ? aa_sock_msg_perm+0x94/0x150 [ 129.019268][ T6867] netlink: 'syz.1.265': attribute type 10 has an invalid length. [ 129.019899][ T6858] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 129.019925][ T6858] ? security_socket_recvmsg+0x89/0xb0 [ 129.019945][ T6858] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 129.019971][ T6858] ____sys_recvmsg+0x2bd/0x5d0 [ 129.020007][ T6858] ? __sys_recvmsg_sock+0x50/0x50 [ 129.020046][ T6858] ? import_iovec+0x73/0xa0 [ 129.020076][ T6858] ___sys_recvmsg+0x214/0x590 [ 129.020105][ T6858] ? __sys_recvmsg+0x2a0/0x2a0 [ 129.020133][ T6858] ? ksys_write+0x1d2/0x260 [ 129.020170][ T6858] ? __fget_files+0x3fc/0x460 [ 129.076824][ T6858] __x64_sys_recvmsg+0x21e/0x2f0 [ 129.081795][ T6858] ? perf_trace_preemptirq_template+0x269/0x330 [ 129.088114][ T6858] ? ___sys_recvmsg+0x590/0x590 [ 129.093002][ T6858] ? lockdep_hardirqs_on+0x98/0x150 [ 129.098215][ T6858] do_syscall_64+0x55/0xb0 [ 129.102649][ T6858] ? clear_bhb_loop+0x40/0x90 [ 129.107337][ T6858] ? clear_bhb_loop+0x40/0x90 [ 129.112038][ T6858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.117961][ T6858] RIP: 0033:0x7fdd75d9e199 [ 129.122396][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.142109][ T6858] RSP: 002b:00007fdd76cc3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 129.150549][ T6858] RAX: ffffffffffffffda RBX: 00007fdd76025fa0 RCX: 00007fdd75d9e199 [ 129.158537][ T6858] RDX: 0000000040008140 RSI: 0000200000000000 RDI: 0000000000000004 [ 129.166531][ T6858] RBP: 00007fdd76cc3090 R08: 0000000000000000 R09: 0000000000000000 [ 129.174517][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.182504][ T6858] R13: 00007fdd76026038 R14: 00007fdd76025fa0 R15: 00007fff89714b98 [ 129.190502][ T6858] [ 129.217548][ T6863] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.263'. [ 130.550995][ T6874] syz.1.266 (6874) used greatest stack depth: 20136 bytes left [ 130.692305][ T6899] netlink: 168 bytes leftover after parsing attributes in process `syz.3.273'. [ 131.045636][ T6911] FAULT_INJECTION: forcing a failure. [ 131.045636][ T6911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.089466][ T6911] CPU: 0 PID: 6911 Comm: syz.0.276 Not tainted syzkaller #0 [ 131.096820][ T6911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.106903][ T6911] Call Trace: [ 131.110213][ T6911] [ 131.113166][ T6911] dump_stack_lvl+0x18c/0x250 [ 131.117882][ T6911] ? show_regs_print_info+0x20/0x20 [ 131.123117][ T6911] ? load_image+0x420/0x420 [ 131.127651][ T6911] ? __lock_acquire+0x7eb0/0x7eb0 [ 131.132705][ T6911] ? snprintf+0xe9/0x140 [ 131.136974][ T6911] should_fail_ex+0x394/0x4c0 [ 131.141695][ T6911] _copy_to_user+0x2f/0xa0 [ 131.146226][ T6911] simple_read_from_buffer+0xe7/0x150 [ 131.151633][ T6911] proc_fail_nth_read+0x1e8/0x260 [ 131.156677][ T6911] ? proc_fault_inject_write+0x360/0x360 [ 131.162314][ T6911] ? fsnotify_perm+0x271/0x5e0 [ 131.167080][ T6911] ? proc_fault_inject_write+0x360/0x360 [ 131.172732][ T6911] vfs_read+0x298/0x990 [ 131.176925][ T6911] ? kernel_read+0x1e0/0x1e0 [ 131.181544][ T6911] ? __fget_files+0x28/0x460 [ 131.186152][ T6911] ? __fget_files+0x3fc/0x460 [ 131.190847][ T6911] ? __fdget_pos+0x2a3/0x330 [ 131.195451][ T6911] ? ksys_read+0x74/0x260 [ 131.199795][ T6911] ksys_read+0x151/0x260 [ 131.204053][ T6911] ? vfs_write+0x9a0/0x9a0 [ 131.208465][ T6911] ? lockdep_hardirqs_on+0x98/0x150 [ 131.213663][ T6911] do_syscall_64+0x55/0xb0 [ 131.218078][ T6911] ? clear_bhb_loop+0x40/0x90 [ 131.222759][ T6911] ? clear_bhb_loop+0x40/0x90 [ 131.227482][ T6911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.233376][ T6911] RIP: 0033:0x7fdd75d5e9ce [ 131.237794][ T6911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 131.257429][ T6911] RSP: 002b:00007fdd76cc2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.265856][ T6911] RAX: ffffffffffffffda RBX: 00007fdd76cc36c0 RCX: 00007fdd75d5e9ce [ 131.273828][ T6911] RDX: 000000000000000f RSI: 00007fdd76cc30a0 RDI: 0000000000000009 [ 131.281805][ T6911] RBP: 00007fdd76cc3090 R08: 0000000000000000 R09: 0000000000000000 [ 131.289799][ T6911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.297789][ T6911] R13: 00007fdd76026038 R14: 00007fdd76025fa0 R15: 00007fff89714b98 [ 131.305782][ T6911] [ 131.716240][ T6925] pim6reg1: entered promiscuous mode [ 131.725359][ T6925] pim6reg1: entered allmulticast mode [ 131.813882][ T6935] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 131.828998][ T6935] netlink: 'syz.1.284': attribute type 3 has an invalid length. [ 131.843079][ T6935] netlink: 132 bytes leftover after parsing attributes in process `syz.1.284'. [ 131.867471][ T6933] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 131.875777][ T6933] netlink: 168 bytes leftover after parsing attributes in process `syz.1.284'. [ 132.163193][ T6946] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 133.023605][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.030071][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.234679][ T6976] IPv6: …: Disabled Multicast RS [ 134.132909][ T6990] netlink: 29187 bytes leftover after parsing attributes in process `syz.1.294'. [ 134.169079][ T6990] netlink: 32770 bytes leftover after parsing attributes in process `syz.1.294'. [ 134.720527][ T6968] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.291'. [ 136.866434][ T6968] netlink: zone id is out of range [ 136.949894][ T6968] netlink: zone id is out of range [ 137.588543][ T7011] syzkaller0: entered promiscuous mode [ 137.596023][ T7011] syzkaller0: entered allmulticast mode [ 138.703635][ T7029] netlink: 128 bytes leftover after parsing attributes in process `syz.0.304'. [ 138.733724][ T7029] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.570036][ T7048] sit0: entered allmulticast mode [ 141.744689][ T7054] netlink: 'syz.3.313': attribute type 27 has an invalid length. [ 141.762895][ T7054] netlink: 'syz.3.313': attribute type 4 has an invalid length. [ 141.778809][ T7054] netlink: 152 bytes leftover after parsing attributes in process `syz.3.313'. [ 141.901464][ T7057] netlink: 'syz.2.314': attribute type 3 has an invalid length. [ 141.949491][ T7057] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.314'. [ 141.979961][ T7054] ªªªªªª: renamed from vlan0 (while UP) [ 142.031977][ T7067] netlink: 'syz.3.313': attribute type 27 has an invalid length. [ 142.044407][ T7066] netlink: 'syz.1.315': attribute type 4 has an invalid length. [ 142.066588][ T7067] netlink: 'syz.3.313': attribute type 4 has an invalid length. [ 142.083529][ T7066] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.315'. [ 142.132781][ T7067] netlink: 152 bytes leftover after parsing attributes in process `syz.3.313'. [ 142.374090][ T6215] tipc: Subscription rejected, illegal request [ 143.066139][ T7095] netlink: 168 bytes leftover after parsing attributes in process `syz.2.326'. [ 143.454709][ T7104] netlink: 763 bytes leftover after parsing attributes in process `syz.2.321'. [ 143.640268][ T7106] syzkaller0: entered promiscuous mode [ 143.646000][ T7106] syzkaller0: entered allmulticast mode [ 146.160275][ T7115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.700868][ T7140] netlink: 'syz.1.333': attribute type 10 has an invalid length. [ 146.708688][ T7140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.333'. [ 146.720264][ T7140] veth0_vlan: left promiscuous mode [ 146.725627][ T7140] veth0_vlan: left allmulticast mode [ 146.733021][ T7140] veth0_vlan: entered promiscuous mode [ 146.743146][ T7140] batman_adv: batadv0: Adding interface: veth0_vlan [ 146.750044][ T7140] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.806628][ T7140] batman_adv: batadv0: Interface activated: veth0_vlan [ 146.898671][ T7139] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.333'. [ 146.911509][ T7139] openvswitch: netlink: Flow key attribute not present in set flow. [ 149.679880][ T7140] syz.1.333 (7140) used greatest stack depth: 19944 bytes left [ 150.272949][ T7165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.292199][ T7167] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.340'. [ 150.382621][ T7170] netlink: 'syz.1.341': attribute type 21 has an invalid length. [ 150.395783][ T7170] netlink: 156 bytes leftover after parsing attributes in process `syz.1.341'. [ 150.432590][ T7164] netlink: 'syz.1.341': attribute type 10 has an invalid length. [ 150.459734][ T7164] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.478246][ T7164] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.716038][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.727393][ T7164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.743115][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.753992][ T7164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.875060][ T7164] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 150.943133][ T7180] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.345'. [ 150.956445][ T7180] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.345'. [ 150.967121][ T7180] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.345'. [ 150.967123][ T7164] syz.1.341 (7164) used greatest stack depth: 19368 bytes left [ 150.986005][ T7180] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.345'. [ 150.996474][ T7180] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.345'. [ 151.014246][ T7180] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.345'. [ 151.024592][ T7180] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.345'. [ 151.231590][ T7188] netlink: 'syz.2.347': attribute type 10 has an invalid length. [ 151.231772][ T7192] syz.1.346 (7192) used obsolete PPPIOCDETACH ioctl [ 151.357921][ T7188] team0: Port device wlan1 added [ 151.378626][ T7197] netlink: 'syz.3.348': attribute type 10 has an invalid length. [ 151.381506][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.412835][ T7197] macvlan0: entered promiscuous mode [ 151.425248][ T7197] macvlan0: entered allmulticast mode [ 151.453329][ T7197] veth1_vlan: entered allmulticast mode [ 151.477248][ T7197] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 151.758249][ T7206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.096278][ T7217] netlink: 'syz.0.355': attribute type 4 has an invalid length. [ 152.115601][ T7217] __nla_validate_parse: 26 callbacks suppressed [ 152.115620][ T7217] netlink: 152 bytes leftover after parsing attributes in process `syz.0.355'. [ 152.189802][ T7217] netlink: 'syz.0.355': attribute type 21 has an invalid length. [ 152.197892][ T7217] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.385273][ T7242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.860048][ T7253] delete_channel: no stack [ 156.665045][ T7295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.793872][ T7262] netlink: 763 bytes leftover after parsing attributes in process `syz.3.367'. [ 156.804283][ T7268] netlink: 'syz.0.368': attribute type 10 has an invalid length. [ 156.825035][ T7268] syz_tun: entered promiscuous mode [ 157.288755][ T7311] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.379'. [ 161.006644][ T7330] sit0: entered allmulticast mode [ 161.242764][ T7334] netlink: 'syz.2.382': attribute type 21 has an invalid length. [ 161.269541][ T7334] netlink: 156 bytes leftover after parsing attributes in process `syz.2.382'. [ 161.289454][ T7335] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 161.313183][ T7335] bridge0: port 3(hsr0) entered disabled state [ 161.319630][ T7335] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.327318][ T7335] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.367592][ T7335] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.382189][ T7335] bridge0: port 3(hsr0) entered blocking state [ 161.388471][ T7335] bridge0: port 3(hsr0) entered forwarding state [ 161.395188][ T7335] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.402412][ T7335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.410004][ T7335] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.417228][ T7335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.439011][ T7335] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 161.583742][ T7351] netlink: 132 bytes leftover after parsing attributes in process `syz.2.388'. [ 162.016491][ T7366] netlink: 'syz.0.393': attribute type 21 has an invalid length. [ 162.469811][ T7388] syz.2.397[7388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.481521][ T7385] netlink: 128 bytes leftover after parsing attributes in process `syz.2.397'. [ 162.538943][ T7385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.289872][ T7412] netlink: 'syz.0.409': attribute type 39 has an invalid length. [ 163.384546][ T7417] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 163.441781][ T7417] netlink: 'syz.2.408': attribute type 3 has an invalid length. [ 163.454785][ T7417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.408'. [ 163.456826][ T7418] netlink: 'syz.2.408': attribute type 10 has an invalid length. [ 163.469015][ T7417] netlink: 'syz.2.408': attribute type 1 has an invalid length. [ 163.481777][ T7417] netlink: 'syz.2.408': attribute type 3 has an invalid length. [ 163.535391][ T7417] netlink: 132 bytes leftover after parsing attributes in process `syz.2.408'. [ 163.547456][ T7418] netlink: 168 bytes leftover after parsing attributes in process `syz.2.408'. [ 163.947171][ T7441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.417'. [ 163.958292][ T7441] netlink: 44 bytes leftover after parsing attributes in process `syz.1.417'. [ 164.142457][ T7445] syzkaller0: entered promiscuous mode [ 164.148011][ T7445] syzkaller0: entered allmulticast mode [ 164.175678][ T7445] netlink: 'syz.1.418': attribute type 28 has an invalid length. [ 164.183935][ T7445] netlink: 'syz.1.418': attribute type 3 has an invalid length. [ 164.202210][ T7445] netlink: 132 bytes leftover after parsing attributes in process `syz.1.418'. [ 165.708303][ T7455] pimreg: tun_chr_ioctl cmd 1074025677 [ 165.730257][ T7455] pimreg: linktype set to 774 [ 165.832629][ T7458] sit0: entered allmulticast mode [ 166.055564][ T7471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.428'. [ 166.104728][ T7472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.136435][ T7476] netlink: 'syz.1.428': attribute type 21 has an invalid length. [ 166.150445][ T7476] netlink: 132 bytes leftover after parsing attributes in process `syz.1.428'. [ 166.160338][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.428'. [ 166.628773][ T7494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.642701][ T7494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.655198][ T7494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.663478][ T7494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.841017][ T7498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.982676][ T7537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.405771][ T7558] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 169.867308][ T7565] validate_nla: 2 callbacks suppressed [ 169.867324][ T7565] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 169.993637][ T7565] __nla_validate_parse: 9 callbacks suppressed [ 169.993654][ T7565] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.456'. [ 170.176544][ T7574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.448826][ T7577] netlink: 'syz.1.459': attribute type 10 has an invalid length. [ 170.468122][ T7577] netlink: 2 bytes leftover after parsing attributes in process `syz.1.459'. [ 170.868291][ T7595] netlink: 'syz.3.466': attribute type 10 has an invalid length. [ 170.882877][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.902796][ T7595] bridge_slave_1: left allmulticast mode [ 170.908509][ T7595] bridge_slave_1: left promiscuous mode [ 170.915114][ T7595] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.939187][ T7595] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 170.950510][ T7594] netlink: 'syz.3.466': attribute type 10 has an invalid length. [ 171.627313][ T7609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.767851][ T7629] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.475'. [ 172.799095][ T7631] netlink: 'syz.1.474': attribute type 10 has an invalid length. [ 172.845307][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.870068][ T7631] bridge_slave_1: left allmulticast mode [ 172.875810][ T7631] bridge_slave_1: left promiscuous mode [ 172.900020][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.950858][ T7631] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 173.203071][ T7639] netlink: 'syz.1.480': attribute type 9 has an invalid length. [ 173.233488][ T7642] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.480'. [ 173.254150][ T7639] netlink: 'syz.1.480': attribute type 23 has an invalid length. [ 173.272819][ T7639] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.480'. [ 173.680330][ T7650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.768660][ T7653] syzkaller0: entered promiscuous mode [ 173.788520][ T7653] syzkaller0: entered allmulticast mode [ 173.841437][ T7663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 173.877318][ T7663] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 173.906490][ T7658] netlink: 60 bytes leftover after parsing attributes in process `syz.3.484'. [ 175.923931][ T7668] netlink: 'syz.2.487': attribute type 7 has an invalid length. [ 175.934976][ T7668] netlink: 'syz.2.487': attribute type 6 has an invalid length. [ 175.949623][ T7670] netlink: 'syz.2.487': attribute type 10 has an invalid length. [ 176.070761][ T7670] team0: Device gre0 is of different type [ 176.411138][ T7701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.075833][ T7731] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.502'. [ 178.207501][ T7737] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.504'. [ 178.262131][ T7736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.858048][ T7758] netlink: 128 bytes leftover after parsing attributes in process `syz.0.512'. [ 179.158081][ T7758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.313781][ T7768] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.515'. [ 179.427699][ T7767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.658504][ T7781] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 179.733342][ T7784] netlink: 'syz.3.521': attribute type 9 has an invalid length. [ 179.749591][ T7784] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.521'. [ 179.904724][ T7794] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 180.327592][ T7809] netlink: 'syz.2.528': attribute type 9 has an invalid length. [ 180.336976][ T7809] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.528'. [ 180.612735][ T7814] FAULT_INJECTION: forcing a failure. [ 180.612735][ T7814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.673973][ T7814] CPU: 1 PID: 7814 Comm: syz.3.529 Not tainted syzkaller #0 [ 180.681331][ T7814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.691411][ T7814] Call Trace: [ 180.694708][ T7814] [ 180.697653][ T7814] dump_stack_lvl+0x18c/0x250 [ 180.702384][ T7814] ? show_regs_print_info+0x20/0x20 [ 180.707605][ T7814] ? load_image+0x420/0x420 [ 180.712128][ T7814] ? __might_fault+0xaa/0x120 [ 180.716842][ T7814] ? __lock_acquire+0x7eb0/0x7eb0 [ 180.721906][ T7814] should_fail_ex+0x394/0x4c0 [ 180.726625][ T7814] _copy_from_user+0x2f/0xe0 [ 180.731244][ T7814] ___sys_recvmsg+0x174/0x590 [ 180.735957][ T7814] ? __sys_recvmsg+0x2a0/0x2a0 [ 180.740750][ T7814] ? perf_trace_preemptirq_template+0x269/0x330 [ 180.747028][ T7814] ? __fget_files+0x3fc/0x460 [ 180.751745][ T7814] __x64_sys_recvmsg+0x21e/0x2f0 [ 180.756708][ T7814] ? ___sys_recvmsg+0x590/0x590 [ 180.761603][ T7814] ? syscall_enter_from_user_mode+0x2e/0x80 [ 180.767521][ T7814] do_syscall_64+0x55/0xb0 [ 180.771958][ T7814] ? clear_bhb_loop+0x40/0x90 [ 180.776650][ T7814] ? clear_bhb_loop+0x40/0x90 [ 180.781347][ T7814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.787267][ T7814] RIP: 0033:0x7f8ae3b9e199 [ 180.791699][ T7814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.811335][ T7814] RSP: 002b:00007f8ae4b4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 180.819785][ T7814] RAX: ffffffffffffffda RBX: 00007f8ae3e25fa0 RCX: 00007f8ae3b9e199 [ 180.827793][ T7814] RDX: 0000000040008140 RSI: 0000200000000000 RDI: 0000000000000004 [ 180.835787][ T7814] RBP: 00007f8ae4b4a090 R08: 0000000000000000 R09: 0000000000000000 [ 180.843777][ T7814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.851766][ T7814] R13: 00007f8ae3e26038 R14: 00007f8ae3e25fa0 R15: 00007ffda46db4f8 [ 180.859776][ T7814] [ 180.976425][ T7813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.995722][ T7810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.242696][ T7805] syz.0.527 (7805) used greatest stack depth: 17512 bytes left [ 183.381458][ T7837] netlink: 'syz.2.536': attribute type 10 has an invalid length. [ 183.502172][ T7842] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.537'. [ 183.529883][ T7842] openvswitch: netlink: Key type 29 is not supported [ 183.706488][ T7848] FAULT_INJECTION: forcing a failure. [ 183.706488][ T7848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.756346][ T7848] CPU: 1 PID: 7848 Comm: syz.1.540 Not tainted syzkaller #0 [ 183.763700][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.773783][ T7848] Call Trace: [ 183.777086][ T7848] [ 183.780033][ T7848] dump_stack_lvl+0x18c/0x250 [ 183.784746][ T7848] ? show_regs_print_info+0x20/0x20 [ 183.789990][ T7848] ? load_image+0x420/0x420 [ 183.793827][ T7854] netlink: 'syz.2.543': attribute type 21 has an invalid length. [ 183.794595][ T7848] ? __might_fault+0xaa/0x120 [ 183.807013][ T7848] ? __lock_acquire+0x7eb0/0x7eb0 [ 183.812074][ T7848] should_fail_ex+0x394/0x4c0 [ 183.816797][ T7848] _copy_to_iter+0x1ce/0x1110 [ 183.821509][ T7848] ? __lock_acquire+0x7eb0/0x7eb0 [ 183.826566][ T7848] ? __mutex_trylock_common+0x160/0x270 [ 183.832137][ T7848] ? trace_raw_output_contention_end+0xd0/0xd0 [ 183.838316][ T7848] ? iov_iter_init+0x1e0/0x1e0 [ 183.843105][ T7848] ? __virt_addr_valid+0x10c/0x380 [ 183.848243][ T7848] ? __check_object_size+0x4fc/0xa40 [ 183.853559][ T7848] __skb_datagram_iter+0xdb/0x780 [ 183.858606][ T7848] ? unix_stream_read_generic+0x657/0x1ea0 [ 183.864438][ T7848] ? skb_copy_datagram_iter+0x200/0x200 [ 183.870011][ T7848] ? do_raw_spin_lock+0x11f/0x2b0 [ 183.875070][ T7848] skb_copy_datagram_iter+0xb1/0x200 [ 183.880387][ T7848] unix_stream_read_actor+0x6c/0xa0 [ 183.885627][ T7848] unix_stream_read_generic+0xcf1/0x1ea0 [ 183.891301][ T7848] ? aa_sk_perm+0x970/0x970 [ 183.895855][ T7848] ? unix_stream_read_actor+0xa0/0xa0 [ 183.901274][ T7848] ? aa_sk_perm+0x83c/0x970 [ 183.905817][ T7848] unix_stream_recvmsg+0x169/0x1c0 [ 183.910972][ T7848] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 183.916282][ T7848] ? __lock_acquire+0x135d/0x7eb0 [ 183.921330][ T7848] ? __unix_stream_recvmsg+0x150/0x150 [ 183.926822][ T7848] ? aa_sock_msg_perm+0x94/0x150 [ 183.931792][ T7848] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 183.937108][ T7848] ? security_socket_recvmsg+0x89/0xb0 [ 183.942635][ T7848] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 183.947965][ T7848] ____sys_recvmsg+0x2bd/0x5d0 [ 183.952774][ T7848] ? __sys_recvmsg_sock+0x50/0x50 [ 183.957850][ T7848] ? import_iovec+0x73/0xa0 [ 183.962387][ T7848] ___sys_recvmsg+0x214/0x590 [ 183.967110][ T7848] ? __sys_recvmsg+0x2a0/0x2a0 [ 183.971909][ T7848] ? ksys_write+0x1d2/0x260 [ 183.976450][ T7848] ? __fget_files+0x3fc/0x460 [ 183.981160][ T7848] __x64_sys_recvmsg+0x21e/0x2f0 [ 183.986114][ T7848] ? perf_trace_preemptirq_template+0x269/0x330 [ 183.992366][ T7848] ? ___sys_recvmsg+0x590/0x590 [ 183.997243][ T7848] ? lockdep_hardirqs_on+0x98/0x150 [ 184.002467][ T7848] do_syscall_64+0x55/0xb0 [ 184.006892][ T7848] ? clear_bhb_loop+0x40/0x90 [ 184.011570][ T7848] ? clear_bhb_loop+0x40/0x90 [ 184.016244][ T7848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.022141][ T7848] RIP: 0033:0x7f409019e199 [ 184.026557][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.046185][ T7848] RSP: 002b:00007f4091106028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 184.054610][ T7848] RAX: ffffffffffffffda RBX: 00007f4090425fa0 RCX: 00007f409019e199 [ 184.062591][ T7848] RDX: 0000000040008140 RSI: 0000200000000000 RDI: 0000000000000004 [ 184.070564][ T7848] RBP: 00007f4091106090 R08: 0000000000000000 R09: 0000000000000000 [ 184.078536][ T7848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.086508][ T7848] R13: 00007f4090426038 R14: 00007f4090425fa0 R15: 00007fff492a8ce8 [ 184.094506][ T7848] [ 184.132557][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.138176][ T7855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.340159][ T7880] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.549'. [ 184.355829][ T7880] netlink: 'syz.3.549': attribute type 27 has an invalid length. [ 184.380552][ T7880] netlink: 164 bytes leftover after parsing attributes in process `syz.3.549'. [ 184.754803][ T7899] FAULT_INJECTION: forcing a failure. [ 184.754803][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.768842][ T7899] CPU: 1 PID: 7899 Comm: syz.0.556 Not tainted syzkaller #0 [ 184.776181][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.786274][ T7899] Call Trace: [ 184.789577][ T7899] [ 184.792529][ T7899] dump_stack_lvl+0x18c/0x250 [ 184.797246][ T7899] ? show_regs_print_info+0x20/0x20 [ 184.802479][ T7899] ? load_image+0x420/0x420 [ 184.807022][ T7899] ? __lock_acquire+0x7eb0/0x7eb0 [ 184.812076][ T7899] ? snprintf+0xe9/0x140 [ 184.816333][ T7899] should_fail_ex+0x394/0x4c0 [ 184.821024][ T7899] _copy_to_user+0x2f/0xa0 [ 184.825442][ T7899] simple_read_from_buffer+0xe7/0x150 [ 184.830818][ T7899] proc_fail_nth_read+0x1e8/0x260 [ 184.835853][ T7899] ? proc_fault_inject_write+0x360/0x360 [ 184.841496][ T7899] ? fsnotify_perm+0x271/0x5e0 [ 184.846263][ T7899] ? proc_fault_inject_write+0x360/0x360 [ 184.851898][ T7899] vfs_read+0x298/0x990 [ 184.856065][ T7899] ? kernel_read+0x1e0/0x1e0 [ 184.860664][ T7899] ? __fget_files+0x28/0x460 [ 184.865260][ T7899] ? __fget_files+0x3fc/0x460 [ 184.869947][ T7899] ? __fdget_pos+0x2a3/0x330 [ 184.874543][ T7899] ? ksys_read+0x74/0x260 [ 184.878878][ T7899] ksys_read+0x151/0x260 [ 184.883132][ T7899] ? vfs_write+0x9a0/0x9a0 [ 184.887553][ T7899] ? syscall_enter_from_user_mode+0x2e/0x80 [ 184.893453][ T7899] do_syscall_64+0x55/0xb0 [ 184.897875][ T7899] ? clear_bhb_loop+0x40/0x90 [ 184.902549][ T7899] ? clear_bhb_loop+0x40/0x90 [ 184.907226][ T7899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.913123][ T7899] RIP: 0033:0x7fdd75d5e9ce [ 184.917537][ T7899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.937146][ T7899] RSP: 002b:00007fdd76cc2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.945567][ T7899] RAX: ffffffffffffffda RBX: 00007fdd76cc36c0 RCX: 00007fdd75d5e9ce [ 184.953540][ T7899] RDX: 000000000000000f RSI: 00007fdd76cc30a0 RDI: 000000000000000a [ 184.961507][ T7899] RBP: 00007fdd76cc3090 R08: 0000000000000000 R09: 0000000000000000 [ 184.969475][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.977443][ T7899] R13: 00007fdd76026038 R14: 00007fdd76025fa0 R15: 00007fff89714b98 [ 184.985427][ T7899] [ 185.018121][ T7901] pim6reg1: left promiscuous mode [ 185.033815][ T7901] pim6reg1: left allmulticast mode [ 185.064859][ T7899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.219767][ T7902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.501840][ T7907] syzkaller0: entered promiscuous mode [ 185.507388][ T7907] syzkaller0: entered allmulticast mode [ 185.619658][ T7921] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.561'. [ 185.629199][ T7917] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.564'. [ 186.562595][ T7960] netlink: 'syz.2.575': attribute type 3 has an invalid length. [ 186.589473][ T7960] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.575'. [ 186.784041][ T7963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.743176][ T8000] netlink: 'syz.1.581': attribute type 17 has an invalid length. [ 187.789884][ T8000] netlink: 148 bytes leftover after parsing attributes in process `syz.1.581'. [ 188.164538][ T7998] hsr0: left allmulticast mode [ 188.199679][ T7998] hsr_slave_0: left allmulticast mode [ 188.210397][ T7998] hsr_slave_1: left allmulticast mode [ 188.234931][ T7998] bridge0: port 3(hsr0) entered disabled state [ 188.284272][ T7998] bridge_slave_1: left allmulticast mode [ 188.303718][ T7998] bridge_slave_1: left promiscuous mode [ 188.329156][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.366625][ T7998] bridge_slave_0: left allmulticast mode [ 188.376713][ T7998] bridge_slave_0: left promiscuous mode [ 188.390514][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.627477][ T8051] syzkaller0: entered promiscuous mode [ 191.653895][ T8051] syzkaller0: entered allmulticast mode [ 194.449425][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455772][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.925744][ T8063] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.597'. [ 194.935344][ T8063] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.597'. [ 195.102040][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.601'. [ 195.152583][ T8082] netlink: 'syz.2.602': attribute type 2 has an invalid length. [ 195.169519][ T8082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.602'. [ 195.254604][ T8087] netlink: 763 bytes leftover after parsing attributes in process `syz.2.602'. [ 195.307832][ T8089] netlink: 'syz.0.604': attribute type 5 has an invalid length. [ 195.710653][ T8096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.731537][ T8101] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 195.749062][ T8101] geneve0: entered promiscuous mode [ 195.777727][ T8101] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 196.422591][ T8134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.521134][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 196.527457][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 196.532698][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 196.541779][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 199.070934][ T8142] netlink: 'syz.0.620': attribute type 10 has an invalid length. [ 199.107301][ T8154] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.623'. [ 199.152670][ T8142] geneve0: entered promiscuous mode [ 199.208343][ T8157] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.623'. [ 199.238018][ T8157] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.623'. [ 199.251283][ T8157] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.623'. [ 199.262955][ T8157] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.623'. [ 200.456871][ T8179] netlink: 'syz.1.627': attribute type 40 has an invalid length. [ 200.654724][ T8190] sctp: [Deprecated]: syz.3.630 (pid 8190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 200.654724][ T8190] Use struct sctp_sack_info instead [ 200.798000][ T8195] netlink: 'syz.1.631': attribute type 23 has an invalid length. [ 200.874398][ T8193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.596297][ T8202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.655648][ T8207] netlink: 'syz.3.634': attribute type 10 has an invalid length. [ 201.711936][ T8207] geneve0: entered promiscuous mode [ 201.801955][ T8207] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 202.040398][ T8226] __nla_validate_parse: 61 callbacks suppressed [ 202.040416][ T8226] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.638'. [ 202.126493][ T8222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.580357][ T8265] netlink: 'syz.0.650': attribute type 21 has an invalid length. [ 205.064508][ T8271] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 206.219105][ T8301] netlink: 'syz.1.663': attribute type 19 has an invalid length. [ 206.597988][ T8310] netlink: 'syz.3.667': attribute type 29 has an invalid length. [ 206.630526][ T8310] netlink: 'syz.3.667': attribute type 29 has an invalid length. [ 207.206772][ T8328] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.673'. [ 207.591183][ T8346] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 207.662891][ T8346] syzkaller0: entered promiscuous mode [ 207.679907][ T8346] syzkaller0: entered allmulticast mode [ 209.189485][ T8358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.483861][ T8366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.763479][ T8359] netlink: 176 bytes leftover after parsing attributes in process `syz.2.683'. [ 211.898129][ T8374] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.686'. [ 211.907708][ T8374] openvswitch: netlink: Key type 29 is not supported [ 212.127967][ T8385] can: request_module (can-proto-3) failed. [ 212.533888][ T8399] netlink: 164 bytes leftover after parsing attributes in process `syz.1.692'. [ 212.602262][ T8394] netlink: 164 bytes leftover after parsing attributes in process `syz.1.692'. [ 212.643652][ T8394] netlink: 'syz.1.692': attribute type 1 has an invalid length. [ 212.676798][ T8394] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.692'. [ 212.852951][ T8409] netlink: 176 bytes leftover after parsing attributes in process `syz.1.694'. [ 212.906963][ T8410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.062139][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.267745][ T8419] netlink: 'syz.2.698': attribute type 2 has an invalid length. [ 213.287778][ T8420] netlink: 14 bytes leftover after parsing attributes in process `syz.2.698'. [ 213.379950][ T8418] netlink: 14 bytes leftover after parsing attributes in process `syz.2.698'. [ 213.686584][ T8432] netlink: 14 bytes leftover after parsing attributes in process `syz.1.702'. [ 213.856280][ T8436] netlink: 'syz.0.704': attribute type 10 has an invalid length. [ 213.864214][ T8436] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.704'. [ 213.945223][ T8436] syzkaller0: entered promiscuous mode [ 213.973309][ T8436] syzkaller0: entered allmulticast mode [ 213.990977][ T6214] syzkaller0: tun_net_xmit 48 [ 214.020315][ T8436] syzkaller0: tun_net_xmit 1280 [ 214.055841][ T8440] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.705'. [ 214.067444][ T8436] syzkaller0: create flow: hash 2165667507 index 1 [ 214.099509][ T8440] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.705'. [ 214.204964][ T8435] syzkaller0: delete flow: hash 2165667507 index 1 [ 214.393919][ T8454] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 214.404109][ T8454] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 216.369247][ T8470] netlink: 'syz.3.714': attribute type 21 has an invalid length. [ 216.380084][ T8475] sit0: entered promiscuous mode [ 217.485467][ T8508] delete_channel: no stack [ 217.494161][ T8508] delete_channel: no stack [ 217.582945][ T8512] netlink: 'syz.1.724': attribute type 2 has an invalid length. [ 217.599777][ T8512] __nla_validate_parse: 2 callbacks suppressed [ 217.599793][ T8512] netlink: 132 bytes leftover after parsing attributes in process `syz.1.724'. [ 217.680855][ T8518] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.722'. [ 217.934926][ T8531] netlink: 176 bytes leftover after parsing attributes in process `syz.3.731'. [ 218.043541][ T8533] netlink: 'syz.2.732': attribute type 21 has an invalid length. [ 218.069019][ T8533] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.081716][ T8533] IPv6: Can't replace route, no match found [ 218.194700][ T8540] netlink: 'syz.1.735': attribute type 39 has an invalid length. [ 219.201215][ T8577] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 220.063858][ T8604] netlink: 'syz.3.750': attribute type 21 has an invalid length. [ 220.102019][ T8604] netlink: 156 bytes leftover after parsing attributes in process `syz.3.750'. [ 220.246490][ T8607] netlink: 'syz.1.754': attribute type 39 has an invalid length. [ 222.045467][ T6192] wlan1: Trigger new scan to find an IBSS to join [ 222.677278][ T8592] sit0: left promiscuous mode [ 223.059068][ T8604] sit0: entered promiscuous mode [ 225.144568][ T6197] wlan1: Trigger new scan to find an IBSS to join [ 227.789203][ T6197] wlan1: Creating new IBSS network, BSSID de:fb:03:98:32:0f [ 229.049730][ T8664] netlink: 'syz.1.765': attribute type 10 has an invalid length. [ 229.293947][ T8661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.796662][ T8682] ================================================================== [ 229.804801][ T8682] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 229.812730][ T8682] Write of size 72 at addr ffff888030be7590 by task syz.2.780/8682 [ 229.820653][ T8682] [ 229.823001][ T8682] CPU: 1 PID: 8682 Comm: syz.2.780 Not tainted syzkaller #0 [ 229.830303][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 229.840376][ T8682] Call Trace: [ 229.844394][ T8682] [ 229.847593][ T8682] dump_stack_lvl+0x18c/0x250 [ 229.852304][ T8682] ? read_lock_is_recursive+0x20/0x20 [ 229.857705][ T8682] ? show_regs_print_info+0x20/0x20 [ 229.862932][ T8682] ? load_image+0x420/0x420 [ 229.867461][ T8682] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 229.872943][ T8682] ? __virt_addr_valid+0x10c/0x380 [ 229.878168][ T8682] ? __virt_addr_valid+0x10c/0x380 [ 229.883303][ T8682] ? __virt_addr_valid+0x10c/0x380 [ 229.888444][ T8682] print_report+0xa8/0x210 [ 229.892889][ T8682] ? __bpf_get_stackid+0x6c7/0x900 [ 229.898033][ T8682] kasan_report+0x117/0x150 [ 229.902557][ T8682] ? __bpf_get_stackid+0x6c7/0x900 [ 229.907693][ T8682] kasan_check_range+0x241/0x290 [ 229.912632][ T8682] ? __bpf_get_stackid+0x6c7/0x900 [ 229.917745][ T8682] __asan_memcpy+0x40/0x70 [ 229.922170][ T8682] __bpf_get_stackid+0x6c7/0x900 [ 229.927118][ T8682] bpf_get_stackid_pe+0x343/0x410 [ 229.932148][ T8682] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 229.937638][ T8682] bpf_overflow_handler+0x1fc/0x510 [ 229.942868][ T8682] ? perf_prepare_header+0x1e0/0x1e0 [ 229.948150][ T8682] ? bpf_overflow_handler+0xde/0x510 [ 229.953439][ T8682] ? tp_perf_event_destroy+0x20/0x20 [ 229.958726][ T8682] ? __perf_event_account_interrupt+0x187/0x280 [ 229.964964][ T8682] __perf_event_overflow+0x461/0x660 [ 229.970254][ T8682] perf_swevent_event+0x319/0x570 [ 229.975278][ T8682] ? perf_tp_event+0x1550/0x1550 [ 229.980217][ T8682] ___perf_sw_event+0x4ab/0x730 [ 229.985066][ T8682] ? ___perf_sw_event+0x19e/0x730 [ 229.990086][ T8682] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 229.996500][ T8682] ? __lock_acquire+0x1431/0x7eb0 [ 230.001526][ T8682] ? rep_movs_alternative+0x4a/0x90 [ 230.006735][ T8682] ? verify_lock_unused+0x140/0x140 [ 230.011940][ T8682] ? kasan_set_track+0x5f/0x70 [ 230.016700][ T8682] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 230.022674][ T8682] ? do_syscall_64+0x55/0xb0 [ 230.027263][ T8682] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.033339][ T8682] ? lock_chain_count+0x20/0x20 [ 230.038196][ T8682] __perf_sw_event+0x139/0x270 [ 230.042964][ T8682] do_user_addr_fault+0x1242/0x12d0 [ 230.048176][ T8682] ? rcu_is_watching+0x15/0xb0 [ 230.052973][ T8682] exc_page_fault+0x64/0x100 [ 230.057573][ T8682] asm_exc_page_fault+0x26/0x30 [ 230.062435][ T8682] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 230.068253][ T8682] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 230.087883][ T8682] RSP: 0018:ffffc9000c877bd0 EFLAGS: 00050206 [ 230.093956][ T8682] RAX: ffffffff84348a01 RBX: 000000000000056d RCX: 00000000000004ed [ 230.101937][ T8682] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88802d3b7080 [ 230.109905][ T8682] RBP: ffffc9000c877d20 R08: 0000000000000004 R09: 0000000000000005 [ 230.117906][ T8682] R10: dffffc0000000000 R11: ffffed1005a76ead R12: 00002000000024ed [ 230.125885][ T8682] R13: 1ffff9200190efbd R14: ffff88802d3b7000 R15: 0000200000001f80 [ 230.133869][ T8682] ? rcuref_put_slowpath+0xc1/0x150 [ 230.139114][ T8682] _copy_from_user+0x8b/0xe0 [ 230.143743][ T8682] generic_map_update_batch+0x58c/0x800 [ 230.149343][ T8682] ? rcu_read_unlock+0xa0/0xa0 [ 230.154117][ T8682] ? __fdget+0x180/0x210 [ 230.158360][ T8682] ? rcu_read_unlock+0xa0/0xa0 [ 230.163120][ T8682] bpf_map_do_batch+0x3f2/0x600 [ 230.167978][ T8682] ? bpf_lsm_key_free+0x10/0x10 [ 230.172835][ T8682] __sys_bpf+0x381/0x890 [ 230.177081][ T8682] ? bpf_link_show_fdinfo+0x560/0x560 [ 230.182465][ T8682] ? lock_chain_count+0x20/0x20 [ 230.187327][ T8682] __x64_sys_bpf+0x7c/0x90 [ 230.191741][ T8682] do_syscall_64+0x55/0xb0 [ 230.196169][ T8682] ? clear_bhb_loop+0x40/0x90 [ 230.200936][ T8682] ? clear_bhb_loop+0x40/0x90 [ 230.205609][ T8682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.211600][ T8682] RIP: 0033:0x7fbf66d9e199 [ 230.216013][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.235965][ T8682] RSP: 002b:00007fbf67c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.244391][ T8682] RAX: ffffffffffffffda RBX: 00007fbf67025fa0 RCX: 00007fbf66d9e199 [ 230.252357][ T8682] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 230.260327][ T8682] RBP: 00007fbf66e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 230.268309][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.276286][ T8682] R13: 00007fbf67026038 R14: 00007fbf67025fa0 R15: 00007fffe3f88518 [ 230.284283][ T8682] [ 230.287307][ T8682] [ 230.289622][ T8682] Allocated by task 8683: [ 230.293937][ T8682] kasan_set_track+0x4e/0x70 [ 230.298540][ T8682] __kasan_kmalloc+0x8f/0xa0 [ 230.303127][ T8682] __kmalloc_node+0xb6/0x240 [ 230.307723][ T8682] bpf_map_area_alloc+0x5e/0x110 [ 230.312658][ T8682] prealloc_elems_and_freelist+0x86/0x1c0 [ 230.318379][ T8682] stack_map_alloc+0x32b/0x4b0 [ 230.323140][ T8682] map_create+0x877/0x12f0 [ 230.327553][ T8682] __sys_bpf+0x651/0x890 [ 230.331792][ T8682] __x64_sys_bpf+0x7c/0x90 [ 230.336201][ T8682] do_syscall_64+0x55/0xb0 [ 230.340628][ T8682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.346530][ T8682] [ 230.348846][ T8682] The buggy address belongs to the object at ffff888030be7580 [ 230.348846][ T8682] which belongs to the cache kmalloc-cg-64 of size 64 [ 230.362985][ T8682] The buggy address is located 16 bytes inside of [ 230.362985][ T8682] allocated 40-byte region [ffff888030be7580, ffff888030be75a8) [ 230.376967][ T8682] [ 230.379291][ T8682] The buggy address belongs to the physical page: [ 230.385733][ T8682] page:ffffea0000c2f9c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30be7 [ 230.396081][ T8682] memcg:ffff888023a27a01 [ 230.400325][ T8682] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 230.408338][ T8682] page_type: 0xffffffff() [ 230.412699][ T8682] raw: 00fff00000000800 ffff888017c4da00 0000000000000000 0000000000000001 [ 230.421290][ T8682] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888023a27a01 [ 230.429880][ T8682] page dumped because: kasan: bad access detected [ 230.436304][ T8682] page_owner tracks the page as allocated [ 230.442009][ T8682] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5775, tgid 5775 (syz-executor), ts 81614890327, free_ts 81614459307 [ 230.460437][ T8682] post_alloc_hook+0x1c1/0x200 [ 230.465224][ T8682] get_page_from_freelist+0x2181/0x22a0 [ 230.470793][ T8682] __alloc_pages+0x1f0/0x460 [ 230.475499][ T8682] alloc_slab_page+0x5d/0x180 [ 230.480179][ T8682] new_slab+0x87/0x2d0 [ 230.484345][ T8682] ___slab_alloc+0xc5c/0x12f0 [ 230.489091][ T8682] __kmem_cache_alloc_node+0x11f/0x250 [ 230.494568][ T8682] kmalloc_trace+0x2a/0xe0 [ 230.498987][ T8682] alloc_fdtable+0xca/0x2c0 [ 230.503507][ T8682] dup_fd+0x747/0xa20 [ 230.507510][ T8682] copy_files+0xaf/0x110 [ 230.511757][ T8682] copy_process+0x157d/0x3da0 [ 230.516431][ T8682] kernel_clone+0x24b/0x8a0 [ 230.520941][ T8682] __x64_sys_clone+0x1b7/0x230 [ 230.525753][ T8682] do_syscall_64+0x55/0xb0 [ 230.530181][ T8682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.536101][ T8682] page last free stack trace: [ 230.540772][ T8682] free_unref_page_prepare+0x7d7/0x8f0 [ 230.546233][ T8682] free_unref_page+0x32/0x2e0 [ 230.550903][ T8682] vfree+0x1a7/0x340 [ 230.554802][ T8682] __do_replace+0x878/0x9b0 [ 230.559301][ T8682] do_ip6t_set_ctl+0xb41/0xe10 [ 230.564058][ T8682] nf_setsockopt+0x263/0x280 [ 230.568644][ T8682] do_sock_setsockopt+0x175/0x1a0 [ 230.573665][ T8682] __x64_sys_setsockopt+0x182/0x200 [ 230.578862][ T8682] do_syscall_64+0x55/0xb0 [ 230.583280][ T8682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.589172][ T8682] [ 230.591491][ T8682] Memory state around the buggy address: [ 230.597108][ T8682] ffff888030be7480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 230.605160][ T8682] ffff888030be7500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 230.613210][ T8682] >ffff888030be7580: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 230.621268][ T8682] ^ [ 230.626624][ T8682] ffff888030be7600: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 230.634673][ T8682] ffff888030be7680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 230.642742][ T8682] ================================================================== [ 230.650808][ T8682] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 230.657994][ T8682] CPU: 1 PID: 8682 Comm: syz.2.780 Not tainted syzkaller #0 [ 230.665271][ T8682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 230.675320][ T8682] Call Trace: [ 230.678599][ T8682] [ 230.681529][ T8682] dump_stack_lvl+0x18c/0x250 [ 230.686212][ T8682] ? show_regs_print_info+0x20/0x20 [ 230.691448][ T8682] ? load_image+0x420/0x420 [ 230.695957][ T8682] panic+0x2ca/0x720 [ 230.699855][ T8682] ? __lock_acquire+0x7eb0/0x7eb0 [ 230.704878][ T8682] ? bpf_jit_dump+0xd0/0xd0 [ 230.709388][ T8682] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 230.715282][ T8682] ? _raw_spin_unlock+0x40/0x40 [ 230.720130][ T8682] ? __bpf_get_stackid+0x6c7/0x900 [ 230.725241][ T8682] check_panic_on_warn+0x84/0xa0 [ 230.730180][ T8682] ? __bpf_get_stackid+0x6c7/0x900 [ 230.735291][ T8682] end_report+0x6f/0x130 [ 230.739531][ T8682] kasan_report+0x128/0x150 [ 230.744034][ T8682] ? __bpf_get_stackid+0x6c7/0x900 [ 230.749148][ T8682] kasan_check_range+0x241/0x290 [ 230.754082][ T8682] ? __bpf_get_stackid+0x6c7/0x900 [ 230.759190][ T8682] __asan_memcpy+0x40/0x70 [ 230.763692][ T8682] __bpf_get_stackid+0x6c7/0x900 [ 230.768633][ T8682] bpf_get_stackid_pe+0x343/0x410 [ 230.773659][ T8682] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 230.779115][ T8682] bpf_overflow_handler+0x1fc/0x510 [ 230.784314][ T8682] ? perf_prepare_header+0x1e0/0x1e0 [ 230.789595][ T8682] ? bpf_overflow_handler+0xde/0x510 [ 230.794876][ T8682] ? tp_perf_event_destroy+0x20/0x20 [ 230.800163][ T8682] ? __perf_event_account_interrupt+0x187/0x280 [ 230.806401][ T8682] __perf_event_overflow+0x461/0x660 [ 230.811687][ T8682] perf_swevent_event+0x319/0x570 [ 230.816707][ T8682] ? perf_tp_event+0x1550/0x1550 [ 230.821645][ T8682] ___perf_sw_event+0x4ab/0x730 [ 230.826493][ T8682] ? ___perf_sw_event+0x19e/0x730 [ 230.831517][ T8682] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 230.837929][ T8682] ? __lock_acquire+0x1431/0x7eb0 [ 230.842954][ T8682] ? rep_movs_alternative+0x4a/0x90 [ 230.848155][ T8682] ? verify_lock_unused+0x140/0x140 [ 230.853347][ T8682] ? kasan_set_track+0x5f/0x70 [ 230.858110][ T8682] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 230.864087][ T8682] ? do_syscall_64+0x55/0xb0 [ 230.868680][ T8682] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.874751][ T8682] ? lock_chain_count+0x20/0x20 [ 230.879598][ T8682] __perf_sw_event+0x139/0x270 [ 230.884361][ T8682] do_user_addr_fault+0x1242/0x12d0 [ 230.889581][ T8682] ? rcu_is_watching+0x15/0xb0 [ 230.894347][ T8682] exc_page_fault+0x64/0x100 [ 230.898939][ T8682] asm_exc_page_fault+0x26/0x30 [ 230.903789][ T8682] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 230.909589][ T8682] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 230.929456][ T8682] RSP: 0018:ffffc9000c877bd0 EFLAGS: 00050206 [ 230.935521][ T8682] RAX: ffffffff84348a01 RBX: 000000000000056d RCX: 00000000000004ed [ 230.943487][ T8682] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff88802d3b7080 [ 230.951458][ T8682] RBP: ffffc9000c877d20 R08: 0000000000000004 R09: 0000000000000005 [ 230.959428][ T8682] R10: dffffc0000000000 R11: ffffed1005a76ead R12: 00002000000024ed [ 230.967396][ T8682] R13: 1ffff9200190efbd R14: ffff88802d3b7000 R15: 0000200000001f80 [ 230.975364][ T8682] ? rcuref_put_slowpath+0xc1/0x150 [ 230.980568][ T8682] _copy_from_user+0x8b/0xe0 [ 230.985183][ T8682] generic_map_update_batch+0x58c/0x800 [ 230.990726][ T8682] ? rcu_read_unlock+0xa0/0xa0 [ 230.995485][ T8682] ? __fdget+0x180/0x210 [ 230.999728][ T8682] ? rcu_read_unlock+0xa0/0xa0 [ 231.004484][ T8682] bpf_map_do_batch+0x3f2/0x600 [ 231.009333][ T8682] ? bpf_lsm_key_free+0x10/0x10 [ 231.014199][ T8682] __sys_bpf+0x381/0x890 [ 231.018453][ T8682] ? bpf_link_show_fdinfo+0x560/0x560 [ 231.023830][ T8682] ? lock_chain_count+0x20/0x20 [ 231.028682][ T8682] __x64_sys_bpf+0x7c/0x90 [ 231.033096][ T8682] do_syscall_64+0x55/0xb0 [ 231.037515][ T8682] ? clear_bhb_loop+0x40/0x90 [ 231.042187][ T8682] ? clear_bhb_loop+0x40/0x90 [ 231.046855][ T8682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.052750][ T8682] RIP: 0033:0x7fbf66d9e199 [ 231.057165][ T8682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.076766][ T8682] RSP: 002b:00007fbf67c56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.085179][ T8682] RAX: ffffffffffffffda RBX: 00007fbf67025fa0 RCX: 00007fbf66d9e199 [ 231.093147][ T8682] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 231.101111][ T8682] RBP: 00007fbf66e358e0 R08: 0000000000000000 R09: 0000000000000000 [ 231.109075][ T8682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.117040][ T8682] R13: 00007fbf67026038 R14: 00007fbf67025fa0 R15: 00007fffe3f88518 [ 231.125013][ T8682] [ 231.128166][ T8682] Kernel Offset: disabled [ 231.132483][ T8682] Rebooting in 86400 seconds..