last executing test programs: 45.629570313s ago: executing program 1 (id=944): r0 = socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xfd, 0xd0, &(0x7f0000000500)="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", &(0x7f0000000600)=""/208, 0x0, 0x0, 0x41, 0x7c, &(0x7f0000000040)="a82ab6f3b1359e22e1a6f88c10784ade18559551c03f4c4f51ab15eb13105c823380c07e53168e7d8e758cb9253ec36867a1e5b7963ecdd8627bd6b746b9062bbd", &(0x7f0000000280)="0ec0619eeb7e91389de20e3adef9c5b5216bd11a57a7d216fa0dd950d17ef769143f55cec71e872ee267e5a5f7d034f7e09c07c5fb7938a7dd55b2e6c23df7e41b4e8abe4d815f1a98ccf305e199e73a2e29519d9270c495bea9d0d20c1ef24c568ab4b4af65335a48baf06654d909e933d5996ab28dac042d9c12cb", 0x4, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8927, &(0x7f0000001a80)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0xa, [@fwd={0x10}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x7}]}, @var={0xf, 0x0, 0x0, 0xe, 0x3}, @struct={0xe, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x10, 0x4, 0x40}, {0xe, 0x3, 0x7}, {0x4, 0x1, 0x4}, {0xd, 0x2, 0x3}]}, @const={0x10000a, 0x0, 0x0, 0xa, 0x4}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x2, 0x1000, 0x9ca}, {0xe, 0x2, 0x3}]}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x61, 0x30, 0x2e, 0x61, 0x0, 0x5f, 0x61, 0x5f]}}, &(0x7f0000000a00)=""/112, 0xee, 0x70, 0x0, 0x401}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b40)={0x4000, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x0, 0x0, 0x0, 0x10f9f36c044dfb4d, 0xffffffffffffffe8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7fff}, @alu={0x4, 0x1, 0x7, 0x8, 0x0, 0x40, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x1}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x2, &(0x7f0000000200)=""/2, 0x41100, 0x28, '\x00', r7, 0x1b, r8, 0x8, &(0x7f0000000ac0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0x1, 0xb, 0x80000001}, 0x10, r9, 0x0, 0x3, 0x0, &(0x7f0000000b80)=[{0x2, 0x4, 0x2, 0x1}, {0x2, 0x5, 0x2, 0xb}, {0x4, 0x5, 0x2, 0x3}], 0x10, 0x7}, 0x94) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[@ANYRES64], 0x2) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800020fc47bb5e500000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_subtree(r6, &(0x7f0000000000), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4e22, 0xffffffde, @mcast1, 0xfffffffe}, 0x80, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x900}, 0x0) 45.422094091s ago: executing program 1 (id=948): close(0x3) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="1400000033000b0fd25a906cb0a07e27418c27a1", 0x14}], 0x1}, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0xce24, 0x1, @mcast2, 0x42}, 0x80, 0x0}, 0x20000000) (async) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0xce24, 0x1, @mcast2, 0x42}, 0x80, 0x0}, 0x20000000) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 45.292904812s ago: executing program 1 (id=950): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0x1}, {0xfffffffd, 0x4, 0x10006, 0x3}]}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000012053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 45.075276791s ago: executing program 1 (id=953): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0xe6}, 0x8001, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x5}, @var={0xd, 0x0, 0x0, 0xe, 0x2, 0x2}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x4e, 0x0, 0x71, 0xa}, @struct={0x9, 0x3, 0x0, 0x4, 0x1, 0x5, [{0x2, 0x3, 0x24578919}, {0x6, 0x1, 0x7}, {0x10, 0x2, 0x1}]}, @var={0xb, 0x0, 0x0, 0xe, 0x1, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7f}}, @ptr={0x4, 0x0, 0x0, 0x2, 0x4}]}}, &(0x7f0000000200)=""/43, 0xaa, 0x2b, 0x0, 0x4, 0x10000}, 0x28) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$unix(r7, 0x0, 0x2004c0c1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r8, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f00000008c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000900), 0x0, 0x0, 0x22, 0x8, 0x0, 0x0}}, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x2, [@datasec={0xd, 0x2, 0x0, 0xf, 0x3, [{0x1, 0x8000, 0x4}, {0x5, 0xfbd2, 0x3ff}], "776904"}]}}, &(0x7f0000000cc0)=""/198, 0x42, 0xc6, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e40000034c1000001000000810000000000000075e67ffbe74dd70752bda1d4154460ceaba91832b78693d805536c9aa13233172aa730fbc64e744e6cf0e5dd5d4a005f8fdecc1a54dcbb4028ebbf5d05de593aab41226a0300009f7b504afa49b8951682a6843b327c88923590bde80ce91e3a7afae3c90815e17e4e9f1aac818d70428df0e8c05a139ba6d7c0933073cbb1d6b2c044f34bec324577d06f0ff3f1359f3eb61e96d084d4107fe55b4b28b6cfa8bd85421ed92f17bad2204c42bdfd9c9fc6c70e67e12aa17ce756bd50d179ac478c6fec", @ANYRES32=r10, @ANYBLOB="b73700"/20, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0500000000000000050000000a00"/28], 0x50) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x35, 0x8bb8, 0x10001, 0x204, r7, 0x8, '\x00', r11, r13, 0x1, 0x2, 0x2, 0x6}, 0x50) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000080)=r6, 0x4) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) 44.952160672s ago: executing program 1 (id=955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000400014002020c600e41b0000900ac00ac0701000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000002c0)=@abs={0x1}, 0x6e, 0x0}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x6, 0x0, 0xb, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="fffbffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000001000047bad3130001000000559a90000000000000000000b5d72c627ef702496052438bdbe6b06e229666311210bf8fa9342466ee640bcb65a644e67f8a88d10a945b511c918bd6d81e8ca5eb85846bd1754d3da96c9a0a5368c6"], 0x50) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200a02, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f00000002c0)) 44.114419296s ago: executing program 1 (id=959): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x2}, 0x20) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100), 0x5000) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x173c5f7a1a1674d4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x9, 0xf, 0xe, 0x2, 0x0, 0x8000000000000001, 0x80140, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x800, 0xef, 0x7, 0x8, 0x6a80, 0x3, 0xf800, 0x0, 0xbd7a, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x98, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6409d99b, 0x0, 0x0, 0x0, 0x1, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="0000010000000000000000000004000000000000976ba056cfd630b3a91ab8f21902dc9951e6f3eaa7708cc6615d5efa7a158eb7e34a3781f025d95dd024ad52ac6f1fb8feb3bbce1861782ec6be1dcba29cbc0fa68d58fce19ea3731c63d75568932638d410a3c9212f9ed3d58f2fc24e83193339b40a9839ccdb26aaac861b021fb163cb5135c189e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40222000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0xc05, 0x0, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000022007d283840253ada4785391f890b0f", 0x14}], 0x1}, 0x4000010) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40010) 28.780983223s ago: executing program 32 (id=959): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x2}, 0x20) r1 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100), 0x5000) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x173c5f7a1a1674d4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x9, 0xf, 0xe, 0x2, 0x0, 0x8000000000000001, 0x80140, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x800, 0xef, 0x7, 0x8, 0x6a80, 0x3, 0xf800, 0x0, 0xbd7a, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x98, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6409d99b, 0x0, 0x0, 0x0, 0x1, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="0000010000000000000000000004000000000000976ba056cfd630b3a91ab8f21902dc9951e6f3eaa7708cc6615d5efa7a158eb7e34a3781f025d95dd024ad52ac6f1fb8feb3bbce1861782ec6be1dcba29cbc0fa68d58fce19ea3731c63d75568932638d410a3c9212f9ed3d58f2fc24e83193339b40a9839ccdb26aaac861b021fb163cb5135c189e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r4 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40222000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0xc05, 0x0, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1400000022007d283840253ada4785391f890b0f", 0x14}], 0x1}, 0x4000010) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r6, &(0x7f0000000200)='cpu.pressure\x00', 0x2, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40010) 2.567368573s ago: executing program 4 (id=1234): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext={0xc8e6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @perf_config_ext={0xc8e6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x10001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 2.315707675s ago: executing program 4 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87"], 0x66) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3f}, 0xe00, 0x3, 0x7d, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff9, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES64=r6, @ANYRES32=r0, @ANYRES16=r6, @ANYRES64=r3, @ANYRES16=r2, @ANYRESOCT=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRESOCT=r7], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x80108907, 0x0) r11 = getpid() perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, r11, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r13) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x8020) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRES32=r4], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b564", 0x2}], 0x1, &(0x7f0000000d80)=[{0x18, 0x12a, 0x4, "bf"}], 0x18}, 0x8080) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) 2.176190677s ago: executing program 0 (id=1236): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0x1}, {0xfffffffd, 0x4, 0x10006, 0x3}]}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x1200) 2.123188612s ago: executing program 0 (id=1237): openat$tun(0xffffffffffffff9c, 0x0, 0x2800, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000000)=""/254, 0x26, 0xfe, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) 1.948102358s ago: executing program 0 (id=1239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x10) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e8a9b", 0xd8}], 0x1}, 0x0) r6 = syz_clone(0x20001000, &(0x7f0000000880)="930d421f526c1834321bd3bed6387af1ffaf95791265f00839e8479f547714d7c99a3ec3de8123384f27f9b0eff68a6037c6c62a4e209acc79fcf7aab40f3c8eaf70072830468f9bf4210b9f0de166dabb3e6b66db83a82f6670f544703afe29fa665a7fd6dfc923e948c15bcec2634541ed0a9930d7f2fe073042698f2a72c299103159437d857bb961ccb9105a2e02a33687ac7bb367bc1c6fa117454bf91252d86a55c7f148fed7daffaedfd829d6db128c18dbc59189ffa7efadd185151e97c97b3a4d8b918dad8b7ca337cad2bbb1d84fbb3bb8f4d61c9a944c466b32fa9e7f8f76cf", 0xe5, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="46fa0d8035b275ba5d61f470c003c9af6dcbb834515ceffdb7afdcd5b37b7f6294f83b790d89462203e6e37b37b8a3b761fbddbbaecc139e0aa2d8fe3cf5242f06b5528f862afec66c071e14892a4f12809a29eda7d7082c053cb9df88ec16d939324e8e4ad32ceb76a1938105b02f4e694416b70bdf923d2c7363a2dce505dc89b9ad0cd23093babb813f21a6ba780a711abd94ee6d416336b2669cbedb85b85eaef54f357cb07f5134cf0dd13de2bc272e3f27bccc688e907405e88ff9ec249c92161b34b94a542bbde9364ceced9d1414a8b69f93997d567ee34d21955ea992d6c8b18b275856") r7 = syz_clone(0x20000000, &(0x7f0000000c00)="92e656cc365e40335b3cca77526c60578eb7f4adb3b96d4103920b929a222b1dbb6a1b046568f98997fc09a80add9e89862a7b2fee01e9a5e49d9b1f406d2f95e6e4b213577379a151cd44001b119e9e5565b45a4c16534d67e01d35209268ecfd28615b9dbe02689522f6bffe91d8ab89d66122132e869c589b14d463f15ef94e54be1384efdb4e525c0c7704c1670700ac7f6b4a9f2ff133318bad02086757754c77a51f9ad59cfdf7665bfc5677fb9d79a318f4e4b7423a3d69dff451c3c8e085cd7d303df6b82a6af0b8f0cac8", 0xcf, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000d00)="89629bae1fef289cf3ff5610a928bf6a50e8f4a870cda52af8a97bf1deeb91f9d30c90cbcb28c03d47e22982f445fb2ac6c301afe2b187371b53c9e3114bd426a96bf564318cf0e4c703c7ed0bbed318d8010b9a7dc08cfaa8dbf1e6950bdbd1a2e383176b6049485c3e4e39c81b8476f18af2ae914f56de22e6f7ec43d7d5ce1345f11affce4b") sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000400)="9544416d6240e767600518bfcfba74060f474d195c3818c7f764f171ce505bab2d42317fb6832b392a6d1643246d59988e5a7067eda7f77d104bf9d1d201976ef9bfca9e03f2dbba9fadbe16d10d32a40bbb7825daab1859699ca133afb64ad74de9eba9c8e4cb7e6bb2d882819a54cac5b885ac7fa0079e988e34d3d5e74d3bf0d1f01e1c22c75b368e2dfb21e5b5f5ac85c8fd7b591687bf29884d14a47ded5ba3f23794f8272fb0bf6d9905e10cb86e1dc60d9e", 0xb5}, {&(0x7f00000004c0)="b6101a3da000d8be5b7b0f4d7cc78cf891c0c02fd377bb4cc1f52a6af5c0fb580b4080e94f98938fbb327d538333549443f4af4c7f396687e66a9bcd171b01e719bf81c52e74b40d27c74bf19e276eafdb355b9848ae26f3baa493d97400f84932441a8b64bf4958622ba02804a37250809ae9c72640fcf8ca9114f614c7de211de921bb2ac5e37ebc3e40e0ebdf02c1376be26a32f4e9c0f10bce08fff98faf6f13793974b086ef33b9882a58446ffee93906afa299f58de2efbd02c78c6864c661cb0f58ea195710234b4068ae4e60e33b161b93d5d310f383c413f4b4115c6a", 0xe1}, {&(0x7f00000005c0)="90330b7eb775f20fb38ca3e4a80d034fdaaed734c328f8e277671a84bfb8448d8ac77f65d18a4618d66db58be81d78f759f4bd91bb0130ed4bcb6b72f935205385cb7a4e7d0a6c02ae9a140ff5238914502c4180b381cd2f0b303e98f311f7742d63aec0108fb4df001a5f0bb153760566915f695b958347be08936234489b36406eea63604874c6245a3b15a401a7ec6bae53a98bc6931be7264097ddd372b2e16347378f960f427f3c96f5908539194f2d3ba03e843992", 0xb8}, {&(0x7f0000000680)="b293dbf71b48a3aa7f0532783048e661efb588d348f4e8b7953681d2e463710b6662daaad400fe4523cf146f7386f3c593d2dca5f07db183a8b1818a39e8602b5eabdc0de81c2a43cdd0bd21c706d06fb00929bdb8c5c3d8173a309acdbbcce60d804940b2052486251daed1c0c743e68637983bc628de92441e5636c5b9dd0b4d191cf14ddea730ae63ab1f4d101227a201263142383ac026d44508e85cc422d3397d709db8cd1a9d24a6b862283360ef5860aafc56391c1cddd79c52567ffc161bcb9017053f4fbae56be3", 0xcc}, {&(0x7f0000000780)="012423f4786eadfbbaab598bb26a871fb2465624eaf684ff3e0fdb081a164f3bba838c8c1ff1ec48ea2ea22b63265e8024afb5114a678e043a62688976d8b9fe78a8e7ee7440c96f9765", 0x4a}, {&(0x7f0000000240)="ed3141309434cf1338073d40", 0xc}], 0x6, &(0x7f0000000dc0)=[@rights={{0x20, 0x1, 0x1, [r1, r2, r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xffffffffffffffff}}}], 0xa0, 0xd2}, 0x4040040) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='qdisc_reset\x00', r0}, 0x18) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000f80)='qrtr_ns_server_add\x00', r5, 0x0, 0x2}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r10 = socket$kcm(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r10, 0x6, 0x1b, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r12, 0x0, 0x0}, 0x10) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="2e00000010008188044796f711acbc0413a1f848290000007e140602000000000e000a000f000000028000001200", 0x2e}], 0x1, 0x0, 0xffffffffffffffbd}, 0x400c084) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00'}, 0x18) 1.827848928s ago: executing program 3 (id=1241): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4090, 0xffa}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {0x0}], 0x4}, 0x40016002) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, 0x0, 0x9}, 0x20) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x4e, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x400000000000003, 0xfffffffe, 0xfffc, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x18, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000002000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x5, 0xb, &(0x7f0000003580)=ANY=[@ANYBLOB="1808000000000000000000000108000018010000786c6c25000000000020000000bfa100000000000007010000f8ffffffb702000008000000b70300008b09000085000000060000009500"/88], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)="5c00000012006b906fdfe1ef704ad931c605876c1d0000007ea60864160af3650400400038002e000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e4509c5bb5b64f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.344782041s ago: executing program 3 (id=1244): bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0xb6, 0x0}, 0x8) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r0, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x9, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000140)='syzkaller\x00', 0x7fffffff, 0xf6, &(0x7f0000000180)=""/246, 0x41100, 0x19, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0x8, 0xffff}, 0x10, 0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000300)=[{0x0, 0x2, 0xf, 0xb}, {0x0, 0x3, 0xc, 0x2}, {0x1, 0x3, 0x2, 0x5}, {0x5, 0x4, 0xc}, {0x4, 0x4, 0xe}, {0x1, 0x1, 0xb, 0x1}], 0x10, 0x6}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000000440)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8d99}}, @generic={0x6, 0xa, 0x4, 0x2, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000540)='GPL\x00', 0x5, 0xd1, &(0x7f0000000580)=""/209, 0x41100, 0x6, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x2, 0xd7c1, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000700)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000740)=[{0x2, 0x4, 0x5, 0x5}, {0x4, 0x7, 0x0, 0x5}, {0x0, 0x4, 0x9, 0x6}, {0x1, 0x2, 0x2, 0x8}, {0x2, 0x1, 0x4, 0xc}], 0x10, 0xa}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@map=0xffffffffffffffff, 0xe, 0x0, 0x2, &(0x7f0000000880)=[0x0], 0x1, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x3ff, 0x6, 0x40, 0x44208, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0xa}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000a80)='\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map=r6, r2, 0x24, 0x20, r3, @void, @void, @void, @value=r7, r5}, 0x20) close(0xffffffffffffffff) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000b40), 0x143000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000b00)={@fallback=r8, r2, 0x12, 0x0, 0x0, @void, @value=r3, @void, @void, r5}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xd, 0x3, 0x2, 0xfffffff7, 0x14020, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x13, &(0x7f0000000b80)=@raw=[@ldst={0x1, 0x0, 0x2, 0x4, 0x3, 0x40, 0x10}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6b1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000c40)='syzkaller\x00', 0x6, 0xfd, &(0x7f0000000c80)=""/253, 0x40e00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000dc0)={0x2, 0x2, 0x0, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[r9, r6, r4], &(0x7f0000000ec0)=[{0x5, 0x4, 0x0, 0x3}, {0x4, 0x2, 0x9, 0x8}], 0x10, 0xa7}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001040)={r9, 0x58, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8) openat$cgroup_int(r11, &(0x7f00000010c0)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000001100)=r3) socketpair(0x5, 0x6, 0x25, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f0000001180), 0x4) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000011c0)={r7}, 0x4) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001200)=0xffffffffffffffff, 0x4) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', r10, r15, 0x3, 0x1, 0x1}, 0x50) sendmsg(r13, &(0x7f0000001600)={&(0x7f00000012c0)=@l2tp6={0xa, 0x0, 0x9, @remote, 0x14}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)="9e5eae05d4cebf4214ad311e0b9f5f4f9fb28e486c6b4bb98311824ee515d8981497badc8afe7e33f865f4e94afa2a15f1236cec3ec2114a18b9ca17648dac33", 0x40}, {&(0x7f0000001380)="76fa9ab9725079ca8f1333dfb0596566c1c1ff3adf67ff26a61b45890a8ea9cbad20828205617db93c1e0ea287cbbefe59349db663e7d21f79ba06d56fb79a6330b92853d8448935c4e119ff02270b3456a2c90af7c859f883518d9072", 0x5d}], 0x2, &(0x7f0000001440)=[{0xa8, 0x18a, 0x8, "1f294a248e581cd6c93719cafc22a6808f1954b450ba19c7d25208700f1fa99c1f4ac1810d51b03f7d46bb5d7b3fe9ff2661c19f006ff1855af2dc7f104f8962ab6b55c4f7af39064eea6b919f797e946c36b3f8e6e7d46e75febea034bbe31d4d8c52f91b5e36f5c9e54ad569544afe85864bd9e88d33ee394d098606806d930609f0945862d449edd44a02d3baf7b665ead34251"}, {0xe0, 0x110, 0xffff6ebb, "bd1ded0d989ab398a693a3bf0ef45f07bfaa21efc91208daf4e105195c643c6d75a952d1ee32df067ec2f02844cb6b4f1826f5bdf44a0d03699834ef6b920ccc9aed5974a38c421dc30af852b2b6cf47ab2196c5d755366221d900a9fd05a51d873dc56c61027ebd0c7fa52a4551bf2a8358e8053ba44cb574eec9a7a91bc8e72f8bfd0d7b169efe6ce8a9c9375becc2107a1463bf3da64316bcd4997ff8364fd117f9b2f445678073e5deb18316b519d885729a5e43aeb8c31501f32aa78bb1869e1a0d5850c4923fe2d5804c4db0"}], 0x188}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r12, 0x89e1, &(0x7f0000001640)={r12}) r17 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002980)={&(0x7f00000027c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x12c, 0x12c, 0x9, [@struct={0xe, 0x7, 0x0, 0x4, 0x0, 0x4, [{0x8, 0x4, 0x8000}, {0x0, 0x3, 0x42fd}, {0x8, 0x2, 0x7d9}, {0xc, 0x3, 0x81}, {0x7, 0x2, 0x6}, {0x8, 0x3, 0x3}, {0x10, 0x4}]}, @struct={0x2, 0x6, 0x0, 0x4, 0x1, 0x5, [{0x2, 0x0, 0x3ff}, {0x2, 0x4, 0x86}, {0xe, 0x5, 0x8}, {0x3, 0x4, 0xfffffffb}, {0xc, 0x1, 0x100}, {0x10, 0x5, 0x7}]}, @enum64={0x9, 0x9, 0x0, 0x13, 0x0, 0xa, [{0x5, 0x1ed9, 0xc93c}, {0xf, 0x0, 0x87c}, {0x3, 0x8, 0x18b57639}, {0x7, 0x5, 0x4}, {0x6, 0xfffffff9, 0x8f}, {0x1, 0x7, 0x2}, {0x10, 0xffff, 0x40}, {0xb, 0xa, 0xffffff7f}, {0x7, 0x0, 0x7}]}]}, {0x0, [0x30, 0x61, 0x5f, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000002940)=""/64, 0x14d, 0x40, 0x0, 0x9}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002b00)={0x11, 0x1f, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x2, 0x0, 0x1, 0x8, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x4, 0x3, 0x2, 0x8, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r16}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001780)='GPL\x00', 0x8000, 0x1000, &(0x7f00000017c0)=""/4096, 0x40f00, 0x4, '\x00', r10, 0x0, r17, 0x8, &(0x7f00000029c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000002a00)={0x0, 0xd, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002a40)=[r6, r16, r4, r11, r16], &(0x7f0000002a80)=[{0x1, 0x2, 0xb, 0xa}, {0x3, 0x5, 0x5}, {0x5, 0x1, 0x0, 0x6}, {0x3, 0x2, 0xa, 0x6}, {0x4, 0x1, 0xd, 0x2}, {0x5, 0x1, 0x2}, {0x2, 0x2, 0xc, 0x9}, {0x2, 0x4, 0x4, 0xa}], 0x10, 0x8}, 0x94) recvmsg$unix(r12, &(0x7f0000002d80)={&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c40)=""/134, 0x86}], 0x1, &(0x7f0000002d40)}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002dc0)=r0, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000002e00)={r13, r14}) 1.231399801s ago: executing program 4 (id=1245): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xfffd}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x70}, 0x0) 996.202662ms ago: executing program 3 (id=1247): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0x1}, {0xfffffffd, 0x4, 0x10006, 0x3}]}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0xff0f) 993.684132ms ago: executing program 5 (id=1248): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r4 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) (async) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x103005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) (async) socketpair(0x28, 0x80000, 0x10, &(0x7f0000000040)={0x0, 0x0}) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x9f) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faf7ffff00000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00004000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095", @ANYRES32=r8, @ANYRES16=r5, @ANYRESOCT=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r9}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000080), &(0x7f0000000180)=r9}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x19, 0x8, 0x8, 0x0, r6}, 0x50) 992.072292ms ago: executing program 0 (id=1249): syz_clone(0x81c0000, &(0x7f0000000000)="f908bb8ed5c2", 0x6, 0x0, &(0x7f0000000080), 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_clone(0x200, &(0x7f0000000180), 0x0, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c80)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40), 0x4) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000036120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r1}, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000)) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24004094}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 991.715842ms ago: executing program 4 (id=1250): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10001}, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000003f40)={&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000040)=0x1) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r4, 0x29, 0x1b, &(0x7f0000000100)=r5, 0x120) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r8}, 0x18) r9 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r9, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) 948.025596ms ago: executing program 2 (id=1251): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x5a}, 0x28) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x5, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_config_ext={0x8000, 0xaea}, 0x10105, 0x49e, 0xfffffbff, 0x3, 0x500000000, 0x0, 0x6, 0x0, 0xffffffff, 0x0, 0x403}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="11000000520081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x4259d1e1028d201) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/103, 0x67}, {&(0x7f0000000380)=""/176, 0xb0}], 0x2}, 0x10103) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x10d, &(0x7f0000001540)=""/269, 0x729c10b274fd1a11, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB], 0x48) close(0x3) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001500)=ANY=[@ANYBLOB="020000000400e2560080080000000100000080000000", @ANYRESOCT=r5, @ANYRES8=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f00000003c0), &(0x7f00000019c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800001285000000a50000009500000000000000"], &(0x7f00000014c0)='syzkaller\x00', 0x5, 0xffd, &(0x7f00000004c0)=""/4093, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x0, 0x5, 0xc0, &(0x7f000000cf3d)=""/192, 0x40f00, 0x76, '\x00', 0x0, @fallback=0xa, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000280000000800000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r7, &(0x7f0000000040), 0x0}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x18, 0x5, 0x0) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) r8 = perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffe, 0x0, 0x8}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x29) socket$kcm(0x10, 0x4, 0x10) 784.075251ms ago: executing program 5 (id=1252): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x3001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9d0000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000600000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) (async) close(r1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000006000000ff0f000005"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a", @ANYRES16=r3], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r5 = socket$kcm(0x10, 0x58a088fa9961002e, 0x4) sendmsg$sock(r2, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000001500)=[@txtime={{0x18, 0x1, 0x3d, 0x8e08}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xff3e}}], 0x48}, 0x800) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000040)}], 0x1}, 0xff0f000020000080) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x20}, 0x0) 776.617651ms ago: executing program 2 (id=1253): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24040810) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x0, 0x7fff}, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x69}}, 0x0, 0x400000}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) 776.047061ms ago: executing program 3 (id=1254): r0 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 715.291466ms ago: executing program 0 (id=1255): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20008810) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)}, {&(0x7f0000000440)="b66e881b1ac487862a68fccf8f62be6c97807bb3f0e2f0729ff3aed04a1ebe5b1aa8c69a3cb8f504addf53e91b507a1781ac9a17644bff18b3f5f427c37d2de052906affc7bffe7db65c6eccb6028f6051cb49a63f964e15", 0x58}], 0x2, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0xe03}}], 0x30}, 0xc004) (async) perf_event_open(&(0x7f0000000200)={0x2, 0xffffffffffffffc6, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12b, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="85000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x1c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x9, 0x2, 0x4, 0x8a, 0x0, 0x3, 0x10008, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f00000003c0), 0x9}, 0x100088, 0x55d, 0x7, 0x4, 0xffffffff, 0xa, 0x8, 0x0, 0x7, 0x0, 0xf}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close(r7) (async) socket$kcm(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x001\n\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="02cb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00005975a35e96270000000000000000000000000000000000000000cdd52c26ad307bdfebd3827381324372a77a28737824d8ffb920760df8578105a12111d2c90bdfe3a440bc81df0591a79c8f93f24c6f20ecbe9c4297a1972365e2dc99bcb283560a5a558ad241f631d724a801ff96697993109a98cfee805f1330f5fccf9790a0d6095bbf5da7b33a7a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000300), 0x207, r8}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r8, &(0x7f0000000880)="e30e68728497c4f9be48707e1fa0d060831ca62b239ab0331a1b1997b028835cad2bbab054a980e54b69ddfccf5eb1a5915130cc626b63b72c292a7ba131cda7ee1b74b8ddce7920efebee6f72b809a71bba4ebc5ac7bb673a6b4b0a519b520e3b12f4fbce9456b3b88632a67e807c318fe1336faf0061", &(0x7f0000000840)=""/49}, 0x20) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b70500000800000085000000ab00000095"], 0x0, 0x2}, 0x94) 620.279815ms ago: executing program 4 (id=1256): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) socketpair(0x1, 0x800, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) close(0x3) 619.900265ms ago: executing program 5 (id=1257): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r0, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0xf, '\x00', r2, r0, 0x70, 0x2, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x8, 0xdd, 0x2, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x2, &(0x7f0000000040), 0x17) close(0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r5) sendmsg$kcm(r5, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, 0x800) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x1, '\x00', 0x0, r5, 0x1, 0x0, 0x5}, 0x50) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f00000008c0)=r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000880)={r4, r7}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="00000000030000000300"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x10000, 0x2c, &(0x7f0000000200)=""/44, 0x40f00, 0x20, '\x00', r9, 0x25, r5, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x7, 0xffffffff, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=[{0x3, 0x1, 0xf, 0x1}, {0x3, 0x4, 0xc, 0x8}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3ff, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 618.998665ms ago: executing program 2 (id=1258): socket$kcm(0xf, 0x3, 0x2) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 535.433363ms ago: executing program 5 (id=1259): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000040)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8919, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 531.383903ms ago: executing program 0 (id=1260): r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000000)='/proc/sys\x00\x00\x00\x00\x00\x00(O\x00\x00\x10\x04\xba?BVEm\xe39\xf7\xe3\x9es\xa8\xab%nN\xd4\xa2=\x11\xc8\xdd\x15\xcc\x00\x00\x00\x00', 0x0}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x10020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a, r4}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x22, 0x12746, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x4) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r8, @ANYRES32], 0xfffffffffffffe13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000086d30000000100000080000000", @ANYRES64=r1, @ANYRES32, @ANYRES32=r7], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x20, &(0x7f0000000580)={&(0x7f0000000480)=""/74, 0x4a, 0x0, &(0x7f0000000500)=""/105, 0x69}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r9, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x23, &(0x7f00000001c0), 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 523.060654ms ago: executing program 3 (id=1261): syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_skb}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}, {0x2}]}, 0x94) (async) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) (async) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, 0x0, 0xa4ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) ioctl$SIOCSIFHWADDR(r3, 0x8924, 0x0) (async) r5 = syz_clone(0x100100, &(0x7f0000000500), 0x0, &(0x7f00000001c0), &(0x7f0000000380), 0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0xe4, 0x6, 0x27, 0x0, 0x9, 0x80, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f00000000c0), 0xc}, 0x101830, 0xb512, 0x3, 0x2, 0x8, 0x0, 0xfff, 0x0, 0xfffffff9, 0x0, 0x6b}, r5, 0x10, 0xffffffffffffffff, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) close(r8) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="a597180010000000850000001f000000b47b0200fcffffff85100000fdffffff1817000076edcc729ec1305f2d25c6a691130c385cf97999f82912e8e70f7281e4c597ca347276c7", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x4c, &(0x7f0000000240)=""/76, 0x40f00, 0xc4, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[r3, r3, r8, r3], &(0x7f00000005c0)=[{0x1, 0x4, 0x1, 0x5}], 0x10, 0x5}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe25) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f3, &(0x7f0000000080)) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="1c0000001a007f049e", 0x9}, {&(0x7f0000000140)="03000000fb73fc8040250080f2dc06a9258f2e", 0x13}], 0x2}, 0x0) 419.617673ms ago: executing program 2 (id=1262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r2, r1, 0x0, 0x60, &(0x7f0000000140)='~)\x9c-\xa9\xf9[\xa7\x0f\xe6\xee\x99/\td\r\'\xdfG\xc8\xb3f\xe9\xfa\\\x1b\x8b\x03I\xae+\xea\xda\xf9\xbf\xd3\xf1\xfa\xa7\"{o\xa2\xd7\xb2\x97(\xa7Y\x99\x8cn\xb7\x1aO\v/u\xf1\xfc\xf5\xb0\xcd\x9bZ\xd1SZWy7\x96\xaf/\xa3\xc4\xea\xa1\xb5\xf9VQ\xea;\xf8\xa8\xc4\x9d\x9c\xc2\xe5\'\xaf\x9c\xb5b'}, 0x1c) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffc, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x81, 0x3, 0xffffffff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1c0010000410000061af6d0200"/27, @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000002000200"/28], 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = syz_clone(0x10221100, &(0x7f0000000440)="066cf5a6ff9826918791a882dcc6837e8dd3a754f28acbfb39b84d3b5f35711961f09674cf83911d41f6be4ea1a7f7bd53587a60fb532d5cb0573e0abe1a813951a811523ff4c82bc11910e58126d95d31e861ffc5accd958ad794b535764d4e8518a0a05e85c33d3aaa3cf66daa3ba2b9a7a56ccb8b", 0x76, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x7, 0x5, 0x7, 0x49, 0x0, 0x0, 0x80400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040)}, 0x8, 0x3, 0xf46, 0x2, 0xffffffffffffff7f, 0x0, 0xc}, r6, 0xf, r1, 0xa) r7 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r7, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pB \x00'}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000040000000600000003000006040000000400000005000000020000000300000007000000f80000f81000000000000012030000000f000000000000090400000000305f40b368b278aec86688e4956ae6fa7fb8366c3cf88e"], &(0x7f0000000900)=""/158, 0x58, 0x9e, 0x0, 0x6}, 0x28) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26}, 0x28) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xd, 0x10, &(0x7f0000001c80)=ANY=[@ANYBLOB="180000000800000000000078c1fb567153af5115a913000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000346020007000000bf91000000000000b7020000000000008500000001000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x68}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r11, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000012954048000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r11, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x0, &(0x7f0000002180), &(0x7f0000000880)='GPL\x00', 0x29dd, 0xe9, &(0x7f0000001a80)=""/233, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001b80)={0x4, 0x4, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x1], &(0x7f0000001c00)=[{0x2, 0x3, 0x4000000a, 0x2}, {0x4, 0x4, 0xe, 0xd}, {0x3, 0x2, 0x7, 0x8}, {0x2, 0x2, 0x6, 0x6}, {0x5, 0x2, 0x10, 0x8}, {0xffffffff, 0x3, 0x6, 0xd}, {0x1, 0x1, 0x4000003, 0x6}, {0x5, 0x1, 0x9, 0x2}], 0x10, 0x8}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="1e00000008000000020000000900000080200000", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001000000040000000a00deffffffffffffff000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000950000000000004018130000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000758a000010000000bf91000000000000b7020000030000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x1000, &(0x7f0000000980)=""/4096, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x10, 0x3, 0x678}, 0x10, r12, r13, 0x3, &(0x7f0000001ec0)=[0xffffffffffffffff, 0xffffffffffffffff, r14], &(0x7f0000001f00)=[{0x4, 0x3, 0xe, 0x1}, {0x3, 0x3, 0x6, 0xa}, {0x5, 0x3, 0xa, 0x5}], 0x10, 0x9}, 0x94) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r16 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r16, 0x1, 0x3e, &(0x7f0000000100)=r15, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x20, 0x39, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xad4}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x2, r9, 0x8, &(0x7f0000000a00)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, r0, 0x5, &(0x7f0000000a40)=[r3, r4, r3, r4, 0x1, r15, r3, r3, r4], &(0x7f0000000a80)=[{0x3, 0x1, 0xf}, {0x2, 0x3, 0x9, 0x5}, {0x5, 0x5, 0x8, 0x5}, {0x2, 0x5, 0x10, 0xa}, {0x0, 0x3, 0x2, 0x9}], 0x10, 0xd}, 0x94) r17 = bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0xb, 0x6, 0x5004, 0x7, 0x1, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80}, 0x50) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r18}, 0x10) gettid() sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffeeb, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f03003b000b05af5a80198c6394f90424fc6010000494c5511af1126c000a000280f83437040001804d39c43833fc79514636e1e781c8c92c7cafae43984086e314588342b4e5e5693ec3c90d5d000000006973b437c695e6bec80814b2c273e8d9c55119a5b9c9aff5730c548ac52e5ecb8ad5f4f14a46ed277d22752624013213d2c189f5d25a9d235579f9321e6d543efa5acfa301a91e6a21df03ea8a7f0275b6447d16c9ab1ea2663ebabdc04ef60ca4142dbf6c2d5cb1faab5d6598b94d45d4573d289e4d1aeca7391e6040127a62156eb6c6a1382b917e1bbad0b1effe4087e1b07493d8807a60bbcb33c2bea2c8e8333a817fc194b61bfe031030b20a1a26a4168816680632cd3b989165b85eaf3052a57460c3d60e8b777f5adc30abd17cce88634cc2a4dee777d6de34b172d2ac47ea9a6a439eac232fab7e57f51cfb125720670ec90bfa256ce9b0c86033d33924c3747dd4eea80701a65a4b02c029f600e39456856258b48c3622e65e452bc8aba6fe8214c02553e866d3197b9d30efb4af01e1dddfdac0f7424f9726a56f47c202dcd07daa2330749d936ab38ae5952138c07c4ab3f5b69d6fc837f32d1f3f381be8aa5b52b51dc7b781d7313ec32483481c8732dc557cb581f17e93c58d5b70b53fed283a176aeefc276f60d5163911a5b227c1e2411be4e9bbb68050779876533444675946b883cb7f0a2812e926c7cd466202c992fc058d3da644892ad98757e27a1529f3ab16ea7312b154826f48d4648448eb6aa427427d40a3bc72ea342e", 0x33fe0}], 0x1}, 0x0) 383.807596ms ago: executing program 5 (id=1263): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={&(0x7f0000000180)="2559813b7c6ff3a695e4d8fab8988ae516a7c901a11ea3076a74933272bcc7c286115adfe190bb782f9060091b47c99116cc337ec6d110e624b434f1bc1dbe006183d218ad31c12d6d52ccdb7b6f02ca9d61f7ede753e71dcb0e4895a0659d1802eb39cb5f4ecd43d70652f916eedb9d83a81bbf987527bff6f73fc51e2fbd0ab70ca38029c978dd2cf0639a770cf85d6b35e5ad146e0587cd1aa780cd48e636fdb5b4b90d845bfd330365df6aae4f8c7db9ac25989117928022018e458439b9e0cbf8179ef2737abe09e57dbf88d8e706b71f8feda04a587d4c7aaed914103f", &(0x7f0000000000)=""/69, &(0x7f0000000280)="477dc92bba5e195b49a76c63fb24608934575a544a5a43bf990d74138beacb05ee086d095650403661dbe6c69ef4165d69b8388b3a9b9037320c447fca6617685d61983fa1ed", &(0x7f0000000300)="b204d62554be101d2ad37429362ae0a2dc157c0d9aadcdb2c2902db70550f68ebd0892fca974bf8c29d5fb41e3e94a4a77c25492b5021e05bfc36a6537e04b4df65a63a352d179142426079fa0fde9b3fc24de2ebbd43b1a843b10b28459f104b0310f1b2f93eff5117e5e6712abce41814e30f6e95efcd09bca8dcad4ad31481bc8bc579e453d0f3016f0340ef3fb8c95d6e9cdfd112cdfce0525d420be36287a724bda05aea73940d4e7a330392aa50248cd3b37a1354fd0638704ceca35e8cade35", 0x2, r1}, 0x38) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xca}, 0x0, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xe) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000400001800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x14, 0x6, 0x6, 0xf49, 0x48, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, r5, 0x2, 0x4, 0x5}, 0x50) 359.408288ms ago: executing program 4 (id=1264): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x2}]}]}, {0x0, [0x30, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/170, 0x32, 0xaa, 0x1}, 0x20) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r3, 0x0, 0x0, 0x4}, 0x20) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x3, 0x7fe2, 0x1, 0x12}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000001c0), 0x0}, 0x20) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r4}, 0x38) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xc352, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x90, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000008c0), &(0x7f00000009c0), 0x8, 0x88, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@bloom_filter={0x1e, 0x2, 0x40, 0x8, 0x26000, r7, 0xa0a9, '\x00', r8, 0xffffffffffffffff, 0x2, 0x3, 0x2, 0xc}, 0x50) r10 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x25, &(0x7f0000000000)=r11, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000f904000400"/20, @ANYRES32=r3, @ANYBLOB="0500"/20, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="00000000040000000400"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async, rerun: 32) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xdc}, [@generic={0x8, 0x8, 0x1, 0x3, 0x200}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x3, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0xf, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[0x1, 0xffffffffffffffff], &(0x7f0000001700)=[{0x1, 0x1, 0x10, 0x9}], 0x10, 0x4}, 0x94) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x640799fc}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x68, '\x00', r8, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r9, r12, 0x9, 0x0, &(0x7f0000001800)=[{0x2, 0x3, 0x2, 0x7}, {0x3, 0x3, 0xd, 0xb}, {0x5, 0x4, 0x7, 0x6}, {0x0, 0x2, 0x10, 0x9}, {0x3, 0x4, 0x9, 0xc}, {0x4, 0x4, 0xf, 0x1}, {0x4, 0x3, 0xa, 0x8}, {0x0, 0x2, 0x2, 0x4}, {0x4, 0x5, 0x6, 0xb}], 0x10, 0x8}, 0x94) 196.255192ms ago: executing program 3 (id=1265): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0x1}, {0xfffffffd, 0x4, 0x10006, 0x3}]}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x100000) 172.672185ms ago: executing program 2 (id=1266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000800000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000680)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 69.011144ms ago: executing program 5 (id=1267): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x10, 0x17f0}, 0x101000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) 0s ago: executing program 2 (id=1268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0x19, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000c, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@jmp={0x5, 0x1, 0x9, 0x5, 0xe, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xe}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x80, 0x0, &(0x7f0000000680), 0x40f00, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0x7f, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0xffffffffffffffff], &(0x7f0000000740)=[{0x5, 0x4, 0x8010, 0xb}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@ifindex, 0x1d, 0x0, 0xfffffff4, &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80), &(0x7f0000000ac0), 0x0, 0xb3, &(0x7f0000000b00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b40), &(0x7f0000000680), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffff8}, [@ringbuf_query, @map_fd={0x18, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x1b}, @call={0x85, 0x0, 0x0, 0x49}]}, &(0x7f0000000e80)='syzkaller\x00', 0x3, 0x69, &(0x7f0000000ec0)=""/105, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000f80)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000fc0)=[{0x0, 0x3, 0xa, 0x6}, {0x2, 0x3, 0x4, 0x6}, {0x4, 0x1, 0x5, 0x7}, {0x0, 0x5, 0x3, 0xa}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@ifindex=r2, r0, 0x1b, 0x4, 0x0, @void, @value=r3, @void, @void, r1}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuset.effective_mems\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000240)}, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000440)=0xffc, 0x49) openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8918, &(0x7f0000000000)={r7}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000600000008000000"], &(0x7f0000000200)=""/24, 0x2a, 0x18, 0x0, 0x800, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a68929c34c2a263835e34e09ae067cea299ac86468ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c0000000000"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x210880, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x7, 0x0, 0x4, 0x813, 0xffffffffffffffff, 0x4a, '\x00', 0x0, r8, 0x3, 0x4, 0x0, 0xd}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={&(0x7f0000000300)='./file0\x00', r9}, 0x18) kernel console output (not intermixed with test programs): nk becomes ready [ 70.401570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.411946][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.421126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.430565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.440359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.449706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.458889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.468102][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.477053][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.484124][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.491881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.504239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.522434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.534958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.581250][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.596643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.613625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.624240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.639194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.651985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.663366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.678173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.686102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.699904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.708556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.724136][ T4182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.741100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.751763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.764391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.782190][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.789324][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.803459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.812599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.826991][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.834072][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.848135][ T4181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.856004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.891683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.902110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.913278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.924311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.933556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.939865][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 70.946219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.954407][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.961932][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 70.973178][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 70.979370][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 70.985461][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 70.998643][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.007281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.014730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.028140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.040059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.048332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.068183][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.077682][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.087450][ T4181] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.125605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.135685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.151839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.162844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.174033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.183353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.192005][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.196867][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.199100][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.205568][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.223285][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.248856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.257573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.273775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.283961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.297982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.310856][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.317974][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.348491][ T4182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.373489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.381500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.394789][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.405074][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.420821][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.432332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.445967][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.460466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.475608][ T4183] device veth0_vlan entered promiscuous mode [ 71.510015][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.519336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.528979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.537795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.546571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.555183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.564423][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.573247][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.581653][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.589251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.597545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.611097][ T4183] device veth1_vlan entered promiscuous mode [ 71.642814][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.653140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.664044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.672778][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.689570][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.698184][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.707350][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.715651][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.724109][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.732854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.741817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.754246][ T4182] device veth0_vlan entered promiscuous mode [ 71.762423][ T4194] device veth0_vlan entered promiscuous mode [ 71.772555][ T4181] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.787577][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.795857][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.805851][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.815398][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.836623][ T4182] device veth1_vlan entered promiscuous mode [ 71.869217][ T4194] device veth1_vlan entered promiscuous mode [ 71.879059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.890798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.901141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.909513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.919476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.928603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.937962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.958939][ T4183] device veth0_macvtap entered promiscuous mode [ 71.991968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.002721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.011558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.021805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.031886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.041209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.051413][ T4182] device veth0_macvtap entered promiscuous mode [ 72.069111][ T4194] device veth0_macvtap entered promiscuous mode [ 72.080963][ T4183] device veth1_macvtap entered promiscuous mode [ 72.089595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.099339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.108268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.116114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.124848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.134429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.152837][ T4184] device veth0_vlan entered promiscuous mode [ 72.162452][ T4194] device veth1_macvtap entered promiscuous mode [ 72.173053][ T4182] device veth1_macvtap entered promiscuous mode [ 72.182159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.193465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.201996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.223223][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.245528][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.253269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.262118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.275234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.284033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.301751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.309603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.326036][ T4184] device veth1_vlan entered promiscuous mode [ 72.334787][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.346965][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.359425][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.370118][ T4182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.382429][ T4182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.393881][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.404898][ T4194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.418568][ T4194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.427749][ T4194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.436745][ T4194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.449629][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.461079][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.471274][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.482083][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.494417][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.502135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.512231][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.521365][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.531349][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.541209][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.550492][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.562712][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.580760][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.592670][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.602873][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.624835][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.642647][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.661119][ T4183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.670187][ T4183] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.684910][ T4183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.695374][ T4183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.714975][ T4182] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.724032][ T4182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.732801][ T4182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.742188][ T4182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.765153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.774103][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.855101][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.873096][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.922067][ T4184] device veth0_macvtap entered promiscuous mode [ 72.955126][ T4184] device veth1_macvtap entered promiscuous mode [ 72.974396][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.990760][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.018018][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 73.018460][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.024298][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 73.047543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.048599][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 73.060196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.070859][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.086050][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.087729][ T4291] Bluetooth: hci3: command 0x040f tx timeout [ 73.103179][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.116405][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 73.124793][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.136277][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.152135][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.163095][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.173828][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.187535][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.200919][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.209477][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.217880][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.226366][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.235490][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.244277][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.255037][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.268823][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.279815][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.290503][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.300551][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.311532][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.322560][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.353520][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.362715][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.373692][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.383088][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.394947][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.403824][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.412896][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.422591][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.464559][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.484375][ T4181] device veth0_vlan entered promiscuous mode [ 73.491492][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.508537][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.516736][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.519346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.524696][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.555453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.563310][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.572040][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.591613][ T4181] device veth1_vlan entered promiscuous mode [ 73.604194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.615456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.714197][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.723602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.757217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.786868][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.795903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.809837][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.820117][ T4181] device veth0_macvtap entered promiscuous mode [ 73.831992][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.864317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.875423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.885959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.915628][ T4181] device veth1_macvtap entered promiscuous mode [ 73.928610][ T4298] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.956357][ T4299] tap0: tun_chr_ioctl cmd 1074025672 [ 73.961706][ T4299] tap0: ignored: set checksum disabled [ 73.981109][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.991531][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.013607][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.015536][ C0] hrtimer: interrupt took 93190 ns [ 74.031090][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.045307][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.068037][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.106855][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.128181][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.161731][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.173581][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.195535][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.212493][ T4299] tap0: tun_chr_ioctl cmd 35092 [ 74.225663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.242703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.279796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.288776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.301665][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.335240][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.354332][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.365592][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.377634][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.391008][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.401380][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.415278][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.427647][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.472384][ T4309] netlink: 'syz.3.4': attribute type 16 has an invalid length. [ 74.482009][ T4309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4'. [ 74.494830][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.505578][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.515412][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.543852][ T4181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.556496][ T4181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.576468][ T4181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.585219][ T4181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.909685][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.935136][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.973392][ T4318] netlink: 'syz.2.3': attribute type 2 has an invalid length. [ 75.003902][ T4318] netlink: 'syz.2.3': attribute type 8 has an invalid length. [ 75.035163][ T4318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.096824][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 75.103583][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.104539][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 75.136385][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 75.173547][ T4318] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 75.179670][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 75.196389][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 75.219375][ T4318] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.238889][ T4328] netlink: 26 bytes leftover after parsing attributes in process `syz.1.10'. [ 75.251044][ T4318] device bond0 entered promiscuous mode [ 75.273218][ T4318] device bond_slave_0 entered promiscuous mode [ 75.332032][ T4318] device bond_slave_1 entered promiscuous mode [ 75.355799][ T4318] bridge0: port 3(bond0) entered blocking state [ 75.378806][ T4318] bridge0: port 3(bond0) entered disabled state [ 75.425056][ T4318] bridge0: port 3(bond0) entered blocking state [ 75.431592][ T4318] bridge0: port 3(bond0) entered forwarding state [ 75.459173][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.481385][ T4318] syz.2.3 (4318) used greatest stack depth: 19264 bytes left [ 75.521067][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.548574][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.716879][ T4344] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14'. [ 76.031946][ T4353] netlink: 'syz.4.5': attribute type 12 has an invalid length. [ 76.033540][ T4356] netlink: 'syz.2.18': attribute type 3 has an invalid length. [ 76.057598][ T4353] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.204385][ T4367] netlink: 'syz.1.20': attribute type 21 has an invalid length. [ 76.224798][ T4367] netlink: 152 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.264852][ T4367] netlink: 'syz.1.20': attribute type 3 has an invalid length. [ 76.294577][ T4367] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.20'. [ 76.323087][ T4372] netlink: 'syz.0.21': attribute type 29 has an invalid length. [ 76.346139][ T4372] netlink: 'syz.0.21': attribute type 29 has an invalid length. [ 76.432862][ T4372] netlink: 205184 bytes leftover after parsing attributes in process `syz.0.21'. [ 79.339707][ T4398] raw_sendmsg: syz.3.27 forgot to set AF_INET. Fix it! [ 79.441071][ T4389] __nla_validate_parse: 4 callbacks suppressed [ 79.441086][ T4389] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.25'. [ 79.464792][ T4397] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.27'. [ 80.055754][ T4408] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 80.062587][ T4408] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 80.078527][ T4420] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.33'. [ 80.123525][ T4420] netlink: zone id is out of range [ 80.426427][ T4445] validate_nla: 5 callbacks suppressed [ 80.426442][ T4445] netlink: 'syz.0.40': attribute type 3 has an invalid length. [ 80.451464][ T4445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40'. [ 80.557476][ T4448] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.42'. [ 81.334030][ T4455] syz.1.45 uses obsolete (PF_INET,SOCK_PACKET) [ 81.376373][ T4459] Zero length message leads to an empty skb [ 81.642798][ T4476] netlink: 'syz.0.50': attribute type 11 has an invalid length. [ 81.702277][ T4476] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.50'. [ 81.747927][ T4457] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.46'. [ 81.776620][ T4457] netlink: 'syz.3.46': attribute type 2 has an invalid length. [ 81.898912][ T4489] delete_channel: no stack [ 81.972743][ T4489] delete_channel: no stack [ 82.033856][ T4488] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.51'. [ 82.132899][ T4498] netlink: 134736 bytes leftover after parsing attributes in process `syz.4.55'. [ 82.153557][ T4496] netlink: 'syz.2.54': attribute type 21 has an invalid length. [ 82.187031][ T4496] netlink: 164 bytes leftover after parsing attributes in process `syz.2.54'. [ 82.537520][ T4511] netlink: 'syz.4.60': attribute type 29 has an invalid length. [ 82.557810][ T4511] netlink: 'syz.4.60': attribute type 29 has an invalid length. [ 82.620054][ T4518] netlink: 'syz.4.60': attribute type 29 has an invalid length. [ 82.691231][ T4511] netlink: 'syz.4.60': attribute type 29 has an invalid length. [ 82.747680][ T4523] netlink: 'syz.0.62': attribute type 10 has an invalid length. [ 82.890609][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.957389][ T4523] device bridge_slave_1 left promiscuous mode [ 82.964335][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.084181][ T4523] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 83.112324][ T4511] netlink: 'syz.4.60': attribute type 29 has an invalid length. [ 83.307226][ T4547] netlink: 'syz.3.67': attribute type 3 has an invalid length. [ 84.648012][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 84.717020][ T4593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.396861][ T1108] cfg80211: failed to load regulatory.db [ 85.546665][ T4606] delete_channel: no stack [ 85.708072][ T4619] __nla_validate_parse: 4 callbacks suppressed [ 85.708089][ T4619] netlink: 172 bytes leftover after parsing attributes in process `syz.3.88'. [ 85.782716][ T4623] netlink: 144 bytes leftover after parsing attributes in process `syz.3.88'. [ 86.379957][ T4648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.99'. [ 86.418356][ T4655] validate_nla: 3 callbacks suppressed [ 86.418372][ T4655] netlink: 'syz.3.101': attribute type 9 has an invalid length. [ 86.474361][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.509128][ T4655] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.101'. [ 86.657179][ T4648] device bridge_slave_0 left promiscuous mode [ 86.679267][ T4648] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.735185][ T4670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.105'. [ 87.143819][ T4668] netlink: 'syz.2.103': attribute type 10 has an invalid length. [ 87.234856][ T4668] team0: Device hsr_slave_0 failed to register rx_handler [ 87.384045][ T4670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.105'. [ 87.724034][ T4689] netlink: 188 bytes leftover after parsing attributes in process `syz.2.110'. [ 87.770349][ T4693] netlink: 'syz.0.111': attribute type 10 has an invalid length. [ 88.269805][ T4704] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.113'. [ 88.659966][ T4734] netlink: 'syz.0.119': attribute type 11 has an invalid length. [ 89.142619][ T4752] netlink: 'syz.0.126': attribute type 1 has an invalid length. [ 89.293435][ T4752] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.126'. [ 89.775971][ T4767] netlink: 'syz.3.129': attribute type 1 has an invalid length. [ 89.793941][ T4767] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.129'. [ 90.034294][ T4778] device syzkaller0 entered promiscuous mode [ 90.067515][ T4773] delete_channel: no stack [ 91.035288][ T4816] netlink: 'syz.1.139': attribute type 10 has an invalid length. [ 91.057911][ T4816] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.139'. [ 91.457953][ T4838] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.149'. [ 91.867800][ T4860] netlink: 168 bytes leftover after parsing attributes in process `syz.1.154'. [ 92.665240][ T4886] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 92.923948][ T4882] netlink: 10 bytes leftover after parsing attributes in process `syz.4.161'. [ 93.230633][ T4895] netlink: 830 bytes leftover after parsing attributes in process `syz.0.166'. [ 93.625865][ T4911] ref_ctr_offset mismatch. inode: 0xc0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 93.735185][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 93.947624][ T4914] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 94.662281][ T4927] netlink: 'syz.4.174': attribute type 10 has an invalid length. [ 94.812056][ T4927] team0: Port device geneve1 added [ 94.840157][ T4928] bridge0: port 3(veth0_to_bridge) entered blocking state [ 94.866557][ T4928] bridge0: port 3(veth0_to_bridge) entered disabled state [ 94.887779][ T4928] device veth0_to_bridge entered promiscuous mode [ 94.918759][ T4928] bridge0: port 3(veth0_to_bridge) entered blocking state [ 94.926296][ T4928] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 95.144447][ T4945] netlink: 'syz.0.180': attribute type 2 has an invalid length. [ 95.170682][ T4945] netlink: 'syz.0.180': attribute type 8 has an invalid length. [ 95.197333][ T4945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.180'. [ 95.345766][ T4951] sctp: [Deprecated]: syz.4.183 (pid 4951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.345766][ T4951] Use struct sctp_sack_info instead [ 95.640145][ T4954] netlink: 'syz.3.184': attribute type 4 has an invalid length. [ 95.651625][ T4954] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.184'. [ 95.697199][ T4960] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.186'. [ 95.777908][ T4960] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 95.785808][ T4960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.186'. [ 95.888792][ T4960] device batadv0 entered promiscuous mode [ 95.895326][ T4960] bridge0: port 3(batadv0) entered blocking state [ 95.953471][ T4960] bridge0: port 3(batadv0) entered disabled state [ 96.007853][ T4960] bridge0: port 3(batadv0) entered blocking state [ 96.014442][ T4960] bridge0: port 3(batadv0) entered forwarding state [ 96.139077][ T4970] netlink: 164 bytes leftover after parsing attributes in process `syz.0.189'. [ 96.220376][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 96.230029][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 96.301283][ T4975] netlink: 'syz.1.190': attribute type 16 has an invalid length. [ 96.345716][ T4972] device syzkaller0 entered promiscuous mode [ 96.491981][ T4979] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.191'. [ 96.536314][ T4981] netlink: 'syz.1.190': attribute type 3 has an invalid length. [ 96.544015][ T4981] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.190'. [ 96.546904][ T4975] netlink: 'syz.1.190': attribute type 5 has an invalid length. [ 96.784465][ T4988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.193'. [ 97.112787][ T4988] netlink: 60 bytes leftover after parsing attributes in process `syz.4.193'. [ 97.305556][ T4989] netlink: 60 bytes leftover after parsing attributes in process `syz.4.193'. [ 97.390966][ T4990] netlink: 60 bytes leftover after parsing attributes in process `syz.4.193'. [ 97.403303][ T4997] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 97.413298][ T4997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.196'. [ 97.615224][ T5012] netlink: 40 bytes leftover after parsing attributes in process `syz.3.200'. [ 97.678878][ T5012] device caif0 entered promiscuous mode [ 97.691494][ T5012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.617588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:29:3f:71:2e:c8, vlan:0) [ 102.408994][ T5029] device wlan0 entered promiscuous mode [ 102.437481][ T5029] validate_nla: 2 callbacks suppressed [ 102.437497][ T5029] netlink: 'syz.2.203': attribute type 9 has an invalid length. [ 102.506179][ T5050] netlink: 60 bytes leftover after parsing attributes in process `syz.0.209'. [ 102.522394][ T5029] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.203'. [ 102.790041][ T5072] netlink: 'syz.1.214': attribute type 2 has an invalid length. [ 102.823616][ T5072] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.214'. [ 102.946343][ T5080] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.215'. [ 103.173689][ T5085] netlink: 'syz.0.218': attribute type 21 has an invalid length. [ 103.207765][ T5085] netlink: 'syz.0.218': attribute type 23 has an invalid length. [ 103.250497][ T5092] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.220'. [ 103.370758][ T5097] netlink: 'syz.3.221': attribute type 33 has an invalid length. [ 103.423232][ T5097] netlink: 164 bytes leftover after parsing attributes in process `syz.3.221'. [ 103.790847][ T5122] netlink: 'syz.3.229': attribute type 2 has an invalid length. [ 103.818368][ T5122] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.229'. [ 104.804576][ T5157] netlink: 'syz.3.238': attribute type 8 has an invalid length. [ 104.868734][ T5157] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.238'. [ 105.071400][ T5169] netlink: 'syz.1.243': attribute type 2 has an invalid length. [ 105.126017][ T5169] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.243'. [ 105.882868][ T5206] can: request_module (can-proto-0) failed. [ 105.936586][ T5207] can: request_module (can-proto-0) failed. [ 106.076012][ T5222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.220746][ T5228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.254572][ T5229] netlink: 'syz.0.258': attribute type 2 has an invalid length. [ 106.321431][ T5229] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.258'. [ 106.401342][ T5232] netlink: 'syz.3.259': attribute type 2 has an invalid length. [ 106.566925][ T5236] bridge0: port 3(bond0) entered disabled state [ 106.573827][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.581270][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.688264][ T5236] bridge0: port 3(bond0) entered disabled state [ 106.730432][ T5236] device bridge_slave_1 left promiscuous mode [ 106.747029][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.765759][ T5236] device bridge_slave_0 left promiscuous mode [ 106.775408][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.329117][ T5269] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.484056][ T5276] validate_nla: 14 callbacks suppressed [ 107.484090][ T5276] netlink: 'syz.3.272': attribute type 2 has an invalid length. [ 107.521313][ T5276] __nla_validate_parse: 39 callbacks suppressed [ 107.521329][ T5276] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.272'. [ 108.032079][ T5289] netlink: 'syz.3.277': attribute type 21 has an invalid length. [ 108.068093][ T5289] netlink: 128 bytes leftover after parsing attributes in process `syz.3.277'. [ 108.107502][ T5289] netlink: 'syz.3.277': attribute type 3 has an invalid length. [ 108.127910][ T5289] netlink: 3 bytes leftover after parsing attributes in process `syz.3.277'. [ 108.981313][ T5319] netlink: 'syz.3.287': attribute type 2 has an invalid length. [ 109.036379][ T5319] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.287'. [ 109.154045][ T5323] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.288'. [ 109.206336][ T5320] netlink: 'syz.4.286': attribute type 10 has an invalid length. [ 109.703326][ T5320] team0: Port device macvlan0 added [ 110.908794][ T5360] netlink: 'syz.1.302': attribute type 2 has an invalid length. [ 110.961439][ T5360] netlink: 171236 bytes leftover after parsing attributes in process `syz.1.302'. [ 111.121547][ T5370] netlink: 'syz.2.304': attribute type 27 has an invalid length. [ 111.161976][ T5370] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.304'. [ 111.302902][ T5376] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 111.603822][ T5376] team0: Port device geneve1 added [ 111.758861][ T5382] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 111.882695][ T5385] netlink: 'syz.2.309': attribute type 1 has an invalid length. [ 112.580292][ T5408] netlink: 'syz.2.315': attribute type 2 has an invalid length. [ 112.616682][ T5408] netlink: 171236 bytes leftover after parsing attributes in process `syz.2.315'. [ 112.627469][ T5406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.314'. [ 112.841159][ T5415] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.316'. [ 114.252681][ T5449] netlink: 'syz.3.329': attribute type 2 has an invalid length. [ 114.278980][ T5449] netlink: 171236 bytes leftover after parsing attributes in process `syz.3.329'. [ 114.335417][ T5446] device syzkaller0 entered promiscuous mode [ 114.452884][ T5459] netlink: 'syz.4.326': attribute type 29 has an invalid length. [ 114.525567][ T5459] netlink: 'syz.4.326': attribute type 29 has an invalid length. [ 114.535180][ T5451] netlink: 830 bytes leftover after parsing attributes in process `syz.4.326'. [ 114.582873][ T5461] netlink: 'syz.4.326': attribute type 29 has an invalid length. [ 114.666599][ T5451] netlink: 'syz.4.326': attribute type 29 has an invalid length. [ 114.684827][ T5459] netlink: 'syz.4.326': attribute type 29 has an invalid length. [ 114.784691][ T5467] netlink: 'syz.0.331': attribute type 3 has an invalid length. [ 114.881538][ T5467] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.331'. [ 115.775370][ T5495] netlink: 'syz.0.340': attribute type 2 has an invalid length. [ 115.798066][ T5497] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.336'. [ 115.833287][ T5495] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.340'. [ 116.066113][ T5499] netlink: 'syz.3.341': attribute type 33 has an invalid length. [ 116.077229][ T5499] netlink: 164 bytes leftover after parsing attributes in process `syz.3.341'. [ 116.388124][ T5514] batman_adv: batadv0: Adding interface: team0 [ 116.394338][ T5514] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.676486][ T5514] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 117.597352][ T5542] syz.1.354 (5542) used greatest stack depth: 16448 bytes left [ 117.837219][ T5566] validate_nla: 4 callbacks suppressed [ 117.837236][ T5566] netlink: 'syz.1.358': attribute type 2 has an invalid length. [ 117.907056][ T5566] netlink: 'syz.1.358': attribute type 8 has an invalid length. [ 117.914742][ T5566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.358'. [ 117.948019][ T5568] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 117.988616][ T5568] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 118.020150][ T5571] netlink: 'syz.2.362': attribute type 29 has an invalid length. [ 118.093256][ T5568] netlink: 'syz.2.362': attribute type 3 has an invalid length. [ 118.122470][ T5568] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.362'. [ 118.194839][ T5568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.362'. [ 118.260763][ T5568] netlink: 60 bytes leftover after parsing attributes in process `syz.2.362'. [ 118.337442][ T5571] netlink: 60 bytes leftover after parsing attributes in process `syz.2.362'. [ 118.422527][ T5581] delete_channel: no stack [ 118.469727][ T5586] netlink: 60 bytes leftover after parsing attributes in process `syz.2.362'. [ 118.628728][ T5591] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.364'. [ 118.981539][ T5591] netlink: zone id is out of range [ 119.085898][ T5591] netlink: zone id is out of range [ 119.182703][ T5591] netlink: del zone limit has 8 unknown bytes [ 119.408916][ T5608] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.372'. [ 119.430975][ T5591] delete_channel: no stack [ 119.657806][ T5615] netlink: 'syz.0.374': attribute type 16 has an invalid length. [ 119.706439][ T5615] netlink: 156 bytes leftover after parsing attributes in process `syz.0.374'. [ 119.982131][ T5629] netlink: 'syz.3.380': attribute type 29 has an invalid length. [ 120.084986][ T5629] netlink: 'syz.3.380': attribute type 29 has an invalid length. [ 121.232290][ T5654] bridge0: port 3(hsr_slave_1) entered blocking state [ 121.329425][ T5654] bridge0: port 3(hsr_slave_1) entered disabled state [ 122.525251][ T5711] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 122.572397][ T5711] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.399'. [ 123.203089][ T5726] device pim6reg1 entered promiscuous mode [ 123.882458][ T5745] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 123.953070][ T5749] netlink: 'syz.1.410': attribute type 1 has an invalid length. [ 124.551800][ T5760] netlink: 'syz.4.413': attribute type 7 has an invalid length. [ 124.652955][ T5760] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.413'. [ 127.054795][ T5774] delete_channel: no stack [ 127.243915][ T5784] netlink: 10 bytes leftover after parsing attributes in process `syz.1.421'. [ 127.282805][ T5778] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.289913][ T5778] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.973852][ T5808] netlink: 'syz.2.427': attribute type 39 has an invalid length. [ 128.605610][ T5819] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 128.634623][ T5821] netlink: 'syz.0.431': attribute type 6 has an invalid length. [ 128.870003][ T5825] netlink: 14 bytes leftover after parsing attributes in process `syz.2.433'. [ 129.102505][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.145182][ T5825] device bond_slave_0 left promiscuous mode [ 129.255187][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.282387][ T5825] device bond_slave_1 left promiscuous mode [ 129.297886][ T5836] netlink: 60 bytes leftover after parsing attributes in process `syz.1.437'. [ 129.344438][ T5825] bond0 (unregistering): Released all slaves [ 129.602097][ T5836] netlink: 60 bytes leftover after parsing attributes in process `syz.1.437'. [ 129.653639][ T5841] netlink: 180 bytes leftover after parsing attributes in process `syz.4.438'. [ 129.714061][ T5844] netlink: 'syz.4.438': attribute type 10 has an invalid length. [ 129.792624][ T5844] device macvlan0 entered promiscuous mode [ 129.811656][ T5852] netlink: 'syz.0.440': attribute type 2 has an invalid length. [ 129.846417][ T5852] netlink: 'syz.0.440': attribute type 1 has an invalid length. [ 129.887599][ T5844] team0: Port device macvlan0 removed [ 129.905891][ T5844] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 130.366737][ T5875] netlink: 'syz.4.445': attribute type 11 has an invalid length. [ 130.491226][ T5880] netlink: 'syz.1.447': attribute type 2 has an invalid length. [ 130.512603][ T5880] netlink: 'syz.1.447': attribute type 8 has an invalid length. [ 130.536487][ T5880] netlink: 132 bytes leftover after parsing attributes in process `syz.1.447'. [ 131.134932][ T5918] netlink: 'syz.1.455': attribute type 21 has an invalid length. [ 131.217176][ T5918] netlink: 156 bytes leftover after parsing attributes in process `syz.1.455'. [ 131.498897][ T5934] netlink: 'syz.2.459': attribute type 19 has an invalid length. [ 131.661029][ T5962] IPv6: Can't replace route, no match found [ 132.546996][ T6009] netlink: 'syz.1.479': attribute type 13 has an invalid length. [ 132.559352][ T6009] netlink: 160 bytes leftover after parsing attributes in process `syz.1.479'. [ 132.621594][ T6009] erspan0: refused to change device tx_queue_len [ 132.631545][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.637949][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.657253][ T6009] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 132.739619][ T6011] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.782089][ T6025] tap0: tun_chr_ioctl cmd 1074025675 [ 132.793186][ T6025] tap0: persist enabled [ 132.798816][ T6021] tap0: tun_chr_ioctl cmd 1074025675 [ 132.804332][ T6021] tap0: persist disabled [ 132.986751][ T6031] netlink: 'syz.3.485': attribute type 27 has an invalid length. [ 132.994702][ T6031] netlink: 164 bytes leftover after parsing attributes in process `syz.3.485'. [ 133.267591][ T6043] netlink: set zone limit has 8 unknown bytes [ 133.445035][ T6059] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.493'. [ 133.686183][ T6072] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.496'. [ 133.818572][ T6074] netlink: 168 bytes leftover after parsing attributes in process `syz.0.497'. [ 134.226559][ T6094] device bridge_slave_1 entered promiscuous mode [ 134.547258][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:29:3f:71:2e:c8, vlan:0) [ 134.563338][ T6108] netlink: 166 bytes leftover after parsing attributes in process `syz.3.505'. [ 134.605568][ T6110] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.505'. [ 134.825260][ T6114] validate_nla: 3 callbacks suppressed [ 134.825277][ T6114] netlink: 'syz.3.508': attribute type 13 has an invalid length. [ 134.840449][ T6114] netlink: 152 bytes leftover after parsing attributes in process `syz.3.508'. [ 134.945570][ T6116] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 135.119466][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 135.167331][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 135.191841][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 135.256812][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 135.711299][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 135.731792][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 135.768445][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 135.813029][ T6129] netlink: 'syz.2.512': attribute type 21 has an invalid length. [ 136.409644][ T6164] __nla_validate_parse: 1 callbacks suppressed [ 136.409660][ T6164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.523'. [ 137.600832][ T6198] device syzkaller0 entered promiscuous mode [ 137.628931][ T6201] netlink: 112 bytes leftover after parsing attributes in process `syz.0.533'. [ 138.022576][ T6216] netlink: 163260 bytes leftover after parsing attributes in process `syz.4.536'. [ 138.108400][ T6216] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 138.168713][ T6225] device sit0 entered promiscuous mode [ 139.963669][ T6275] team0: Port device geneve1 added [ 140.019815][ T6281] device bond0 entered promiscuous mode [ 140.056691][ T6281] device bond_slave_0 entered promiscuous mode [ 140.114717][ T6281] device bond_slave_1 entered promiscuous mode [ 140.165326][ T6285] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.555'. [ 140.183819][ T6298] validate_nla: 32 callbacks suppressed [ 140.183837][ T6298] netlink: 'syz.2.559': attribute type 28 has an invalid length. [ 140.205964][ T6291] netlink: 'syz.1.556': attribute type 21 has an invalid length. [ 140.218807][ T6298] netlink: 'syz.2.559': attribute type 4 has an invalid length. [ 140.250443][ T6291] netlink: 152 bytes leftover after parsing attributes in process `syz.1.556'. [ 140.262035][ T6298] netlink: 136 bytes leftover after parsing attributes in process `syz.2.559'. [ 140.473208][ T6301] netlink: 154764 bytes leftover after parsing attributes in process `syz.0.560'. [ 140.494948][ T6301] netlink: zone id is out of range [ 140.517635][ T6301] netlink: zone id is out of range [ 140.523520][ T6301] netlink: zone id is out of range [ 140.531443][ T6301] netlink: zone id is out of range [ 140.537636][ T6301] netlink: zone id is out of range [ 140.556540][ T6301] netlink: zone id is out of range [ 140.566718][ T6301] netlink: zone id is out of range [ 140.576647][ T6301] netlink: zone id is out of range [ 141.074368][ T6321] netlink: 192052 bytes leftover after parsing attributes in process `syz.1.566'. [ 141.105089][ T6324] netlink: 'syz.3.567': attribute type 4 has an invalid length. [ 141.176648][ T6321] openvswitch: netlink: Tunnel attr 0 has unexpected len 7 expected 8 [ 141.185270][ T6324] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.567'. [ 141.630516][ T6353] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 141.778098][ T6353] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.572'. [ 143.044914][ T6391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 143.073055][ T6391] syzkaller1: linktype set to 823 [ 143.463213][ T6403] netlink: 141928 bytes leftover after parsing attributes in process `syz.2.589'. [ 143.828564][ T6414] netlink: 208188 bytes leftover after parsing attributes in process `syz.0.592'. [ 143.852279][ T6414] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 143.869802][ T6414] openvswitch: netlink: Message has 4 unknown bytes. [ 144.113836][ T6419] device syzkaller0 entered promiscuous mode [ 144.133574][ T6419] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 144.574919][ T6436] syzkaller0: create flow: hash 1805421270 index 1 [ 144.702910][ T5953] syzkaller0: tun_net_xmit 76 [ 144.709300][ T5953] syzkaller0: tun_net_xmit 48 [ 144.768394][ T5950] syzkaller0: tun_net_xmit 76 [ 144.823354][ T6434] syzkaller0: delete flow: hash 1805421270 index 1 [ 145.217778][ T6468] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 145.338461][ T6468] team0: Device hsr_slave_0 failed to register rx_handler [ 145.821110][ T6486] netlink: 'syz.2.611': attribute type 17 has an invalid length. [ 145.842358][ T6486] netlink: 152 bytes leftover after parsing attributes in process `syz.2.611'. [ 145.852199][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 145.868999][ T6486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.052467][ T6499] netlink: 144 bytes leftover after parsing attributes in process `syz.0.616'. [ 147.503595][ T6553] delete_channel: no stack [ 148.675519][ T6588] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.639'. [ 148.752847][ T6581] device syzkaller0 entered promiscuous mode [ 151.858968][ T6667] tun0: tun_chr_ioctl cmd 1074025675 [ 151.953428][ T6667] tun0: persist enabled [ 152.572169][ T6676] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 152.634511][ T6676] netlink: 'syz.3.663': attribute type 3 has an invalid length. [ 152.735505][ T6676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.663'. [ 152.868498][ T6690] netlink: 'syz.0.667': attribute type 3 has an invalid length. [ 152.935341][ T6690] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.667'. [ 153.006021][ T6691] netlink: 'syz.0.667': attribute type 10 has an invalid length. [ 153.109782][ T6691] team0: Device ipvlan1 failed to register rx_handler [ 153.433186][ T6685] delete_channel: no stack [ 153.747527][ T6698] netlink: 'syz.4.669': attribute type 46 has an invalid length. [ 153.755306][ T6698] netlink: 55 bytes leftover after parsing attributes in process `syz.4.669'. [ 155.444650][ T6728] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.678'. [ 155.466634][ T6742] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 155.484991][ T6742] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.681'. [ 155.523620][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 155.606368][ T6728] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 155.772505][ T6758] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.683'. [ 155.784870][ T6757] netlink: 15351 bytes leftover after parsing attributes in process `syz.1.685'. [ 155.805102][ T6751] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.683'. [ 155.968566][ T6762] netlink: 'syz.1.686': attribute type 27 has an invalid length. [ 155.993767][ T6762] netlink: 164 bytes leftover after parsing attributes in process `syz.1.686'. [ 156.349023][ T6769] netlink: 'syz.2.687': attribute type 17 has an invalid length. [ 156.360244][ T6769] netlink: 'syz.2.687': attribute type 16 has an invalid length. [ 156.422462][ T6769] netlink: 152 bytes leftover after parsing attributes in process `syz.2.687'. [ 156.479364][ T6767] netlink: 'syz.3.688': attribute type 1 has an invalid length. [ 156.506697][ T6764] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.537955][ T6764] netlink: 1 bytes leftover after parsing attributes in process `syz.2.687'. [ 157.004713][ T6790] netlink: 60 bytes leftover after parsing attributes in process `syz.1.696'. [ 157.644313][ T6806] netlink: 'syz.0.698': attribute type 9 has an invalid length. [ 157.657200][ T6817] netlink: 'syz.2.699': attribute type 28 has an invalid length. [ 157.862307][ T6805] delete_channel: no stack [ 158.533697][ T6845] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 158.598015][ T6845] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 158.627772][ T6845] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 158.655444][ T6834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.866666][ T6863] __nla_validate_parse: 9 callbacks suppressed [ 158.866682][ T6863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.717'. [ 158.915319][ T6865] netlink: 'syz.2.718': attribute type 10 has an invalid length. [ 158.965774][ T6865] batman_adv: batadv0: Removing interface: team0 [ 159.002802][ T6864] device syzkaller0 entered promiscuous mode [ 159.331155][ T6876] netlink: 'syz.3.721': attribute type 2 has an invalid length. [ 159.446794][ T6876] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.721'. [ 159.672505][ T6893] netlink: 'syz.2.726': attribute type 27 has an invalid length. [ 159.723316][ T6893] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.726'. [ 160.115733][ T6912] netlink: 'syz.2.731': attribute type 29 has an invalid length. [ 160.157137][ T6912] netlink: 'syz.2.731': attribute type 29 has an invalid length. [ 160.890560][ T6941] netlink: 14 bytes leftover after parsing attributes in process `syz.0.742'. [ 161.085893][ T6953] netlink: 'syz.1.744': attribute type 10 has an invalid length. [ 161.115182][ T6953] device hsr_slave_0 left promiscuous mode [ 161.150267][ T6953] device hsr_slave_1 left promiscuous mode [ 161.378107][ T6962] netlink: 'syz.0.746': attribute type 4 has an invalid length. [ 161.402463][ T6962] netlink: 'syz.0.746': attribute type 3 has an invalid length. [ 161.420862][ T6962] netlink: 152988 bytes leftover after parsing attributes in process `syz.0.746'. [ 161.561313][ T6971] FAULT_INJECTION: forcing a failure. [ 161.561313][ T6971] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.623500][ T6971] CPU: 0 PID: 6971 Comm: syz.1.749 Not tainted syzkaller #0 [ 161.630837][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 161.640935][ T6971] Call Trace: [ 161.644243][ T6971] [ 161.647200][ T6971] dump_stack_lvl+0x168/0x230 [ 161.651927][ T6971] ? show_regs_print_info+0x20/0x20 [ 161.657174][ T6971] ? load_image+0x3b0/0x3b0 [ 161.661712][ T6971] ? __lock_acquire+0x7c60/0x7c60 [ 161.666778][ T6971] should_fail+0x38c/0x4c0 [ 161.671233][ T6971] _copy_from_user+0x2e/0x170 [ 161.675951][ T6971] __copy_msghdr_from_user+0xaf/0x5e0 [ 161.681410][ T6971] ? verify_lock_unused+0x140/0x140 [ 161.686646][ T6971] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 161.691986][ T6971] ___sys_sendmsg+0x156/0x260 [ 161.696706][ T6971] ? __sys_sendmsg+0x250/0x250 [ 161.701524][ T6971] ? vfs_write+0x84d/0xd00 [ 161.706035][ T6971] ? __fdget+0x18b/0x210 [ 161.710313][ T6971] __se_sys_sendmsg+0x190/0x250 [ 161.715207][ T6971] ? __x64_sys_sendmsg+0x80/0x80 [ 161.720302][ T6971] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 161.726329][ T6971] ? lockdep_hardirqs_on+0x94/0x140 [ 161.731599][ T6971] do_syscall_64+0x4c/0xa0 [ 161.736043][ T6971] ? clear_bhb_loop+0x30/0x80 [ 161.740745][ T6971] ? clear_bhb_loop+0x30/0x80 [ 161.745446][ T6971] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 161.751373][ T6971] RIP: 0033:0x7f3d38ef2749 [ 161.755813][ T6971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.775558][ T6971] RSP: 002b:00007f3d37159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.783995][ T6971] RAX: ffffffffffffffda RBX: 00007f3d39148fa0 RCX: 00007f3d38ef2749 [ 161.791995][ T6971] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 161.799987][ T6971] RBP: 00007f3d37159090 R08: 0000000000000000 R09: 0000000000000000 [ 161.808053][ T6971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.816032][ T6971] R13: 00007f3d39149038 R14: 00007f3d39148fa0 R15: 00007fff0933cf48 [ 161.824028][ T6971] [ 161.865994][ T6973] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.750'. [ 161.917349][ T3560] udevd[3560]: worker [4292] terminated by signal 33 (Unknown signal 33) [ 161.941961][ T3560] udevd[3560]: worker [4292] failed while handling '/devices/virtual/block/loop1' [ 162.015899][ T6987] netlink: 138004 bytes leftover after parsing attributes in process `syz.1.752'. [ 164.548949][ T7006] validate_nla: 4 callbacks suppressed [ 164.548985][ T7006] netlink: 'syz.4.757': attribute type 19 has an invalid length. [ 164.593626][ T7008] netlink: 'syz.0.759': attribute type 3 has an invalid length. [ 164.611261][ T7008] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.759'. [ 164.870891][ T7022] FAULT_INJECTION: forcing a failure. [ 164.870891][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.923689][ T7022] CPU: 0 PID: 7022 Comm: syz.1.762 Not tainted syzkaller #0 [ 164.931047][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.941227][ T7022] Call Trace: [ 164.944527][ T7022] [ 164.947484][ T7022] dump_stack_lvl+0x168/0x230 [ 164.952202][ T7022] ? show_regs_print_info+0x20/0x20 [ 164.957441][ T7022] ? load_image+0x3b0/0x3b0 [ 164.961986][ T7022] ? __lock_acquire+0x7c60/0x7c60 [ 164.967506][ T7022] should_fail+0x38c/0x4c0 [ 164.971968][ T7022] _copy_from_user+0x2e/0x170 [ 164.976697][ T7022] iovec_from_user+0x142/0x370 [ 164.981496][ T7022] __import_iovec+0x70/0x490 [ 164.986122][ T7022] import_iovec+0x6f/0xa0 [ 164.990482][ T7022] ___sys_sendmsg+0x1b9/0x260 [ 164.995206][ T7022] ? __sys_sendmsg+0x250/0x250 [ 165.000014][ T7022] ? vfs_write+0x84d/0xd00 [ 165.004486][ T7022] ? __fdget+0x18b/0x210 [ 165.008761][ T7022] __se_sys_sendmsg+0x190/0x250 [ 165.013646][ T7022] ? __x64_sys_sendmsg+0x80/0x80 [ 165.018606][ T7022] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 165.024631][ T7022] ? lockdep_hardirqs_on+0x94/0x140 [ 165.029863][ T7022] do_syscall_64+0x4c/0xa0 [ 165.034326][ T7022] ? clear_bhb_loop+0x30/0x80 [ 165.039038][ T7022] ? clear_bhb_loop+0x30/0x80 [ 165.043748][ T7022] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 165.049669][ T7022] RIP: 0033:0x7f3d38ef2749 [ 165.054108][ T7022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.074225][ T7022] RSP: 002b:00007f3d37159038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.082804][ T7022] RAX: ffffffffffffffda RBX: 00007f3d39148fa0 RCX: 00007f3d38ef2749 [ 165.090805][ T7022] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 165.098793][ T7022] RBP: 00007f3d37159090 R08: 0000000000000000 R09: 0000000000000000 [ 165.106795][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.114792][ T7022] R13: 00007f3d39149038 R14: 00007f3d39148fa0 R15: 00007fff0933cf48 [ 165.122805][ T7022] [ 165.265740][ T7035] netlink: 'syz.0.764': attribute type 2 has an invalid length. [ 165.274060][ T7035] netlink: 'syz.0.764': attribute type 11 has an invalid length. [ 165.282306][ T7035] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.764'. [ 165.410811][ T7041] netlink: 'syz.0.767': attribute type 2 has an invalid length. [ 165.440415][ T7041] netlink: 'syz.0.767': attribute type 11 has an invalid length. [ 165.464740][ T7041] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.767'. [ 165.597158][ T7051] netlink: 'syz.2.769': attribute type 5 has an invalid length. [ 166.124184][ T7084] netlink: 'syz.0.780': attribute type 2 has an invalid length. [ 166.166158][ T7084] netlink: 199576 bytes leftover after parsing attributes in process `syz.0.780'. [ 166.222141][ T7086] netlink: 'syz.1.779': attribute type 2 has an invalid length. [ 166.246290][ T7086] netlink: 'syz.1.779': attribute type 11 has an invalid length. [ 166.254166][ T7086] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.779'. [ 166.386454][ T7090] FAULT_INJECTION: forcing a failure. [ 166.386454][ T7090] name failslab, interval 1, probability 0, space 0, times 1 [ 166.412485][ T7090] CPU: 0 PID: 7090 Comm: syz.2.782 Not tainted syzkaller #0 [ 166.419820][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.430000][ T7090] Call Trace: [ 166.433313][ T7090] [ 166.436266][ T7090] dump_stack_lvl+0x168/0x230 [ 166.440983][ T7090] ? show_regs_print_info+0x20/0x20 [ 166.446213][ T7090] ? load_image+0x3b0/0x3b0 [ 166.450748][ T7090] ? __might_sleep+0xf0/0xf0 [ 166.455366][ T7090] ? __lock_acquire+0x7c60/0x7c60 [ 166.460420][ T7090] ? __local_bh_enable_ip+0x12a/0x1b0 [ 166.465821][ T7090] should_fail+0x38c/0x4c0 [ 166.470282][ T7090] should_failslab+0x5/0x20 [ 166.474818][ T7090] slab_pre_alloc_hook+0x51/0xc0 [ 166.479782][ T7090] kmem_cache_alloc_node_trace+0x4a/0x300 [ 166.485524][ T7090] ? __get_vm_area_node+0x119/0x2d0 [ 166.490752][ T7090] __get_vm_area_node+0x119/0x2d0 [ 166.495823][ T7090] __vmalloc_node_range+0xef/0x8b0 [ 166.500972][ T7090] ? netlink_sendmsg+0x5dd/0xbc0 [ 166.505940][ T7090] ? netlink_data_ready+0x10/0x10 [ 166.511013][ T7090] ? netlink_sendmsg+0x5dd/0xbc0 [ 166.515977][ T7090] vmalloc+0x75/0x80 [ 166.519900][ T7090] ? netlink_sendmsg+0x5dd/0xbc0 [ 166.524876][ T7090] netlink_sendmsg+0x5dd/0xbc0 [ 166.529678][ T7090] ? netlink_getsockopt+0x560/0x560 [ 166.534908][ T7090] ? aa_sock_msg_perm+0x94/0x150 [ 166.539888][ T7090] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 166.545212][ T7090] ? security_socket_sendmsg+0x7c/0xa0 [ 166.550720][ T7090] ? netlink_getsockopt+0x560/0x560 [ 166.555956][ T7090] ____sys_sendmsg+0x5a2/0x8c0 [ 166.560759][ T7090] ? memset+0x1e/0x40 [ 166.564784][ T7090] ? __sys_sendmsg_sock+0x30/0x30 [ 166.569851][ T7090] ? import_iovec+0x6f/0xa0 [ 166.574401][ T7090] ___sys_sendmsg+0x1f0/0x260 [ 166.579115][ T7090] ? __sys_sendmsg+0x250/0x250 [ 166.583936][ T7090] ? vfs_write+0x84d/0xd00 [ 166.588404][ T7090] ? __fdget+0x18b/0x210 [ 166.592683][ T7090] __se_sys_sendmsg+0x190/0x250 [ 166.597577][ T7090] ? __x64_sys_sendmsg+0x80/0x80 [ 166.602544][ T7090] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 166.608579][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 166.613815][ T7090] do_syscall_64+0x4c/0xa0 [ 166.618268][ T7090] ? clear_bhb_loop+0x30/0x80 [ 166.622990][ T7090] ? clear_bhb_loop+0x30/0x80 [ 166.627707][ T7090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.633632][ T7090] RIP: 0033:0x7f6b0e200749 [ 166.638085][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.657872][ T7090] RSP: 002b:00007f6b0c467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.666330][ T7090] RAX: ffffffffffffffda RBX: 00007f6b0e456fa0 RCX: 00007f6b0e200749 [ 166.674340][ T7090] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 166.682355][ T7090] RBP: 00007f6b0c467090 R08: 0000000000000000 R09: 0000000000000000 [ 166.690358][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.698363][ T7090] R13: 00007f6b0e457038 R14: 00007f6b0e456fa0 R15: 00007ffff82075d8 [ 166.706389][ T7090] [ 166.926019][ T7104] netlink: 5 bytes leftover after parsing attributes in process `syz.4.785'. [ 167.017567][ T7110] netlink: 763 bytes leftover after parsing attributes in process `syz.1.787'. [ 167.257187][ T7090] syz.2.782: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 167.301385][ T7090] CPU: 1 PID: 7090 Comm: syz.2.782 Not tainted syzkaller #0 [ 167.308723][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 167.318798][ T7090] Call Trace: [ 167.322098][ T7090] [ 167.325052][ T7090] dump_stack_lvl+0x168/0x230 [ 167.329753][ T7090] ? rcu_lock_release+0x5/0x20 [ 167.334529][ T7090] ? show_regs_print_info+0x20/0x20 [ 167.339753][ T7090] ? load_image+0x3b0/0x3b0 [ 167.344281][ T7090] warn_alloc+0x20e/0x2f0 [ 167.348632][ T7090] ? zone_watermark_ok_safe+0x240/0x240 [ 167.354202][ T7090] ? kmem_cache_alloc_node_trace+0x16c/0x300 [ 167.360202][ T7090] ? __get_vm_area_node+0x119/0x2d0 [ 167.365436][ T7090] __vmalloc_node_range+0x2b1/0x8b0 [ 167.370660][ T7090] ? netlink_data_ready+0x10/0x10 [ 167.375800][ T7090] ? netlink_sendmsg+0x5dd/0xbc0 [ 167.380774][ T7090] vmalloc+0x75/0x80 [ 167.384693][ T7090] ? netlink_sendmsg+0x5dd/0xbc0 [ 167.389647][ T7090] netlink_sendmsg+0x5dd/0xbc0 [ 167.394452][ T7090] ? netlink_getsockopt+0x560/0x560 [ 167.399676][ T7090] ? aa_sock_msg_perm+0x94/0x150 [ 167.404638][ T7090] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 167.409939][ T7090] ? security_socket_sendmsg+0x7c/0xa0 [ 167.415419][ T7090] ? netlink_getsockopt+0x560/0x560 [ 167.420631][ T7090] ____sys_sendmsg+0x5a2/0x8c0 [ 167.425413][ T7090] ? memset+0x1e/0x40 [ 167.429422][ T7090] ? __sys_sendmsg_sock+0x30/0x30 [ 167.434479][ T7090] ? import_iovec+0x6f/0xa0 [ 167.439004][ T7090] ___sys_sendmsg+0x1f0/0x260 [ 167.443703][ T7090] ? __sys_sendmsg+0x250/0x250 [ 167.448488][ T7090] ? vfs_write+0x84d/0xd00 [ 167.452941][ T7090] ? __fdget+0x18b/0x210 [ 167.457204][ T7090] __se_sys_sendmsg+0x190/0x250 [ 167.462090][ T7090] ? __x64_sys_sendmsg+0x80/0x80 [ 167.467035][ T7090] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 167.473133][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 167.478361][ T7090] do_syscall_64+0x4c/0xa0 [ 167.482797][ T7090] ? clear_bhb_loop+0x30/0x80 [ 167.487491][ T7090] ? clear_bhb_loop+0x30/0x80 [ 167.492183][ T7090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 167.498088][ T7090] RIP: 0033:0x7f6b0e200749 [ 167.502525][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.522150][ T7090] RSP: 002b:00007f6b0c467038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.530588][ T7090] RAX: ffffffffffffffda RBX: 00007f6b0e456fa0 RCX: 00007f6b0e200749 [ 167.538573][ T7090] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 167.546553][ T7090] RBP: 00007f6b0c467090 R08: 0000000000000000 R09: 0000000000000000 [ 167.554532][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.562546][ T7090] R13: 00007f6b0e457038 R14: 00007f6b0e456fa0 R15: 00007ffff82075d8 [ 167.570554][ T7090] [ 167.860182][ T7090] Mem-Info: [ 167.863378][ T7090] active_anon:271 inactive_anon:13265 isolated_anon:0 [ 167.863378][ T7090] active_file:16642 inactive_file:40210 isolated_file:0 [ 167.863378][ T7090] unevictable:768 dirty:174 writeback:0 [ 167.863378][ T7090] slab_reclaimable:20426 slab_unreclaimable:93922 [ 167.863378][ T7090] mapped:35846 shmem:8589 pagetables:624 bounce:0 [ 167.863378][ T7090] kernel_misc_reclaimable:0 [ 167.863378][ T7090] free:1370871 free_pcp:5319 free_cma:0 [ 167.957917][ T7090] Node 0 active_anon:1052kB inactive_anon:53652kB active_file:66368kB inactive_file:160840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144484kB dirty:696kB writeback:0kB shmem:33380kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11944kB pagetables:2496kB all_unreclaimable? no [ 168.064972][ T7090] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 168.170207][ T7090] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.260540][ T7090] lowmem_reserve[]: 0 2541 2542 2542 2542 [ 168.285105][ T7135] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.794'. [ 168.288392][ T7090] Node 0 DMA32 free:1552528kB min:34800kB low:43500kB high:52200kB reserved_highatomic:0KB active_anon:1052kB inactive_anon:56852kB active_file:66368kB inactive_file:160840kB unevictable:1536kB writepending:696kB present:3129332kB managed:2609000kB mlocked:0kB bounce:0kB free_pcp:13720kB local_pcp:8456kB free_cma:0kB [ 168.406308][ T7090] lowmem_reserve[]: 0 0 0 0 0 [ 168.416570][ T7090] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.474567][ T7090] lowmem_reserve[]: 0 0 0 0 0 [ 168.484721][ T7090] Node 1 Normal free:3915596kB min:55088kB low:68860kB high:82632kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2700kB local_pcp:680kB free_cma:0kB [ 168.632239][ T7090] lowmem_reserve[]: 0 0 0 0 0 [ 168.657125][ T7090] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 168.736252][ T7090] Node 0 DMA32: 1716*4kB (UME) 1529*8kB (ME) 1119*16kB (UM) 1264*32kB (UME) 649*64kB (UME) 242*128kB (UME) 61*256kB (UME) 12*512kB (UME) 3*1024kB (M) 1*2048kB (U) 335*4096kB (UM) = 1549000kB [ 168.819649][ T7090] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 168.867870][ T7090] Node 1 Normal: 189*4kB (UME) 37*8kB (UE) 29*16kB (UME) 235*32kB (UME) 94*64kB (UME) 15*128kB (UE) 11*256kB (UM) 1*512kB (U) 0*1024kB 2*2048kB (UM) 950*4096kB (ME) = 3915596kB [ 168.961581][ T7152] netlink: 44 bytes leftover after parsing attributes in process `syz.1.798'. [ 168.977346][ T7090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.035539][ T7090] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.087433][ T7090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.133083][ T7090] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.192032][ T7090] 68174 total pagecache pages [ 169.212965][ T7090] 0 pages in swap cache [ 169.230872][ T7090] Swap cache stats: add 0, delete 0, find 0/0 [ 169.261746][ T7090] Free swap = 124996kB [ 169.265949][ T7090] Total swap = 124996kB [ 169.296328][ T7090] 2097051 pages RAM [ 169.300258][ T7090] 0 pages HighMem/MovableOnly [ 169.304950][ T7090] 410814 pages reserved [ 169.381432][ T7090] 0 pages cma reserved [ 169.948075][ T7171] delete_channel: no stack [ 169.953199][ T7171] delete_channel: no stack [ 169.961852][ T7176] validate_nla: 4 callbacks suppressed [ 169.961867][ T7176] netlink: 'syz.4.807': attribute type 2 has an invalid length. [ 170.036901][ T7176] netlink: 'syz.4.807': attribute type 11 has an invalid length. [ 170.050049][ T7176] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.807'. [ 170.355159][ T7197] netlink: 'syz.3.815': attribute type 11 has an invalid length. [ 170.413645][ T7197] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.815'. [ 170.465964][ T7197] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.815'. [ 172.862038][ T7208] device wlan0 entered promiscuous mode [ 172.918990][ T7212] netlink: 'syz.0.819': attribute type 2 has an invalid length. [ 172.936362][ T7191] delete_channel: no stack [ 172.951464][ T7212] netlink: 'syz.0.819': attribute type 11 has an invalid length. [ 173.004499][ T7212] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.819'. [ 173.315205][ T7228] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 173.441134][ T7236] sctp: [Deprecated]: syz.1.825 (pid 7236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.441134][ T7236] Use struct sctp_sack_info instead [ 173.972898][ T7247] netlink: 'syz.3.829': attribute type 21 has an invalid length. [ 174.176674][ T7260] netlink: 'syz.2.833': attribute type 41 has an invalid length. [ 174.210370][ T7258] netlink: 'syz.4.834': attribute type 2 has an invalid length. [ 174.254790][ T7258] netlink: 'syz.4.834': attribute type 11 has an invalid length. [ 174.284563][ T7258] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.834'. [ 174.334705][ T7261] netlink: 'syz.0.832': attribute type 10 has an invalid length. [ 174.450726][ T7261] team0: Device hsr_slave_0 failed to register rx_handler [ 174.601350][ T7278] netlink: 'syz.3.840': attribute type 2 has an invalid length. [ 174.639188][ T7278] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.840'. [ 174.660954][ T7280] netlink: 160 bytes leftover after parsing attributes in process `syz.2.842'. [ 174.735763][ T7280] erspan0: refused to change device tx_queue_len [ 174.800725][ T7280] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 174.832046][ T7287] netlink: 132 bytes leftover after parsing attributes in process `syz.4.844'. [ 175.016997][ T7290] device wlan0 left promiscuous mode [ 175.075566][ T7304] device wlan0 entered promiscuous mode [ 175.086517][ T7303] validate_nla: 4 callbacks suppressed [ 175.086532][ T7303] netlink: 'syz.1.849': attribute type 2 has an invalid length. [ 175.132681][ T7303] netlink: 'syz.1.849': attribute type 11 has an invalid length. [ 175.181492][ T7303] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.849'. [ 175.385673][ T7318] netlink: 'syz.4.855': attribute type 2 has an invalid length. [ 175.408323][ T7318] netlink: 198692 bytes leftover after parsing attributes in process `syz.4.855'. [ 175.676031][ T7339] netlink: 'syz.2.856': attribute type 17 has an invalid length. [ 175.817687][ T7345] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.862'. [ 175.840969][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.862'. [ 176.214031][ T7354] netlink: 'syz.3.864': attribute type 2 has an invalid length. [ 176.241400][ T7354] netlink: 'syz.3.864': attribute type 11 has an invalid length. [ 176.271091][ T7354] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.864'. [ 176.529807][ T7350] device team_slave_0 entered promiscuous mode [ 176.759733][ T7359] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.865'. [ 176.845359][ T7371] netlink: 'syz.0.868': attribute type 29 has an invalid length. [ 176.879770][ T7368] netlink: 'syz.2.867': attribute type 17 has an invalid length. [ 176.904146][ T7371] netlink: 'syz.0.868': attribute type 29 has an invalid length. [ 176.945088][ T7371] netlink: 'syz.0.868': attribute type 29 has an invalid length. [ 177.352110][ T7399] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.875'. [ 177.395640][ T7391] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.873'. [ 177.466031][ T7405] netlink: 172 bytes leftover after parsing attributes in process `syz.3.876'. [ 177.534926][ T7408] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.878'. [ 181.103097][ T7434] validate_nla: 6 callbacks suppressed [ 181.103116][ T7434] netlink: 'syz.3.886': attribute type 10 has an invalid length. [ 181.140603][ T7434] team0: Device ipvlan1 failed to register rx_handler [ 181.227740][ T7441] netlink: 'syz.2.889': attribute type 16 has an invalid length. [ 181.245982][ T7441] __nla_validate_parse: 3 callbacks suppressed [ 181.245996][ T7441] netlink: 48 bytes leftover after parsing attributes in process `syz.2.889'. [ 181.280621][ T7442] netlink: 'syz.0.888': attribute type 2 has an invalid length. [ 181.303091][ T7442] netlink: 'syz.0.888': attribute type 11 has an invalid length. [ 181.311661][ T7442] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.888'. [ 181.322962][ T7443] netlink: 'syz.4.887': attribute type 39 has an invalid length. [ 181.342592][ T7443] device veth0_macvtap left promiscuous mode [ 181.432151][ T7440] netlink: 'syz.1.890': attribute type 2 has an invalid length. [ 181.452103][ T7440] netlink: 'syz.1.890': attribute type 11 has an invalid length. [ 181.460741][ T7440] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.890'. [ 181.613518][ T7460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.894'. [ 181.671666][ T7464] netlink: 'syz.0.895': attribute type 1 has an invalid length. [ 181.701545][ T7464] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.895'. [ 181.717411][ T7464] netlink: 'syz.0.895': attribute type 4 has an invalid length. [ 181.768937][ T7470] netlink: 'syz.2.897': attribute type 11 has an invalid length. [ 181.942513][ T7488] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.902'. [ 182.049350][ T7492] netlink: 198172 bytes leftover after parsing attributes in process `syz.1.905'. [ 182.412822][ T7519] netlink: 387 bytes leftover after parsing attributes in process `syz.4.910'. [ 182.883473][ T7535] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.914'. [ 183.217258][ T7549] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.918'. [ 183.547164][ T7559] device hsr_slave_0 left promiscuous mode [ 184.569020][ T7622] device lo entered promiscuous mode [ 185.350039][ T7641] bridge0: port 4(bond0) entered blocking state [ 185.380352][ T7641] bridge0: port 4(bond0) entered disabled state [ 185.461519][ T7641] bridge0: port 4(bond0) entered blocking state [ 185.467910][ T7641] bridge0: port 4(bond0) entered forwarding state [ 185.511252][ T7639] device geneve0 entered promiscuous mode [ 185.662243][ T7639] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 186.117944][ T7662] validate_nla: 29 callbacks suppressed [ 186.118039][ T7662] netlink: 'syz.2.951': attribute type 21 has an invalid length. [ 186.298779][ T7662] __nla_validate_parse: 11 callbacks suppressed [ 186.298863][ T7662] netlink: 128 bytes leftover after parsing attributes in process `syz.2.951'. [ 186.427006][ T7662] netlink: 'syz.2.951': attribute type 4 has an invalid length. [ 186.728640][ T7692] netlink: 'syz.0.961': attribute type 4 has an invalid length. [ 186.789354][ T7692] netlink: 152 bytes leftover after parsing attributes in process `syz.0.961'. [ 187.122630][ T7708] netlink: 'syz.2.963': attribute type 2 has an invalid length. [ 187.206383][ T7708] netlink: 'syz.2.963': attribute type 11 has an invalid length. [ 187.325675][ T7708] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.963'. [ 188.201527][ T7692] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 188.362738][ T7713] device bridge_slave_1 left promiscuous mode [ 188.418753][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.529614][ T7713] device bridge_slave_0 left promiscuous mode [ 188.567886][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.715300][ T7733] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.969'. [ 189.634589][ T7737] netlink: 132 bytes leftover after parsing attributes in process `syz.0.970'. [ 190.059541][ T7740] netlink: 'syz.3.973': attribute type 3 has an invalid length. [ 190.085002][ T7740] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.973'. [ 190.212471][ T7735] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.969'. [ 190.529664][ T7748] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.973'. [ 191.024597][ T5936] Bluetooth: hci1: command 0x0406 tx timeout [ 191.033684][ T5936] Bluetooth: hci0: command 0x0406 tx timeout [ 191.059968][ T5936] Bluetooth: hci3: command 0x0406 tx timeout [ 191.096019][ T5936] Bluetooth: hci2: command 0x0406 tx timeout [ 191.112351][ T5936] Bluetooth: hci4: command 0x0406 tx timeout [ 191.612927][ T7772] netlink: 'syz.3.980': attribute type 21 has an invalid length. [ 192.161333][ T7791] netlink: 'syz.3.986': attribute type 1 has an invalid length. [ 192.186285][ T7791] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.986'. [ 192.809700][ T7804] device syzkaller0 entered promiscuous mode [ 192.945311][ T7817] netlink: 'syz.2.992': attribute type 2 has an invalid length. [ 192.982387][ T7817] netlink: 'syz.2.992': attribute type 11 has an invalid length. [ 193.117574][ T7817] netlink: 198172 bytes leftover after parsing attributes in process `syz.2.992'. [ 193.244819][ T7815] netlink: 15119 bytes leftover after parsing attributes in process `syz.4.989'. [ 194.065781][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.072391][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.580142][ T7846] netlink: 'syz.3.1000': attribute type 1 has an invalid length. [ 196.611918][ T7846] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1000'. [ 197.310749][ T7871] netlink: 'syz.2.1006': attribute type 17 has an invalid length. [ 197.396307][ T7871] netlink: 'syz.2.1006': attribute type 16 has an invalid length. [ 197.468230][ T7871] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1006'. [ 197.495459][ T7866] netlink: 'syz.0.1005': attribute type 21 has an invalid length. [ 197.542364][ T7866] netlink: 'syz.0.1005': attribute type 1 has an invalid length. [ 197.828568][ T7884] netlink: 'syz.0.1010': attribute type 2 has an invalid length. [ 197.857360][ T7884] netlink: 171236 bytes leftover after parsing attributes in process `syz.0.1010'. [ 198.208658][ T7890] cgroup: fork rejected by pids controller in /syz4 [ 198.718776][ T7899] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1014'. [ 198.824263][ T7903] netlink: 'syz.0.1016': attribute type 21 has an invalid length. [ 198.887002][ T7903] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1016'. [ 199.925915][ T7915] netlink: 162800 bytes leftover after parsing attributes in process `syz.2.1020'. [ 200.279232][ T7928] netlink: 'syz.3.1023': attribute type 10 has an invalid length. [ 200.308933][ T7928] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1023'. [ 200.374369][ T7928] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 200.409408][ T7928] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.510359][ T7928] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 201.184497][ T7934] chnl_net:caif_netlink_parms(): no params data found [ 201.602216][ T7973] netlink: 'syz.0.1035': attribute type 10 has an invalid length. [ 201.735333][ T7973] batman_adv: batadv0: Adding interface: netdevsim0 [ 201.743487][ T7973] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.771713][ T7973] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 201.839499][ T7934] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.870932][ T7934] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.937409][ T7934] device bridge_slave_0 entered promiscuous mode [ 202.015883][ T7934] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.055745][ T7934] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.084630][ T7934] device bridge_slave_1 entered promiscuous mode [ 202.326280][ T7934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.378849][ T4251] Bluetooth: hci0: command 0x0409 tx timeout [ 202.387777][ T7934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.562648][ T7985] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 202.604904][ T7934] team0: Port device team_slave_0 added [ 202.739330][ T7934] team0: Port device team_slave_1 added [ 202.966968][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.973957][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.125577][ T7934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.201021][ T7934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.209570][ T7992] netlink: 'syz.3.1040': attribute type 2 has an invalid length. [ 203.221282][ T7934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.247980][ T7992] netlink: 'syz.3.1040': attribute type 11 has an invalid length. [ 203.255887][ T7992] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.1040'. [ 203.291165][ T7934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.564886][ T7934] device hsr_slave_0 entered promiscuous mode [ 203.606697][ T7934] device hsr_slave_1 entered promiscuous mode [ 203.648939][ T7934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.688972][ T7934] Cannot create hsr debugfs directory [ 203.896288][ T8011] netlink: 'syz.2.1048': attribute type 21 has an invalid length. [ 203.904532][ T8011] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1048'. [ 204.059784][ T8011] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1048'. [ 204.189670][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 204.411705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:fe:29:3f:71:2e:c8, vlan:0) [ 204.466409][ T4392] Bluetooth: hci0: command 0x041b tx timeout [ 204.616743][ T4315] Bluetooth: hci5: command 0x0409 tx timeout [ 204.971699][ T8037] netlink: 'syz.0.1052': attribute type 2 has an invalid length. [ 205.076756][ T8037] netlink: 'syz.0.1052': attribute type 11 has an invalid length. [ 205.110178][ T144] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.141860][ T8037] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.1052'. [ 205.357398][ T8044] netlink: 'syz.2.1056': attribute type 39 has an invalid length. [ 205.534426][ T144] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.624158][ T8055] netlink: 'syz.3.1059': attribute type 29 has an invalid length. [ 205.726531][ T8058] netlink: 'syz.3.1059': attribute type 3 has an invalid length. [ 205.753403][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1059'. [ 205.813853][ T8055] netlink: 'syz.3.1059': attribute type 29 has an invalid length. [ 205.950002][ T144] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.004784][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.022489][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.071521][ T7989] device bridge_slave_0 entered promiscuous mode [ 206.109756][ T8057] netlink: 'syz.3.1059': attribute type 29 has an invalid length. [ 206.234286][ T144] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.295884][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.316048][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.349414][ T7989] device bridge_slave_1 entered promiscuous mode [ 206.393423][ T8066] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1061'. [ 206.469421][ T8074] team0: Port device team_slave_0 removed [ 206.475621][ T8074] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 206.536388][ T5935] Bluetooth: hci0: command 0x040f tx timeout [ 206.696411][ T5935] Bluetooth: hci5: command 0x041b tx timeout [ 206.967214][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.074756][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.364292][ T7989] team0: Port device team_slave_0 added [ 207.436675][ T7989] team0: Port device team_slave_1 added [ 207.766974][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.786271][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.937460][ T7989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.048784][ T8101] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1070'. [ 208.085157][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.093456][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.215047][ T7989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.413155][ T8118] validate_nla: 2 callbacks suppressed [ 208.413174][ T8118] netlink: 'syz.2.1074': attribute type 21 has an invalid length. [ 208.561140][ T7989] device hsr_slave_0 entered promiscuous mode [ 208.589718][ T7989] device hsr_slave_1 entered promiscuous mode [ 208.601271][ T7989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.615615][ T7989] Cannot create hsr debugfs directory [ 208.617336][ T5952] Bluetooth: hci0: command 0x0419 tx timeout [ 208.645869][ T8127] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1076'. [ 208.743006][ T8126] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1075'. [ 208.776296][ T5952] Bluetooth: hci5: command 0x040f tx timeout [ 209.006929][ T7934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.036961][ T7934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.065866][ T7934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.228261][ T7934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.563917][ T8149] netlink: 'syz.3.1080': attribute type 2 has an invalid length. [ 209.628984][ T8149] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 209.694603][ T8149] netlink: 'syz.3.1080': attribute type 2 has an invalid length. [ 209.790481][ T8149] netlink: 'syz.3.1080': attribute type 3 has an invalid length. [ 209.837721][ T8149] netlink: 'syz.3.1080': attribute type 4 has an invalid length. [ 209.896715][ T7989] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 209.949143][ T7989] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 210.024451][ T7989] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 210.084856][ T7989] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 210.108277][ T8156] netlink: 'syz.3.1081': attribute type 10 has an invalid length. [ 210.124300][ T8156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1081'. [ 210.133853][ T8156] device team0 entered promiscuous mode [ 210.147177][ T8156] device team_slave_1 entered promiscuous mode [ 210.163298][ T8156] bridge0: port 5(team0) entered blocking state [ 210.183486][ T8156] bridge0: port 5(team0) entered disabled state [ 210.224595][ T8156] bridge0: port 5(team0) entered blocking state [ 210.231113][ T8156] bridge0: port 5(team0) entered forwarding state [ 210.734895][ T7934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.856510][ T5952] Bluetooth: hci5: command 0x0419 tx timeout [ 210.907555][ T144] device hsr_slave_0 left promiscuous mode [ 211.047873][ T144] device hsr_slave_1 left promiscuous mode [ 211.124710][ T8182] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1085'. [ 211.204223][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.234147][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.298329][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.352190][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.444539][ T144] device veth1_macvtap left promiscuous mode [ 211.482243][ T144] device veth1_vlan left promiscuous mode [ 211.621819][ T8187] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1087'. [ 212.265525][ T144] team0 (unregistering): Port device geneve1 removed [ 212.339889][ T144] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 212.501645][ T144] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 212.674858][ T144] team0 (unregistering): Port device team_slave_1 removed [ 212.712994][ T144] team0 (unregistering): Port device team_slave_0 removed [ 212.744505][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.782209][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.013266][ T144] bond0 (unregistering): Released all slaves [ 213.181634][ T8187] mac80211_hwsim hwsim3 »»»»»»: renamed from wlan0 [ 213.229718][ T8194] netlink: 'syz.2.1089': attribute type 3 has an invalid length. [ 213.237800][ T8194] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1089'. [ 213.325140][ T7934] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.348134][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.362665][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.422718][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.438495][ T8200] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1090'. [ 213.449601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.465556][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.472701][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.489012][ T8200] netlink: get zone limit has 4 unknown bytes [ 213.503887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.532779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.555568][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.562735][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.584823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.608773][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.630138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.645431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.660492][ T8205] netlink: 'syz.0.1092': attribute type 2 has an invalid length. [ 213.670113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.686294][ T8205] netlink: 'syz.0.1092': attribute type 11 has an invalid length. [ 213.697717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.707018][ T8205] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.1092'. [ 213.718621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.767581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.787308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.835563][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.859706][ T7934] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.884446][ T7934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.925987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.943684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.954388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.971128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.983437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 214.005803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.041862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.102222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.147047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.179659][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.186908][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.199270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.208287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.227166][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.234245][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.263457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 214.305320][ T8230] netlink: 'syz.3.1097': attribute type 21 has an invalid length. [ 214.320646][ T8230] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1097'. [ 214.352890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 214.360900][ T8236] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1097'. [ 214.371372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.408629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.433289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.451102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.460960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.470750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.479487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.519256][ T7989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.545312][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.555662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.578146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.598608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.635413][ T8245] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1100'. [ 214.692030][ T7934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.707441][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.735303][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.822364][ T8256] netlink: 'syz.3.1103': attribute type 2 has an invalid length. [ 214.840685][ T8256] netlink: 'syz.3.1103': attribute type 11 has an invalid length. [ 214.880118][ T8256] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.1103'. [ 214.941724][ T8264] netlink: 'syz.0.1104': attribute type 3 has an invalid length. [ 214.966473][ T8264] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1104'. [ 215.061679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.093342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.123614][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.166368][ T8281] netlink: 'syz.0.1107': attribute type 3 has an invalid length. [ 215.187399][ T8281] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1107'. [ 215.227277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 215.243880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 215.352491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 215.369014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 215.400904][ T7934] device veth0_vlan entered promiscuous mode [ 215.427173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 215.437714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 215.460230][ T7934] device veth1_vlan entered promiscuous mode [ 215.529365][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 215.541604][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.580674][ T7934] device veth0_macvtap entered promiscuous mode [ 215.613091][ T7934] device veth1_macvtap entered promiscuous mode [ 215.673273][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.736602][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.769951][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.800021][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.814500][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.829443][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.852452][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.864458][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.875162][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.885507][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.896422][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.910916][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.921652][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.932447][ T7934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.943275][ T7934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.955274][ T7934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.967648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.007197][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 216.021610][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.042185][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.072173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 216.088222][ T8312] netlink: 'syz.3.1115': attribute type 2 has an invalid length. [ 216.096566][ T8312] netlink: 'syz.3.1115': attribute type 11 has an invalid length. [ 216.110422][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 216.112298][ T8312] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.1115'. [ 216.144681][ T7934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.161170][ T7934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.187944][ T7934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.208361][ T7934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.291073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.304830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.330911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.357427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.393064][ T7989] device veth0_vlan entered promiscuous mode [ 216.408619][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1117'. [ 216.444727][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.514868][ T8316] bridge0: port 3(veth0_to_bridge) entered disabled state [ 216.534776][ T8319] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1118'. [ 216.574870][ T8316] device bridge_slave_0 left promiscuous mode [ 216.588322][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.648202][ T8316] device veth0_to_bridge left promiscuous mode [ 216.654591][ T8316] bridge0: port 3(veth0_to_bridge) entered disabled state [ 216.693112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.704920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.757968][ T7989] device veth1_vlan entered promiscuous mode [ 216.870383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 216.882188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 216.899013][ T1234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.917518][ T7989] device veth0_macvtap entered promiscuous mode [ 216.924010][ T1234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.956443][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 216.974793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 217.023077][ T7989] device veth1_macvtap entered promiscuous mode [ 217.029830][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.051701][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.070821][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.106596][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.186364][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.214406][ T8344] netlink: 'syz.0.1126': attribute type 2 has an invalid length. [ 217.231131][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.257169][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.286349][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.316317][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.355987][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.381997][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.394012][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.404067][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 217.413196][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.430424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.458314][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.476305][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.509458][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.550956][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.577214][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.588838][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.598981][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.609632][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.621671][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.632758][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.663662][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.697357][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.719455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.789647][ T7989] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.811905][ T7989] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.833963][ T7989] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.844171][ T7989] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.042203][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.056498][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.116596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.124022][ T1234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.152548][ T1234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.393843][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.580606][ T8391] device team_slave_0 left promiscuous mode [ 218.827118][ T8392] device team_slave_0 entered promiscuous mode [ 218.864410][ T4470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.105841][ T8400] validate_nla: 3 callbacks suppressed [ 219.105862][ T8400] netlink: 'syz.4.1139': attribute type 3 has an invalid length. [ 219.133730][ T8400] __nla_validate_parse: 3 callbacks suppressed [ 219.133750][ T8400] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1139'. [ 219.171330][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.276554][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.313103][ T8411] netlink: 'syz.0.1144': attribute type 21 has an invalid length. [ 219.347518][ T8411] tun0: tun_chr_ioctl cmd 1074025675 [ 219.365968][ T8411] tun0: persist enabled [ 219.425062][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.442294][ T8415] netlink: 'syz.5.1147': attribute type 2 has an invalid length. [ 219.474562][ T8415] netlink: 'syz.5.1147': attribute type 11 has an invalid length. [ 219.490873][ T8415] netlink: 198172 bytes leftover after parsing attributes in process `syz.5.1147'. [ 219.532550][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.701918][ T8425] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1150'. [ 219.765211][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.800900][ T8436] netlink: 'syz.2.1153': attribute type 3 has an invalid length. [ 219.862703][ T8436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1153'. [ 219.895970][ T8425] device bridge_slave_0 left promiscuous mode [ 219.909428][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.678219][ T8452] netlink: 'syz.0.1160': attribute type 2 has an invalid length. [ 220.694296][ T8452] netlink: 'syz.0.1160': attribute type 11 has an invalid length. [ 220.703519][ T8452] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.1160'. [ 220.762050][ T8449] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.1159'. [ 220.884681][ T8454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1161'. [ 220.898348][ T8456] device bridge_slave_1 left promiscuous mode [ 220.905325][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.925613][ T8459] syz.2.1165[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.925714][ T8459] syz.2.1165[8459] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.970690][ T8463] netlink: 'syz.0.1164': attribute type 3 has an invalid length. [ 221.007408][ T8456] device bridge_slave_0 left promiscuous mode [ 221.043147][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.229741][ T8463] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1164'. [ 221.802751][ T8481] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 221.847452][ T8485] netlink: 'syz.4.1169': attribute type 3 has an invalid length. [ 221.860364][ T8485] netlink: 'syz.4.1169': attribute type 1 has an invalid length. [ 221.868850][ T8485] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1169'. [ 221.971792][ T8491] IPv6: WEäŒê>¾…: Disabled Multicast RS [ 222.082628][ T8497] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1173'. [ 222.225075][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.233242][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.244345][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.253634][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.262939][ T144] bridge0: port 3(batadv0) entered disabled state [ 222.288302][ T144] device bridge_slave_1 left promiscuous mode [ 222.294907][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.305978][ T144] device bridge_slave_0 left promiscuous mode [ 222.312643][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.331984][ T144] device veth1_macvtap left promiscuous mode [ 222.338307][ T144] device veth0_macvtap left promiscuous mode [ 222.660087][ T144] team0 (unregistering): Port device team_slave_1 removed [ 222.684996][ T144] team0 (unregistering): Port device team_slave_0 removed [ 222.704279][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.729888][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.922419][ T144] bond0 (unregistering): Released all slaves [ 223.293752][ T8539] device sit0 entered promiscuous mode [ 224.144175][ T8567] validate_nla: 11 callbacks suppressed [ 224.144194][ T8567] netlink: 'syz.0.1190': attribute type 2 has an invalid length. [ 224.221910][ T8567] netlink: 'syz.0.1190': attribute type 11 has an invalid length. [ 224.246703][ T8567] __nla_validate_parse: 5 callbacks suppressed [ 224.246718][ T8567] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.1190'. [ 224.928630][ T8585] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1197'. [ 225.137542][ T8585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1197'. [ 225.178975][ T8592] netlink: 'syz.3.1199': attribute type 2 has an invalid length. [ 225.248796][ T8592] netlink: 'syz.3.1199': attribute type 11 has an invalid length. [ 225.333609][ T8592] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.1199'. [ 225.644847][ T8602] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 225.684455][ T8602] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 225.711295][ T8603] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1202'. [ 226.074234][ T8621] netlink: 'syz.0.1206': attribute type 10 has an invalid length. [ 226.139092][ T8621] batman_adv: batadv0: Adding interface: »»»»»» [ 226.183338][ T8621] batman_adv: batadv0: The MTU of interface »»»»»» is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.324788][ T8621] batman_adv: batadv0: Not using interface »»»»»» (retrying later): interface not active [ 226.547953][ T8627] netlink: 'syz.0.1209': attribute type 3 has an invalid length. [ 226.556056][ T8627] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1209'. [ 226.570206][ T8632] netlink: 'syz.2.1210': attribute type 3 has an invalid length. [ 226.600135][ T8628] netlink: 'syz.4.1208': attribute type 10 has an invalid length. [ 226.625339][ T8632] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1210'. [ 226.684836][ T8632] netlink: 'syz.2.1210': attribute type 3 has an invalid length. [ 226.692788][ T8628] netlink: 'syz.4.1208': attribute type 10 has an invalid length. [ 226.762724][ T8632] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1210'. [ 228.945222][ T8733] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 228.987770][ T8733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.229202][ T8740] validate_nla: 38 callbacks suppressed [ 229.229218][ T8740] netlink: 'syz.3.1241': attribute type 46 has an invalid length. [ 229.438122][ T8749] __nla_validate_parse: 39 callbacks suppressed [ 229.439512][ T8749] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1243'. [ 229.603234][ T8754] netlink: 'syz.2.1246': attribute type 2 has an invalid length. [ 229.632278][ T8754] netlink: 'syz.2.1246': attribute type 8 has an invalid length. [ 229.661901][ T8754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1246'. [ 230.017048][ T8780] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1253'. [ 230.041397][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1254'. [ 230.388150][ T8807] netlink: 192000 bytes leftover after parsing attributes in process `syz.2.1262'. [ 230.431177][ T8811] netlink: 'syz.5.1263': attribute type 1 has an invalid length. [ 230.442936][ T8807] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 230.460126][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1263'. [ 230.663618][ T8823] netlink: 'syz.3.1265': attribute type 2 has an invalid length. [ 230.736316][ T8823] netlink: 'syz.3.1265': attribute type 11 has an invalid length. [ 230.760048][ T8823] netlink: 198172 bytes leftover after parsing attributes in process `syz.3.1265'. [ 230.851190][ T8799] ------------[ cut here ]------------ [ 230.856822][ T8799] WARNING: CPU: 1 PID: 8799 at kernel/events/core.c:6688 perf_pending_task+0x358/0x470 [ 230.866553][ T8799] Modules linked in: [ 230.870487][ T8799] CPU: 1 PID: 8799 Comm: syz.0.1260 Not tainted syzkaller #0 [ 230.877960][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.888101][ T8799] RIP: 0010:perf_pending_task+0x358/0x470 [ 230.893873][ T8799] Code: ff 84 db 75 14 e8 e8 9f de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 9f de ff e8 b7 4e 67 ff eb e5 e8 c8 9f de ff <0f> 0b e9 f3 fe ff ff e8 bc 9f de ff 48 c7 c7 c0 20 1a 8c 4c 89 f6 [ 230.913577][ T8799] RSP: 0018:ffffc900033bfd18 EFLAGS: 00010293 [ 230.919749][ T8799] RAX: ffffffff81992c48 RBX: ffff88807af78a48 RCX: ffff888022b4bb80 [ 230.927795][ T8799] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 230.936115][ T8799] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10045698b3 [ 230.944284][ T8799] R10: ffffed10045698b3 R11: 1ffff110045698b2 R12: ffff888022b4bb80 [ 230.952323][ T8799] R13: ffff888060a6ad58 R14: ffff88807af78818 R15: 1ffff1100f5ef103 [ 230.960350][ T8799] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 230.969384][ T8799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.975993][ T8799] CR2: 00007ff41f1a0990 CR3: 0000000067ffb000 CR4: 00000000003506e0 [ 230.984016][ T8799] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 230.992054][ T8799] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 231.000080][ T8799] Call Trace: [ 231.003381][ T8799] [ 231.006386][ T8799] task_work_run+0x125/0x1a0 [ 231.011020][ T8799] do_exit+0x61e/0x20a0 [ 231.015217][ T8799] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 231.021288][ T8799] ? put_task_struct+0x80/0x80 [ 231.026081][ T8799] ? lock_chain_count+0x20/0x20 [ 231.031018][ T8799] ? preempt_schedule_thunk+0x16/0x18 [ 231.036453][ T8799] do_group_exit+0x12e/0x300 [ 231.041093][ T8799] __x64_sys_exit_group+0x3b/0x40 [ 231.046219][ T8799] do_syscall_64+0x4c/0xa0 [ 231.050664][ T8799] ? clear_bhb_loop+0x30/0x80 [ 231.055382][ T8799] ? clear_bhb_loop+0x30/0x80 [ 231.060161][ T8799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.066092][ T8799] RIP: 0033:0x7f86c1ee3749 [ 231.070615][ T8799] Code: Unable to access opcode bytes at RIP 0x7f86c1ee371f. [ 231.078028][ T8799] RSP: 002b:00007ffe03a5abf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 231.086516][ T8799] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f86c1ee3749 [ 231.094606][ T8799] RDX: 00007f86c1e9ac47 RSI: 0000000000000000 RDI: 0000000000000007 [ 231.102657][ T8799] RBP: 0000000000000003 R08: 00007ffe03a5b087 R09: 0000000000000007 [ 231.110691][ T8799] R10: 00007f86c2139fa0 R11: 0000000000000246 R12: 00007f86c213a27c [ 231.118726][ T8799] R13: 00007f86c213a270 R14: 0000000000000091 R15: 0000000000000003 [ 231.126768][ T8799] [ 231.129818][ T8799] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.137131][ T8799] CPU: 1 PID: 8799 Comm: syz.0.1260 Not tainted syzkaller #0 [ 231.144513][ T8799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.154589][ T8799] Call Trace: [ 231.157883][ T8799] [ 231.160835][ T8799] dump_stack_lvl+0x168/0x230 [ 231.165544][ T8799] ? show_regs_print_info+0x20/0x20 [ 231.170790][ T8799] ? load_image+0x3b0/0x3b0 [ 231.175336][ T8799] panic+0x2c9/0x7f0 [ 231.179272][ T8799] ? bpf_jit_dump+0xd0/0xd0 [ 231.183862][ T8799] ? perf_pending_task+0x358/0x470 [ 231.189068][ T8799] __warn+0x248/0x2b0 [ 231.193227][ T8799] ? perf_pending_task+0x358/0x470 [ 231.198378][ T8799] report_bug+0x1b7/0x2e0 [ 231.202748][ T8799] handle_bug+0x3a/0x70 [ 231.206942][ T8799] exc_invalid_op+0x16/0x40 [ 231.211588][ T8799] asm_exc_invalid_op+0x16/0x20 [ 231.216518][ T8799] RIP: 0010:perf_pending_task+0x358/0x470 [ 231.222296][ T8799] Code: ff 84 db 75 14 e8 e8 9f de ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d4 9f de ff e8 b7 4e 67 ff eb e5 e8 c8 9f de ff <0f> 0b e9 f3 fe ff ff e8 bc 9f de ff 48 c7 c7 c0 20 1a 8c 4c 89 f6 [ 231.241926][ T8799] RSP: 0018:ffffc900033bfd18 EFLAGS: 00010293 [ 231.248258][ T8799] RAX: ffffffff81992c48 RBX: ffff88807af78a48 RCX: ffff888022b4bb80 [ 231.256274][ T8799] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 231.264265][ T8799] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed10045698b3 [ 231.272259][ T8799] R10: ffffed10045698b3 R11: 1ffff110045698b2 R12: ffff888022b4bb80 [ 231.280253][ T8799] R13: ffff888060a6ad58 R14: ffff88807af78818 R15: 1ffff1100f5ef103 [ 231.288264][ T8799] ? perf_pending_task+0x358/0x470 [ 231.293423][ T8799] ? perf_pending_task+0x358/0x470 [ 231.298566][ T8799] task_work_run+0x125/0x1a0 [ 231.303192][ T8799] do_exit+0x61e/0x20a0 [ 231.307376][ T8799] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 231.313385][ T8799] ? put_task_struct+0x80/0x80 [ 231.318173][ T8799] ? lock_chain_count+0x20/0x20 [ 231.323064][ T8799] ? preempt_schedule_thunk+0x16/0x18 [ 231.328508][ T8799] do_group_exit+0x12e/0x300 [ 231.333137][ T8799] __x64_sys_exit_group+0x3b/0x40 [ 231.338195][ T8799] do_syscall_64+0x4c/0xa0 [ 231.342634][ T8799] ? clear_bhb_loop+0x30/0x80 [ 231.347346][ T8799] ? clear_bhb_loop+0x30/0x80 [ 231.352060][ T8799] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.358055][ T8799] RIP: 0033:0x7f86c1ee3749 [ 231.362503][ T8799] Code: Unable to access opcode bytes at RIP 0x7f86c1ee371f. [ 231.369916][ T8799] RSP: 002b:00007ffe03a5abf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 231.378355][ T8799] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007f86c1ee3749 [ 231.386344][ T8799] RDX: 00007f86c1e9ac47 RSI: 0000000000000000 RDI: 0000000000000007 [ 231.394338][ T8799] RBP: 0000000000000003 R08: 00007ffe03a5b087 R09: 0000000000000007 [ 231.402338][ T8799] R10: 00007f86c2139fa0 R11: 0000000000000246 R12: 00007f86c213a27c [ 231.410335][ T8799] R13: 00007f86c213a270 R14: 0000000000000091 R15: 0000000000000003 [ 231.418342][ T8799] [ 231.421685][ T8799] Kernel Offset: disabled [ 231.426040][ T8799] Rebooting in 86400 seconds..