last executing test programs: 2m55.948675096s ago: executing program 1 (id=1743): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1053e0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b708000092b700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000186900000d0000000000000000000000852000000100000018430000faffffff000000000000000085000000160000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x2, 0x2, 0x6}, 0x10, 0xb7c0, 0xffffffffffffffff, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x10, 0x5}, 0x94) socketpair(0x14, 0x2, 0x6, &(0x7f0000000040)) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=0x0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r2}, &(0x7f0000000680), &(0x7f00000012c0)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7}, 0x57) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="18", 0x1}], 0x1}, 0x20000001) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="8fedcb7908009875f37538e486dd6317ce8100071100fe80000000000000875a65019ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m54.316782922s ago: executing program 1 (id=1765): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x400000000002, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x63, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000400a525f56d13762b06384a7ca7fb86", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"/25], 0x50) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback, 0x0, 0x1, 0x100, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) 2m53.795314235s ago: executing program 1 (id=1769): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe47f}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f00000003c0)='GPL\x00', 0x4, 0xb7, &(0x7f0000000400)=""/183, 0x41000, 0x8, '\x00', r3, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0xd, 0x6, 0x5}, 0x10, 0x791, r6, 0x3, 0x0, &(0x7f00000005c0)=[{0x5, 0x2, 0xb}, {0x2, 0x3, 0xa, 0x7}, {0x0, 0x3, 0x0, 0xa}], 0x10, 0x9}, 0x94) (async) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 2m52.108568495s ago: executing program 1 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000070000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa40}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x81, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r0, r0], 0x0, 0x10, 0x3e6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) close(0x3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000880000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m37.015713966s ago: executing program 32 (id=1775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000070000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x20, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa40}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x10, 0x81, 0xd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r0, r0, r0, r0], 0x0, 0x10, 0x3e6}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) close(0x3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000880000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.422264233s ago: executing program 2 (id=2924): socket$kcm(0xa, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r5, 0x0, &(0x7f0000000540)=""/153}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) 2.043025319s ago: executing program 3 (id=2928): r0 = socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000009376, 0x2241, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x1, 0x4, 0x0, 0x20, 0xf6, 0x0, 0xd871}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d080300000000e8fea4a11800150006001470c1600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x20000004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000000087"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"]) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xffc0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x11b, 0x3, &(0x7f0000000040)=r4, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r5, 0x0, 0x15, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07000006007c09e8fc55a10a0015000600142603600e120800020081000401a8000180f2ffffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="78d25cd8fc519158fae2b35f0fb8509f0e462b0f5c230cae9e30e903547d23df7f93335d3050249948c644d6ef022fe881136e26a929e7c564eb39ae2b6feb51ef328a9bd83546612f074993915f333613131b", 0x53}, {&(0x7f0000000100)="6a67e8e249858e32b2041e54476509a281bae6adab5afeac57f39d8a842a792258b19388e32819b55adbb78f7b76159ae742c149ee5fd8ebf69834f79ae021834e52a9a4146dadf0001e5ac56281c2af0ae9c62a142f7eafd40d159cb1387e8b9061f1df0935d9b38d5592afaf81ca", 0x6f}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="32c415", 0x3}, {&(0x7f0000000000)="8adfa6f943", 0x5}, {&(0x7f0000000980)="0f2eae4bbfcb53f435a232c81c75ccc817a51bc23af5bbda8dc9d070fe7424d68cce060b607348da007c69fed4fe4a90615d874fc8d76f6c0e23643c579731a8c7ec4ec6029e570e71a62dfac6ac562d21facee838d2e1d33429350a89d48d33e7d1ce2f2afe04150baea0fa0c84a0e9b1f77c5ef45cf928d6bdaad1b14502b42a5f8b4e7f89d162e0a691f5f6ede7bdca25be85dad30b9af66ec1", 0x9b}, {&(0x7f0000000380)="b844bd78393991d31e7af50ca664479492ca247e357651e7a370a7a20e1be4040d25cea3cc686a2bc65130259d44745df9fb6d4573fe60b41e524b445f0a5e318b77879782cdc44b44fb61", 0x4b}, {&(0x7f0000000400)="90b1c2438c390ca7707a0f11ca1a0588da7d803d2b5d9411824ecc12aca0fb788b484818e76ff544a6c4ebd5869ddf3d8d82eef4022bae704cb4b49ddf9b14c58157ee47", 0x44}, {&(0x7f0000000480)="c4e25f41d552cd6b2ef6e56c18abdf3fce4a688b8b6cb3ed9c4a3c0dda40766cf1d7bf0a2dd48150e26eaf4ed38bb6e1c9b8bdfa8c256f21753083f0d7ec48e6810152b1faa9f0ebc41fabcf4201bb656ec748d4cb84afbafc630a40e4678a6e449f1e98178def02b502a58b17a6cd793ba8b9529ece549f115cdf947e8893673b697a5431e81cb5cf4b0cf87e04d2a9a562a2d7d5fb437b43614634146f61342c9ca13ed96cd8230dafdb45dc45f3d4a6b164d27299b0", 0xb7}], 0x9, &(0x7f0000000600)}, 0x40) 1.889242929s ago: executing program 4 (id=2930): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) syz_clone(0x4004271f, 0x0, 0x0, 0x0, 0x0, 0x0) 1.888394389s ago: executing program 5 (id=2931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x15, &(0x7f0000001480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000001850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.578524997s ago: executing program 4 (id=2933): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="0500ffffff80000063110800000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="0500ffffff80000063110800000000008510000002000000850000000500000095000000000000009500a5050000000087a45f2f52cef602ee26b815b347e4ed1026ee3b8abcd838b31a"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) 1.481104013s ago: executing program 5 (id=2934): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x0, 0x56}, 0x28) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x31, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x60780, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300"/12, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="03000000050000000200"/28], 0x50) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) (rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000340)=ANY=[@ANYBLOB="184a7d000000030065", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r2, @ANYRES8=0xffffffffffffffff], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r3}, 0xc) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000"], 0x0, 0x56, 0x0, 0x1, 0x80}, 0x28) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r9, &(0x7f0000000200)}, 0x20) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x78, &(0x7f0000000040), 0x4) (async, rerun: 64) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000080)=0x3) (async, rerun: 64) write$cgroup_devices(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a204d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf"], 0xffdd) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000040), 0x1006, 0xffffffffffffffff, 0x0, 0xd88d02a0}, 0x38) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4090) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1c, 0xc, &(0x7f0000000980)=@raw=[@generic={0x7b, 0x1, 0xc, 0x8, 0x8000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x6, 0x3, 0x5, 0x100}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xbc}, @ldst={0x1, 0x0, 0x2, 0x8, 0x5, 0x100}, @generic={0x6, 0xa, 0x7, 0x7, 0x46ea}], &(0x7f0000000a00)='syzkaller\x00', 0x4, 0xbe, &(0x7f0000000b00)=""/190, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000f00)={0x3, 0x7, 0x0, 0xfff}, 0x10, 0x2aaf3, r6, 0x8, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f00000010c0)=[{0x4, 0x5, 0x10, 0xa}, {0x2, 0x5, 0x3, 0x2}, {0x5, 0x2, 0xc, 0x6}, {0x0, 0x3, 0xf, 0x6}, {0x3, 0x4, 0xf, 0x4}, {0x3, 0x5, 0xd, 0x7}, {0x2, 0x3, 0xf, 0x5}, {0x1, 0x1, 0xa, 0x9}], 0x10, 0x3221}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000840)=r11, 0x4) (async) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 1.480805753s ago: executing program 4 (id=2935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES32=r0], 0x0}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x16, 0x0, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x8, &(0x7f00000005c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5d31, 0x3020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) r6 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="63202a3aac08714b"], 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x11b6}, 0xb, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r2, 0x3) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24044084) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r8], 0xfe33) 1.268872107s ago: executing program 0 (id=2936): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4003, @dev}, 0x10, 0x0}, 0x3000c0c5) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$kcm(0xa, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5b, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x801) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}, 0x10022) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 1.112252927s ago: executing program 3 (id=2937): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x5, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_config_ext={0x100, 0xffffffffffffffff}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000180)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0xb}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x9, '\x00', 0x0, r6, 0x1, 0x5, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000005000000000000000300000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001713feff08000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000100"], 0x0, 0xfffffff9, 0xcf, &(0x7f0000000240)=""/207, 0x41100, 0x1, '\x00', 0x0, 0x19, r6, 0x8, &(0x7f0000000340)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x4, 0x2, 0x7ff}, 0x10, 0x2283b, r6, 0x5, 0x0, &(0x7f00000005c0)=[{0x3, 0x3, 0x10, 0xa}, {0x1, 0x5, 0xb, 0x7}, {0x4, 0x2, 0xf}, {0x2, 0x1, 0x5, 0x8}, {0x5, 0x2, 0xb, 0x4}], 0x10, 0x6}, 0x94) ioctl$TUNGETFEATURES(r6, 0x5452, &(0x7f00000013c0)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) sendmsg$kcm(r0, 0x0, 0x0) 1.013198252s ago: executing program 2 (id=2938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc", 0x8b}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) r1 = getpid() r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x9, 0x4, 0x80, 0x0, 0x2, 0x83000, 0xb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0x7, 0x21e9}, 0x1, 0x798, 0x0, 0x9, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x5) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x114244, 0x0, 0xafe5, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x400}, r1, 0xffffffffffffffff, r2, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) close(r0) 1.012728432s ago: executing program 5 (id=2939): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 947.178089ms ago: executing program 4 (id=2940): r0 = syz_clone(0x40808200, &(0x7f0000000040)="3b27604640c3c0e41e04a752155df0cc08204d8891e56fa524cef540b4095cb32e635b837e7754cb553598a9d2ba969e2bc0db978b6d2ba0ca5eb52a03f699cf998f262161ab06c081e87eba1d063f6e9e7f3e699a1cdb8f096007e6cf628ee258ac3f92130569f39149746b8d4c0c4c59591dca46b3834b58f764b8f5cd7eada22a5f416814e524f0b1b2", 0x8b, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000480)="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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x48) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000200)=r1, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f90224fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x40}, 0x405, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x800}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0xfffffffffffffffd, 0xffffffffffffffff, 0xfefffeffffffffff, 0xffffffffffffffff, 0x1) (async) r5 = socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) (async) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x13, &(0x7f0000000200)=r8, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x6, 0x16, &(0x7f0000000200)=r8, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x1a, 0x7ff, 0x7fff, 0x2db827c6, 0x80, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) (async) unlink(&(0x7f0000003640)='.\x00') ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000440)={'macvlan0\x00'}) 946.835249ms ago: executing program 0 (id=2941): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f00000005c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2c}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x1000, 0x5}, 0x7000, 0x2, 0x0, 0x0, 0x200000000, 0x5}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x41100, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x53}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x400004, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) r5 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x16, 0x1, 0x4, 0xf8, 0x0, 0x7, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x7, 0x5}, 0x16283, 0xe8, 0x0, 0x4, 0x0, 0x7, 0xffff, 0x0, 0xfffffffe, 0x0, 0x8004}, 0xffffffffffffffff, 0x0, r1, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f000000000000000400000018110000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r7, 0xfffffffffffffec9, 0x0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x10, 0x400000002, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2048) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 904.0088ms ago: executing program 2 (id=2942): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x1d, 0x8, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xf, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 776.266452ms ago: executing program 5 (id=2943): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) syz_clone(0x4004271f, 0x0, 0x0, 0x0, 0x0, 0x0) 601.166517ms ago: executing program 3 (id=2944): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x22, 0x0, 0x0) 600.786357ms ago: executing program 2 (id=2945): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001600811e4e81f782db44b9040a1d0802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f9, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) r4 = syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0xd, 0x2, 0xd, 0x3, 0x0, 0x8, 0x6d0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000001300)}, 0x104200, 0x3, 0x4, 0x8, 0x7b, 0x5, 0x2, 0x0, 0x2, 0x0, 0x3}, r4, 0x3, 0xffffffffffffffff, 0x3) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000180)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) sendmsg$unix(r5, &(0x7f0000001440)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000080)="f790ce97f81c43e85daec8d8c25adcd925490e334959f67abdc42e97d916818087cdb81d7270234912fa5e07d4d6b5b8d7b60cf9591fc6a052e29f4d017c4b6eda64d8b9e3dce3503fe0d9e8c157c089e20de7a18235f4c6da708688c91255e0876a5f2a27c6aa2a9591c254da669288ae90896a3e1926f15f8b2b1221e0e55a3896a6649b68238dbac4dcac0876100be9e7a17d3468e20d6c501cec9a3c7fa3f8008019878d242c656d06b34cf23ecd16c72c77b1e0588497bed20af9db70d4a12273bee6fa2b1b462e0a9b03cb9b8f917f99d51fc547c6f6f41eae72092668c4a40f4ad681516349d42a", 0xeb}, {&(0x7f0000000180)="00afb45980144b51234b2fb4e31a29a26a9d53886324fb95e013ce29f758ecd3ceb8e726d968e50922285dd77c430ddaa727ece59706c037d6e8348fca2e947976b6add19883b2032548ef79637c540b5f20e162c5ffd6d238c5e98b46d1c7f909463ae45549ee10777c07fb79900212d79c89df491db9e475b9184869650ceb32c3ec1f07477accb3cfbbc9cc5f19e2bccd7d9e32c4e4d7932568c11aa023ac22dbc6d8cfcd083f918dd295b8c522950439dd27cbd881f31256c660d0380171266f25d4888202ff27a372ca8b7a5f8c27b9a93343657d90ff78fa1f541291d69ae31b606f308976ff32ae2dcebc92e8094165c479325fb0d17f8dbe55c8ee4f0fe11505af418392381ea9b1fef4cfce40c60ee41c3e7c6d49e0cd168b0efe33fea03b8127ad9284d0072ba9d37ab2b0a0e4330043fdec6eb184abfa3e0270df2e43290781f5421b9221c5dc99afb64e08198f7f527d0e7a87850bd23cfb2289bea2e3979a8152f606073f805693d6dfe400d7087b4d6531f8d52bcfd33ceadfebfce598129276af5f327e47e0427b8d6cb990a53d79b89d15c5ca1ad0a136cf9b93848a978ce3aa77e507070e1c1c6e1bfc3f9e91b2a9eb90d06eac7e7a1ce21fe646c4c84e0e75b9edc64ce89a4a5652aeda84feaf48ac29bc35341f65e1f114d649329e817fa3815f03263275f27630d279c2c50a98ac03b9f78bd9d632a3f3f3280641ad9b42be3ecfa9abef056df308e1951e37cea7bf9e8baf644ae60d9c578d3b5ccd1ed5f1e09f9f2184e96e08a0c3af3f0ea8bd9f16363545d6454e403264cdd663c23335a879caa8b00c9648f2e838525776937fdbf6ef922ca7b7febd730f949ecf32c6b63aefec669d8c26122b46bb9517330ad53137d94266a598cc27b1716157885a56aca712e1179106d8e27d9fd3ca4c9793c1497574bcf244198a2828ef7ddde6043f2e9625ad95ef7cf6498a6d5e1c7061704dd8d61526b555e195e780c3216897cce73d808cf37ea8c590e28132832fd23530b2f4867d1a3fcee1cb797bfc7ce586029338479dbf92747cf7835912c8e9211dc655221451f6ab4990ce4a2a3ad64eaf50fc6c36dcd01bf4dec3a0ad98849e9fe2ac612cdc18dd69172036f54b3169172ac4d60dc6458bd0a0d95e1e4eec00f3b2b25b8351240132dfc884a7f04e4404f2d8bf4f8fa5f6ddff361394b3c366ce9297ff1c775df79779d5e9afb1288df4e361fae87d0ca1904e110b181394cdc6fdea9a9c2d629352f44d1ae73b357e05b18cf30789cbcd6bae5dd0080c0650eaaa82c045d52fdf6372e1ef5d6e5c705bf82cc2c50cd398dda6376a0463f2d77b2ab8ae6b37d31491cbdd646524b0e2c6e1aeb5fa268c5e5de34db2bcf69366a024275f78f06441d823583191b5ad1915732d82f236abe40b5b841791c247ff57a3c907e330431c0b08da2dd1f7d0f02f3ae3c33e1191943dfb3ab9dbfaa882cd296dde8b1d2395e442ec395a9a5fd1873a2c03b4dab69cdb1960cc60b28065887c0cb6ebe310782952207de07e51123369a5298b56cbe6c63c78758860e7da1edb257bb242b7ab388a9b78d1d2826c12be9704f22459f215ce487ca84d3dd8f23fca6f963f0b48fe5d6ce6fdf9b233ee4ae658a23cf011d3609c0bbafe716bc4dcf7da3339ee99a3ce719106b085d0f99bb6190838bd6831bbe9746e39644c0387a0e4c1837fe22d7b756a31bb9de2c3e1c745d57e6319cf26e2106e3a56e7bb0947534dc64e3dd0be3ad50d12a33b79813bb96650d3e1e0abeea5c92577f68f892f1fc60bc1d40dfbd861fd960176967c505ef75f268da77867f79e32681ec9064f097993f3267cbdbf5b2173c790bf4db6615d34e3b378667470682dd08f837cc0aa1ef3a8986855945c49453982f9c1c4a9757d588c6facac3245c99f6fd9898bb97b820214769487a2b05faf962b1a475c57835eab8afb2b48115570224ebf20c3e10b01c30a36043ec7dab65403b615d835dccbdce9d7bc8b35e9f9a6e5a1a66aaac63d22f09be543fb0842765e9c9b4669d930cb99d9e20544c9175462909bd291662f54e206a5982597c6592f64828861ce2510313e868e7dc58863dfad7b63723712b60d1d41c94ba4b95b9947fd4fdd1994b9ec2e8e42e213628ee5fc41818e96303754c19b4b132595d2efbb4cf52b9aa49e7b4565dcc4f06d7da04f2bbc96ca73b75884ddcc1b4e142fff77bb493005f25009ca707b52b4d967b5e7ad2f52c175bbd6d09706261647e602b0feb2e1c9d7b4f3ec6c261f90459026c3c9a7d9b89a63954ada7d2a16bacfa9bc4dc9cb0d173f10b04e639d58e27cc098f8d37a7a1942ee773486e37027f85c7bc2d49e98a7dddc6b0364f0473f3fd10f6c01bc4655f42f09549c0986fb2d0f8aca32c175ad045f69116ea4e2e2605283174d89218468553452b3d7c7352912fa958ef7eb5945232a834de66370b898f9d419c86d16236d9e25838730f876aec6061ea06248e517aa28fbc7bd0f7d3790223089cbb237875dc094f268e35c299b164ab94cfe62f23d3609857872995a8f9f0e78ab7dd11af0af979762d2305e6894003afae443de3a944b067136d03847cb09107e42c30e43a07d8df5ef53e8f0a1148026a35567c476602b9d0dd67032d0c5bea29de5afcb4e69bc2006db0d7622c107004541dcfc4178af933484d5f9c6c65dbf3494fccf0c6fd664e9a2ca77fa56075d2e91a863e79db3b4ffaa741c25e1c74630103271c84caa2aca390195b8e27e14d3c5a1db3c9a66a9f6d4b69b4446b4c3892499e60cc1cd54790e7a99e06fd1e7cd0f64807d640948e984e933bd7699f9ae637c28684a279db7736faed109f69349fffb29295a6d80d7de185431b0e5de843981fcee23040a336e19d3d68c0ab9964c116963045d09bc46ecc46ea7b0e9a0e16997d65ca14cd2a1fddc1801dc9ebbae10a07f2c5c1fc6b1dedacb07374db0f2602003e0efbfcdcf183696a922a4382ef19d868291f084d5502a712faab05df81702108a86c170fc91bd27fc606241192a15a7125a299da72a3833b98b7bb89dc5b9c95cc7c4c234fb9143f7cb500f3e5e6c4b5e24b0cb9e8978a64c177c1904623f690db3fa9a025a73ce07aa9ffb23fd9e97e7ddefbaf0fcca3d929a1877680f7c5866b12078a09103651054cc029ad4e74aa91aafd13aa6736d5aeaeb29bb86980760d430404600ac075c0e41d78acf7f8d599267dd8883dcaf8e4f4b8878084fc633e168ade769e387f22592e3e4a3936b9206e76a85f1312160ad8e21ec80641d3bcc9333cf40815266920a2ec40bece5bdbf12046a9bd2f6e06ef2c1294c3524065d55967478e4f96c698033c89c891bcb9dff3d04603a671f74d5dcbf8cb13278eb744dad7166752b7ba91350354d0c9503f85acb8c30cba0a7dd345b0ad9ac3e752c5afc0fbf386eb370be96d85905cfcefe94fb7bc79a53760e131d82feead9541403b48e2a8d2772bbd280c9d8a095abc1d00b342b388da94884aaee4b085407e4cbc8671e8b4493e059546551f507f9e5a54e9958c9c3cf8860ff69e157200e03519cb1a1c974b7187cd11e6e35ba15d4dbb563268dcfa33e5109fc97cb37835da1de1e3cbe2da223102a5345ea2cdcd73d6382ad293bb6afb67ccbaf5438e77ff5e51fd1a0f2477a9e856dfdc82783b6181d02fef7ec60406eabec74360d5b768574186ddbec74b8f2bc53759091863433aec9a995de4beebab4c48aad20d5d16d56d837c671d90b21ee29efb69082a8bb3972df0d26141c8a7ce70ca9aee1d59a58a8a432a73e638b44fc8906085e3bde38d7dbc670bb64621fb6dc39f58f9bceac311170bdf8ae3d05bb08817bcad9ea53de005a38d8d0b3e983d96226561cbe62c85c2798efeb61aebf955e627da58bf6009ad717bf4b7d1e0e2eaebcccbc19a1dfdc4f9414dec6be6cb4407cd0d9a1db1558ede1f0d01dde11887ce9b4afd73528312d376e9e614ea8947fa8273e4d9da95bcf59461a8b20a6acab9b4d5578cf67e8be7d07b8498b6315596fe7b8b99c598c2c8add7036241e745e9d58c4fc18c9095a062d37cb3d2a79cec97538ff0950c7fb2b37fc31fb0c19a971fa341b9c92509bba712ed25d47301db30740565f88f9977300faf7a252472a8223b677fbbbc546a03043e19668cdc969c0e63f352a9e84a19a008dd77a218f635df5b0561dd04730f1ee2cfea8d2a7d7f5cca02ee69831e593d46ec9b7ed816df017875bba532cd6e1eb20e937906f651fb1e74a9393fdcf7624476b886bd4d38fd8a29bb539088b877ee2567813fe7cbb60b795687a30c5a328fc49bd578e9490d48e3005a27f609dc351e6b7b21d27ab85ba0b6161bed680f348509ab0e8878cf206b4bc34a062399f6ef1719bb4a581f2a4112730ac8d0668b8b36cba35677239556b3d2301e3a25a425593542e747133795f3e56d9fe447e40c8d5f6b0512616161e450ff59d4e48278540f746864937989e4abb8c526a27aa9e0d9c680533fc25763128ebdeee9e8065a01b6eae393cd37afab3b1a6e19eeecd0a9fda24e0465b58a2068af95a8cbde04d0bb2169891a47affb2af921faca3f18955f27da863237865ad090af0b4c397b96d7d0415ab50f93bc87940f36c6808f6e13e513ab9098feec53b3c33016943f58e74320e6d1179767caac3efe99d9832b2098d18890de9a7d9382874e02eb8513fd2586e7a286d315fda583151acd4c019d9734469e7836888f9aec2e2a208e5f813662d18e8074f934b60adb6be7c1f1f5880629b9384ee76c5c16ccd272468ac36064113146ac42a05f2b3bf3854dd0f3ee3234969a1916c8e479ca6cde95c549ed89073b3bf7a14683bb7da68cd31ec9293dcc10700870839940bb3b30db3660c50bded997f035db3c94f25c39fd9feb8c67235549c8454b9deddaddb1846d968505ddf4fab209d32c1f68b87c9faf77cad4bb32e36cb9b6d20c1f209eb21a709fabdffc2ab71fc210905e85615dee3f0a1ba8da70bbf8168a983d403d0d6bf4aff387aee342d7366d53cc0d9e36584f2d227bfc42e4abead9cb21be8456bd989fe5ab8b7f481d9becbfde2a9e5a5d2acc36ff5d5e2c15d36bc43523be365307ef8242bb37a1666586fd2094e2a74bacba23ecfb39e41571fd3de900c378f1e9c13e11930fbfe1e3c68e96916e47cf641c7dacf441a0c438ba2b505a6ef06fa37e968de55ca0250430e3be5f6679944dc2bca962870f41a77a1db26cbda69e591148580d32e3033963ffcc36620c8e9ce7e8a1358d6a204415623927a56f308732afaec9593f35d53fd5d1e75b00ff72a8f6674fe95ba153b810a1d11c7c1407dc6e5e35278f157edd7486b90178789ac3cf7e375f4d45ddb10a8864df7304d9229de8e07a1bf7128494872a10e70b1e42a4593d3913ab86cc161f9a127ef189a8b64cb39c4e1fa51cc48550d729b5e5732617d311da18be3af80c07a625323d7c26ec0ee10aa3a9d2928ab5a31c5a381b9b22ebba13f52a28b713c4d43b9e9ecda104f49291bec1b0ebd7b293fea98abb49dee03d8d53747b049172167244e4eaf42033c757ae79cbcf461d96609e06d7b525062bd53fcff05f0ddeddc5fadaa0944b39e7803407a255899a2ebfac266f4af1904c2a5f6f4030c23e8cecdfeef0f929e7d1c01a8f7f5165ce7576532eb9673638e270081a4efa32b08d205adcfbb031a3478a92251f35c72eb43b354d45a88ece3d9812becf88afc78437e94da6a299062795287272b35", 0x1000}, {&(0x7f0000001180)="f6e914055f332a8bf6785005f7238be8e7d901410a943ff32f6d79624ce9c39c1e6bc5e53f9201", 0x27}, {&(0x7f00000011c0)="1b12be52402e19a55814312428a21ac295e997d7d6594644c5914f15cbae9213e421fe2b7c30f10fa2b934a062e815a627df4c4b20b2c7acbb1499d47e94e8c888cd2aa5c194197397056d55e285", 0x4e}, {&(0x7f0000001240)="4593", 0x2}], 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00000000300000000000000001000000010000005c41e4721fbc4932e63d9de47922b24b2c31f11cab922ffad5f86b3415613224526ac25de6101683c40e9c2482a70607dc41bcf9286ebf77d18550a66f71fd2845ad72b2f089f0cd443f909a0bee5787308be396a4270a5c54be3c", @ANYRES32=r0, @ANYRES32=r7, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r8], 0x48, 0x4042}, 0x40) 554.272449ms ago: executing program 3 (id=2946): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000600)={&(0x7f0000000040)=@phonet={0x23, 0x3, 0x7f, 0x6}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="dbb64bc50d5e563779a6bdb8da4fba5e26a9a7c4646423488052e3c5dc235ac0a396d32d7deeb3a4fb6c5036f260436b0964", 0x32}, {&(0x7f0000000100)="d4d65f6d4fcee6cb4fb087312bbf727f5491ba6fbc92ddb8cea05dbd7bb9623c538d713fa8048989f0ea8a1a2f8ca79930b03c0bace331ea5684c41e96e66af9b38a7569c65f82dd", 0x48}, {&(0x7f0000000180)="133543305fc8e3917edbf8754ce8825431b5d2f26ebeb8fa4f56a8eeb06c6422b19104b852fd801388927b21f393d30a3630acbb570af4586edf70526d4ae688a56e54b19860a49ebea29df8d02d23cee4a94733fc57b436c318a90c814a1c4c66b3a4237a126b4daf2e2de11fce1a872f88b9b0f0d7c0054dfeb1d892cc6de259d0d9d1e1d330cb7eddf3cc8634ada51144c2318bec34a617ee68e9e53d27d2e39f184c5d6199763552879b1bad3c55fccfef84e16cf2d31755cd", 0xbb}, {&(0x7f0000000240)="d09255bb81c4766e58a053c30329ad466bb452ac7a502e4d6d11dc2b2ca35a8298aabd9d2bd8bea603052dde2390d0f569cf7bdd1499ce68c1f2a85130be9389b474329705e3", 0x46}, {&(0x7f00000002c0)="baee504e6a38f62b30d77e60b7f7bb3ff152b6c2483b5c3f7a70e59a2cee9f01e1dc4a491b325d4ed40eadfd63fb36832147b7b593ceb5e6345b1671bb2eaeb5657528b563e80d7608fa59bb5d02d134716427d1cb029776b58c0f67fcc7356e8e024a3e69c6121c53b12592c60cf33a758bb7d7f5f4214af482fa3acd113432725a9bf898019e4f88d59baf53fa78fec83fa44ba726df6b52ee96434b922176eae238b967c1f132c018636b92ebda0f11063b3beaa42bc5", 0xb8}, {&(0x7f0000000380)="426aa83350319822f7d33008e04838b03236105186a74c23890740ed79476a9e7288af8584e6b799e307f315e0be546461903ce1ef845711a4ffb32bb50d664e0b9288820dbc5ff987221fd7f4bdd85c764eb83e23250abc361ab9e97d5d5b96f0e00c8875aeade4947a16dbb9fcf62a48d6807b104089", 0x77}, {&(0x7f0000000400)="0c1de869049b549693ab728ecd2be9a0e9537a05cb41816b6eb8241e2bd4aa924f69c9893d3d891a26e662b24c5c9d1db484eba86b5f02d5ba8030bee5aa38eed52b35cde4b5dee4c48d07c20706d8cb89c82c80242fb691d7058ca152cbee66e2e726f5f6294d48b49e16bc6add9d1cd449ae50fb36ca40a346583a028b453ab1dd3d9874bd87e5a45628bf3f331d5ab9beb2f4556727334269399e304afa89a09eeb3a1811811309401d048540f0103bee938a8b2dd0fd75e32b9cd52083c9441be8c45e6cb0bff1d65724d6deacbfacef", 0xd2}], 0x7, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4c}}, @mark={{0x14, 0x1, 0x24, 0x73}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0x78}, 0x8040) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x4, [@typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @volatile={0x7}, @enum={0xa, 0x9, 0x0, 0x6, 0x4, [{0x0, 0xc5}, {0x8}, {0x4, 0x7f}, {0xc, 0x7}, {0xc, 0x5165}, {0x2, 0x8}, {0xd, 0x1}, {0x6, 0x2}, {0x4, 0x99b1}]}, @union={0x4, 0x5, 0x0, 0x5, 0x1, 0x81, [{0x1, 0x1, 0x9}, {0x1, 0x3, 0x2}, {0xb, 0x4, 0x9}, {0x1, 0x0, 0x7d8}, {0x1, 0x0, 0x40}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000008c0)=""/204, 0xd0, 0xcc, 0x1, 0x4}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x2, 0x400, 0x6, 0x7a57dcd1000cbac7, r0, 0x0, '\x00', r2, r3, 0x4, 0x4, 0x4, 0xe, @value=r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000d80)={&(0x7f0000000a00)="b3daa884d865a5210c3ef4162e5f288fc4e34ee51dea2211191aa2c4733946ecbb5f9ef83cb9eb0f1ca97725d0991ac93822f80f50bdaeaea3f2c3c027917d6d820f9d661296505203e559ecdc394193a1307b8350b37dc09a725b463d6b8a8351156565f7363f79d478d04f37726f872597eda0cb468bbba3153f90dfb7fc82581551305faa8540a939fb31242a75ee88f8bd69d6fb29ffdbef07c7358ab688f61c6bd7e2cc1d18ac7ca39eee5e22ee856a39aa8b1889dc5892edc31a966082c8477699d41d15f2770223a7b57963e28721c3a71299ee022f7f0f781911145722fa", &(0x7f0000000b00)=""/234, &(0x7f0000000c00)="a3120d31056b7b58d45125fb816f2753ada873b2d9e9ca297cee37c615f6bf760590cf2e1d9153f66323d7301b6e508a6298a9f6df358dff041dd37033cf71722b012a1da8b0e2e79f075ed9599fec7d852f7ed2aa108e2615", &(0x7f0000000c80)="ce5741428783be76363ebb8fe986c3d356a2cb89b978c1ed27051c3dbb91573c591918f94da27bb7ef0e53a174f856e887c6b0a198c046de25c5f9b4419c73edc895442856a4fd9df0f1814d6dc9d2805a7e6b0060f8e5ea782e2b077fd1305f64828c5b3d1da73262a8a0dd5ad18874465d2cb2bd5fddf58aab3f9ef362d7138587cac8c3c49ac513dd42855246caca4b27c8d497841521bb1c996c37a67e65b024b8cd2a80cb8c48bea60b2529d3d015e3495663ef2692cb03f4360c08421b81574b34bf32a45ea0b7ea9cb2b17b3ba6e46f6cfb92664ba882efd7f15f98a0f93370a927c84340", 0x7, r5}, 0x38) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r5, 0x58, &(0x7f0000000dc0)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={r6, 0x1, 0x28}, 0xc) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000ec0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r8, 0xe0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000f40)=[0x0], &(0x7f0000000f80)=[0x0], 0x0, 0xb8, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001000), &(0x7f0000001040), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x311) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000001240)=r8) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r11, &(0x7f00000012c0), 0x2, 0x0) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001300)={r9}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r12, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001340)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f0000001400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001440), &(0x7f0000001480), 0x8, 0x36, 0x8, 0x8, &(0x7f00000014c0)}}, 0x10) (async) recvmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/6, 0x6}, {&(0x7f0000002680)=""/231, 0xe7}, {&(0x7f0000002780)=""/40, 0x28}, {&(0x7f00000027c0)=""/92, 0x5c}], 0x5, &(0x7f00000028c0)=""/242, 0xf2}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b00)={&(0x7f0000002a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x6, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x9, 0x3}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{}, {0xb, 0x4}, {0xc, 0x3}, {0x2, 0x2}, {0xa, 0x3}, {0x4, 0x3}, {0xc, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x5}}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x26, 0x0, 0x14, 0x7}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x0, 0x5f, 0x0, 0x0]}}, &(0x7f0000002ac0)=""/28, 0xb2, 0x1c, 0x1, 0x1}, 0x28) (async) r14 = openat$cgroup_ro(r11, &(0x7f0000002b40)='memory.current\x00', 0x0, 0x0) openat$cgroup_int(r11, &(0x7f0000002b80)='rdma.max\x00', 0x2, 0x0) (async) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002e00)={r1, 0x7, 0x18}, 0xc) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002e40)={r1, 0x4, 0x8}, 0xc) (async) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002e80)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x7fffffff, '\x00', r2, r14, 0x3, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x1b, 0xe, &(0x7f0000002bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8b3}, [@ldst={0x1, 0x0, 0x3, 0x3, 0x2, 0x100, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1ff}, @printk={@llu}]}, &(0x7f0000002c40)='GPL\x00', 0x1, 0xfc, &(0x7f0000002c80)=""/252, 0x40f00, 0x7a, '\x00', 0x0, @fallback=0x20, r3, 0x8, &(0x7f0000002d80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000002dc0)={0x5, 0xf, 0xc88f, 0x4}, 0x10, r13, 0xffffffffffffffff, 0x3, &(0x7f0000002f00)=[r5, r15, r14, r5, r7, r16, r17], &(0x7f0000002f40)=[{0x5, 0x1, 0xe, 0x5}, {0x3, 0x2, 0xd, 0x7}, {0x4, 0x3, 0xecd, 0xa}], 0x10, 0x1000}, 0x94) (async) write$cgroup_subtree(r14, &(0x7f0000003040)={[{0x2d, 'io'}, {0x2b, 'freezer'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2b, 'net_prio'}, {0x0, 'rdma'}]}, 0x27) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003340)={0xffffffffffffffff, 0xe0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000030c0)=[0x0, 0x0, 0x0], &(0x7f0000003100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xeb, &(0x7f0000003140)=[{}], 0x8, 0x10, &(0x7f0000003180), &(0x7f00000031c0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000003200)}}, 0x10) r18 = openat$cgroup_ro(r11, &(0x7f00000034c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003580)=@bpf_tracing={0x1a, 0xc, &(0x7f0000003380)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd63d, 0x0, 0x0, 0x0, 0x7}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x1, 0xf, 0x8, 0x54, 0x2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r14}}]}, &(0x7f0000003400)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', r2, 0x17, r4, 0x8, &(0x7f0000003440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000003480)={0x0, 0x9, 0x9, 0xeb26}, 0x10, 0xc951, r14, 0x2, &(0x7f0000003500)=[r16, 0xffffffffffffffff, r7, r18, r7], &(0x7f0000003540)=[{0x1, 0x3, 0xe, 0x9}, {0x2, 0x5, 0xc, 0x5}], 0x10, 0x4}, 0x94) 476.138049ms ago: executing program 4 (id=2947): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x22e, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x0, &(0x7f0000000200), 0x0, 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1ae6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x750a}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x1000bf, 0x0, 0x0, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xe3, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x7, 0x19, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x38a6c9f4, 0x0, 0x0, 0x0, 0x2000812}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000780)='GPL\x00', 0x3, 0xe9, &(0x7f0000000180)=""/233, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0xf, 0x0, 0x4}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x3, 0x8004, 0x5}, {0x4, 0x3, 0x6, 0x1}], 0x10, 0xeca4}, 0x94) (async) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000022c0)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000680)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0x9, &(0x7f0000000b40)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001200)=""/4096, 0x40f00, 0x1, '\x00', r1, @fallback=0x12, r2, 0x8, &(0x7f0000002240)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x0, &(0x7f0000002300)=[0x1], 0x0, 0x10, 0x9}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xec5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r8 = socket$kcm(0x22, 0x2, 0x21) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x3, 0x0, 0x4, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000eeffffff000000ce0000000000000000010000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r11}, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r10}, 0xc) (async) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x80044944, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) 413.219415ms ago: executing program 3 (id=2948): r0 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0xffff, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x56, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020705200000000002020207b0ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='\x00') r2 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x8, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000e40)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)="fa57f1c4ce8b144790566d979da42964393b305ce43baa58f64b2141a4f9dc8d3113ca44aeff89f9568f9cd55bfc374935759bd4d5f7aba78a65c2234f36de5fb7d76a9e147ea951da3b1c2381cb260a45edc26447c73a78bd4ed91b123e9042f9fc7ff2f1e6794d3a900a72e93a025d182a6f31d91e80068786dba0ac750717370c45130b1655df3b5cb6eeb7bda913301de29da6a92330eac8869d21145ab1ee7c1cdd5793103ea82f951ff6574eef0ad4c2160f0cf3e74af3086c7615399a523d071aa822d2e5", 0xc8}, {&(0x7f00000006c0)}], 0x2, &(0x7f0000000800)}, 0x200000b0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r5, &(0x7f0000000000), 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(0xffffffffffffffff) 412.385135ms ago: executing program 0 (id=2949): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x5, 0x0, &(0x7f0000000000)="259a53f271", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x1, 0x0, 0xf, 0x6}], 0x10, 0x4000001}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x24044441) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x83, &(0x7f0000000000)=r8, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4a21, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffff53df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r12 = openat$cgroup_devices(r10, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000380)=ANY=[@ANYBLOB='a'], 0x9) 392.62693ms ago: executing program 5 (id=2950): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x80202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000240)={r2, r1}) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000001c0)="ca6759d3986a1f4f71e1e64e360c1057cbbe40b960b1271dcb55978bcf0ef168c0118361f0aa6c78d4763ffe3ffaf208b0f41e72b841bb15e7cf85acd30c20059c9ab660c56ddb8a1a37f475becde753e475950a49d1e14e920d329650f96b023a36e6b0179903298d8308ad70f4c8c437b380e8d7da64", 0x77}, {&(0x7f0000000300)="d3419b0f4b6d46e252ce25e558a4260349be1923c03f9d6edd858a1cf6df55425558933e86840c3907d7d07344769c7549b8cac92793d83d0c493e512ff6ac218e8ba9eb196230538ddb221db0edc0a6a0588db67e6eb58fff9b56626deee1ad3121ff68442329c62b4d56c8732db503e9ce77ecc3081911f03a42af99426b188476218f7ccb32d0e3c9ee328f8aae2d20de900b23fa38093e1f5c00", 0x9c}], 0x2, &(0x7f0000000400)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x78}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x29, 0x11, &(0x7f0000000140)=r5, 0x4) 333.536575ms ago: executing program 3 (id=2951): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x3, 0x9, 0x0, 0x10040000007feb, 0x4aad3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_bp={0x0, 0x7}, 0x14105, 0x32, 0xfffffbff, 0x6, 0xffff, 0x6, 0x7, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) (async) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x7f, 0x86, 0xfffff01c}, {0x6, 0xfd, 0x0, 0x2}]}) (async) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x18, 0x0}, 0x4000084) (async) recvmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2100) 240.517679ms ago: executing program 0 (id=2952): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x10, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000020000000000000000008500000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff1703000008000000b70400000000000085"], 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="130300007600"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = socket$kcm(0x15, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYRESHEX=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000000d900850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) close(r3) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f00000001c0)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x5, 0x9, 0x0, 0x1, 0x0, 0x40, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0xe1f, 0x7ff}, 0x100000, 0x10001, 0x9, 0x5, 0xe0c, 0x3ff, 0xfff, 0x0, 0x5, 0x0, 0x8}, r7, 0x3, r3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb12da7a83248b009c81572d3a39b", 0xe4}], 0x1, 0x0, 0x0, 0x7400}, 0xc04) sendmsg(r0, &(0x7f0000002500)={&(0x7f0000000080)=@in={0x2, 0x4e22, @multicast1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="ec", 0x1}], 0x1}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x39, 0x0, 0x0) 240.202799ms ago: executing program 2 (id=2953): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 208.405947ms ago: executing program 5 (id=2954): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x2d, 0x2, 0x22, 0xffffffff}, {0x94, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x2}]}) perf_event_open(&(0x7f0000000380)={0x0, 0x43, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x4, 0x0, 0x40002, 0x0, 0x0, 0xf6d0, 0x0, 0x100000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x24480, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x7, 0x4, 0x1}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce22001b2f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r4, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001840), 0x0, 0x106, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0xb5a17c5435ccc6b6, 0xd, &(0x7f0000000180)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000200)='GPL\x00', 0x1, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x20, '\x00', r9, 0x0, r4, 0x8, &(0x7f0000001ac0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001b00)={0x3, 0x5, 0x7, 0x91de}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001b40)=[r4, r4], &(0x7f0000001b80)=[{0x3, 0x1, 0xe, 0x5}, {0x4, 0x5, 0x8, 0x3}, {0x4, 0x3, 0x8, 0x6}, {0x2, 0x4, 0xd, 0x7}, {0x3, 0x5, 0x9, 0x3}], 0x10, 0x7}, 0x94) 143.335704ms ago: executing program 0 (id=2955): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61157a000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916900000000000bf67000000000000350605000fff07206706000040000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41000000, @mcast2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61157a000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916900000000000bf67000000000000350605000fff07206706000040000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$kcm(0xa, 0x2, 0x3a) (async) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x41000000, @mcast2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) 77.20472ms ago: executing program 4 (id=2956): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 45.841439ms ago: executing program 0 (id=2957): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x1e, 0x4, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0d, &(0x7f0000000040)={'wlan0\x00', @random}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x800001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42800, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'ip6_vti0\x00', @remote}) (async) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) (async) close(r3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40", 0x36}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)}, 0x88) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x1e, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) (async) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x9, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24088054) (async) r7 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r7, 0x29, 0x11, 0x0, 0x0) 0s ago: executing program 2 (id=2958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000958bed4fbb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x8d, 0x0, @empty}, 0x80, 0x0, 0x300}, 0x20000000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYRESHEX=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000958bed4fbb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)=r6}, 0x20) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) socket$kcm(0xa, 0x1, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x8d, 0x0, @empty}, 0x80, 0x0, 0x300}, 0x20000000) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) (async) kernel console output (not intermixed with test programs): .230099][ T9475] ? verify_lock_unused+0x140/0x140 [ 228.235292][ T9475] should_fail+0x383/0x4b0 [ 228.239707][ T9475] should_failslab+0x5/0x20 [ 228.244195][ T9475] slab_pre_alloc_hook+0x51/0xc0 [ 228.249151][ T9475] __kmalloc+0x6b/0x340 [ 228.253291][ T9475] ? bpf_test_init+0xf8/0x1b0 [ 228.257952][ T9475] bpf_test_init+0xf8/0x1b0 [ 228.262437][ T9475] bpf_prog_test_run_xdp+0x1ca/0x910 [ 228.267707][ T9475] ? dev_put+0x70/0x70 [ 228.271766][ T9475] ? dev_put+0x70/0x70 [ 228.275817][ T9475] bpf_prog_test_run+0x31c/0x390 [ 228.280742][ T9475] __sys_bpf+0x5a5/0x6f0 [ 228.284973][ T9475] ? bpf_link_show_fdinfo+0x380/0x380 [ 228.290339][ T9475] __x64_sys_bpf+0x78/0x90 [ 228.294755][ T9475] do_syscall_64+0x4c/0xa0 [ 228.299152][ T9475] ? clear_bhb_loop+0x30/0x80 [ 228.303811][ T9475] ? clear_bhb_loop+0x30/0x80 [ 228.308470][ T9475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 228.314345][ T9475] RIP: 0033:0x7f7c71922159 [ 228.318745][ T9475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.338348][ T9475] RSP: 002b:00007f7c6fb7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 228.346749][ T9475] RAX: ffffffffffffffda RBX: 00007f7c71ba9fa0 RCX: 00007f7c71922159 [ 228.354700][ T9475] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 228.362652][ T9475] RBP: 00007f7c6fb7a090 R08: 0000000000000000 R09: 0000000000000000 [ 228.370609][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.378558][ T9475] R13: 00007f7c71baa038 R14: 00007f7c71ba9fa0 R15: 00007fffc1fa2068 [ 228.386523][ T9475] [ 228.658233][ T9490] validate_nla: 2 callbacks suppressed [ 228.658251][ T9490] netlink: 'syz.1.1447': attribute type 29 has an invalid length. [ 228.950738][ T9497] netlink: 'syz.1.1451': attribute type 10 has an invalid length. [ 229.048811][ T9508] bridge0: port 3(syz_tun) entered blocking state [ 229.063094][ T9508] bridge0: port 3(syz_tun) entered disabled state [ 229.104158][ T9508] device syz_tun entered promiscuous mode [ 229.148163][ T9508] bridge0: port 3(syz_tun) entered blocking state [ 229.154842][ T9508] bridge0: port 3(syz_tun) entered forwarding state [ 229.359225][ T9521] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1456'. [ 229.434426][ T9525] FAULT_INJECTION: forcing a failure. [ 229.434426][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.463897][ T9525] CPU: 0 PID: 9525 Comm: syz.0.1460 Not tainted syzkaller #0 [ 229.471289][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.481343][ T9525] Call Trace: [ 229.484621][ T9525] [ 229.487547][ T9525] dump_stack_lvl+0x188/0x250 [ 229.492236][ T9525] ? show_regs_print_info+0x20/0x20 [ 229.497435][ T9525] ? load_image+0x410/0x410 [ 229.501947][ T9525] ? __lock_acquire+0x7b50/0x7b50 [ 229.506980][ T9525] should_fail+0x383/0x4b0 [ 229.511407][ T9525] _copy_from_user+0x2e/0x170 [ 229.516082][ T9525] bpf_test_init+0x136/0x1b0 [ 229.520680][ T9525] bpf_prog_test_run_xdp+0x1ca/0x910 [ 229.525978][ T9525] ? dev_put+0x70/0x70 [ 229.530059][ T9525] ? dev_put+0x70/0x70 [ 229.534215][ T9525] bpf_prog_test_run+0x31c/0x390 [ 229.539160][ T9525] __sys_bpf+0x5a5/0x6f0 [ 229.543408][ T9525] ? bpf_link_show_fdinfo+0x380/0x380 [ 229.548810][ T9525] __x64_sys_bpf+0x78/0x90 [ 229.553230][ T9525] do_syscall_64+0x4c/0xa0 [ 229.557645][ T9525] ? clear_bhb_loop+0x30/0x80 [ 229.562321][ T9525] ? clear_bhb_loop+0x30/0x80 [ 229.567003][ T9525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 229.572891][ T9525] RIP: 0033:0x7f7c71922159 [ 229.577307][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.596910][ T9525] RSP: 002b:00007f7c6fb7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 229.605321][ T9525] RAX: ffffffffffffffda RBX: 00007f7c71ba9fa0 RCX: 00007f7c71922159 [ 229.613288][ T9525] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 229.621255][ T9525] RBP: 00007f7c6fb7a090 R08: 0000000000000000 R09: 0000000000000000 [ 229.629224][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.637189][ T9525] R13: 00007f7c71baa038 R14: 00007f7c71ba9fa0 R15: 00007fffc1fa2068 [ 229.645179][ T9525] [ 229.947600][ T9511] device syzkaller0 entered promiscuous mode [ 230.176546][ T9542] FAULT_INJECTION: forcing a failure. [ 230.176546][ T9542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.229009][ T9542] CPU: 1 PID: 9542 Comm: syz.1.1475 Not tainted syzkaller #0 [ 230.236424][ T9542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.246476][ T9542] Call Trace: [ 230.249746][ T9542] [ 230.252682][ T9542] dump_stack_lvl+0x188/0x250 [ 230.257371][ T9542] ? show_regs_print_info+0x20/0x20 [ 230.262573][ T9542] ? load_image+0x410/0x410 [ 230.267089][ T9542] ? __lock_acquire+0x7b50/0x7b50 [ 230.272124][ T9542] ? bpf_test_run+0x78e/0x800 [ 230.276809][ T9542] should_fail+0x383/0x4b0 [ 230.281237][ T9542] _copy_to_user+0x2e/0x130 [ 230.285747][ T9542] bpf_test_finish+0x1b7/0x2f0 [ 230.290518][ T9542] ? convert_skb_to___skb+0x360/0x360 [ 230.295896][ T9542] ? _copy_from_user+0x111/0x170 [ 230.300840][ T9542] ? bpf_test_init+0x171/0x1b0 [ 230.305611][ T9542] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 230.311166][ T9542] bpf_prog_test_run_xdp+0x61c/0x910 [ 230.316472][ T9542] ? dev_put+0x70/0x70 [ 230.320556][ T9542] ? dev_put+0x70/0x70 [ 230.324632][ T9542] bpf_prog_test_run+0x31c/0x390 [ 230.329575][ T9542] __sys_bpf+0x5a5/0x6f0 [ 230.333830][ T9542] ? bpf_link_show_fdinfo+0x380/0x380 [ 230.339206][ T9542] ? rcu_nmi_exit+0x6f/0xf0 [ 230.341069][ T9546] netlink: 'syz.4.1466': attribute type 10 has an invalid length. [ 230.343731][ T9542] __x64_sys_bpf+0x78/0x90 [ 230.343758][ T9542] do_syscall_64+0x4c/0xa0 [ 230.343775][ T9542] ? clear_bhb_loop+0x30/0x80 [ 230.343795][ T9542] ? clear_bhb_loop+0x30/0x80 [ 230.343814][ T9542] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 230.343832][ T9542] RIP: 0033:0x7f022d827159 [ 230.343851][ T9542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.343866][ T9542] RSP: 002b:00007f022ba7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.343887][ T9542] RAX: ffffffffffffffda RBX: 00007f022daaefa0 RCX: 00007f022d827159 [ 230.343901][ T9542] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 230.343913][ T9542] RBP: 00007f022ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.343925][ T9542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.343935][ T9542] R13: 00007f022daaf038 R14: 00007f022daaefa0 R15: 00007fff1c70bc38 [ 230.343962][ T9542] [ 231.153335][ T9569] netlink: 'syz.3.1472': attribute type 21 has an invalid length. [ 231.163746][ T9569] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1472'. [ 231.174407][ T9569] netlink: 'syz.3.1472': attribute type 4 has an invalid length. [ 231.337530][ T9574] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1476'. [ 231.404540][ T9578] bridge0: port 2(syz_tun) entered blocking state [ 231.417610][ T9578] bridge0: port 2(syz_tun) entered disabled state [ 231.467259][ T9578] device syz_tun entered promiscuous mode [ 231.497329][ T9587] FAULT_INJECTION: forcing a failure. [ 231.497329][ T9587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 231.500790][ T9578] bridge0: port 2(syz_tun) entered blocking state [ 231.517135][ T9578] bridge0: port 2(syz_tun) entered forwarding state [ 231.529511][ T9587] CPU: 0 PID: 9587 Comm: syz.1.1482 Not tainted syzkaller #0 [ 231.536899][ T9587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.546949][ T9587] Call Trace: [ 231.550226][ T9587] [ 231.553158][ T9587] dump_stack_lvl+0x188/0x250 [ 231.557839][ T9587] ? show_regs_print_info+0x20/0x20 [ 231.563039][ T9587] ? load_image+0x410/0x410 [ 231.567548][ T9587] ? __lock_acquire+0x7b50/0x7b50 [ 231.572578][ T9587] ? bpf_test_run+0x78e/0x800 [ 231.577258][ T9587] should_fail+0x383/0x4b0 [ 231.581685][ T9587] _copy_to_user+0x2e/0x130 [ 231.586195][ T9587] bpf_test_finish+0x1e6/0x2f0 [ 231.590967][ T9587] ? convert_skb_to___skb+0x360/0x360 [ 231.596342][ T9587] ? _copy_from_user+0x111/0x170 [ 231.601284][ T9587] ? bpf_test_init+0x171/0x1b0 [ 231.606047][ T9587] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 231.611593][ T9587] bpf_prog_test_run_xdp+0x61c/0x910 [ 231.616887][ T9587] ? dev_put+0x70/0x70 [ 231.620969][ T9587] ? dev_put+0x70/0x70 [ 231.625042][ T9587] bpf_prog_test_run+0x31c/0x390 [ 231.629988][ T9587] __sys_bpf+0x5a5/0x6f0 [ 231.634240][ T9587] ? bpf_link_show_fdinfo+0x380/0x380 [ 231.639645][ T9587] __x64_sys_bpf+0x78/0x90 [ 231.644074][ T9587] do_syscall_64+0x4c/0xa0 [ 231.648497][ T9587] ? clear_bhb_loop+0x30/0x80 [ 231.653180][ T9587] ? clear_bhb_loop+0x30/0x80 [ 231.657873][ T9587] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.663774][ T9587] RIP: 0033:0x7f022d827159 [ 231.668194][ T9587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.687803][ T9587] RSP: 002b:00007f022ba7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.696221][ T9587] RAX: ffffffffffffffda RBX: 00007f022daaefa0 RCX: 00007f022d827159 [ 231.704198][ T9587] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 231.712168][ T9587] RBP: 00007f022ba7f090 R08: 0000000000000000 R09: 0000000000000000 [ 231.720238][ T9587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.728211][ T9587] R13: 00007f022daaf038 R14: 00007f022daaefa0 R15: 00007fff1c70bc38 [ 231.736192][ T9587] [ 231.746619][ T9582] netlink: 'syz.0.1480': attribute type 10 has an invalid length. [ 231.777345][ T9589] netlink: 'syz.4.1481': attribute type 21 has an invalid length. [ 231.793024][ T9589] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 231.940547][ T9597] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.1484'. [ 232.100167][ T9578] device syzkaller0 entered promiscuous mode [ 232.152746][ T9595] netlink: 'syz.1.1485': attribute type 39 has an invalid length. [ 232.167172][ T9601] netlink: 'syz.1.1485': attribute type 10 has an invalid length. [ 232.185329][ T9601] team0: Device nlmon0 is of different type [ 232.506964][ T9614] bridge0: port 2(syz_tun) entered blocking state [ 232.553789][ T9614] bridge0: port 2(syz_tun) entered disabled state [ 232.665497][ T9614] device syz_tun entered promiscuous mode [ 232.831320][ T9628] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1494'. [ 232.967743][ T9628] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1494'. [ 232.993969][ T9636] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1495'. [ 233.491194][ T9630] Q6\bY4: renamed from lo [ 233.646344][ T9631] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1494'. [ 233.708814][ T9645] FAULT_INJECTION: forcing a failure. [ 233.708814][ T9645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.725189][ T9645] CPU: 1 PID: 9645 Comm: syz.0.1499 Not tainted syzkaller #0 [ 233.732574][ T9645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.742624][ T9645] Call Trace: [ 233.745902][ T9645] [ 233.748825][ T9645] dump_stack_lvl+0x188/0x250 [ 233.753503][ T9645] ? show_regs_print_info+0x20/0x20 [ 233.758696][ T9645] ? load_image+0x410/0x410 [ 233.763202][ T9645] ? __lock_acquire+0x7b50/0x7b50 [ 233.768228][ T9645] ? bpf_test_run+0x78e/0x800 [ 233.772901][ T9645] should_fail+0x383/0x4b0 [ 233.777319][ T9645] _copy_to_user+0x2e/0x130 [ 233.781826][ T9645] bpf_test_finish+0x215/0x2f0 [ 233.786594][ T9645] ? convert_skb_to___skb+0x360/0x360 [ 233.791961][ T9645] ? _copy_from_user+0x111/0x170 [ 233.796898][ T9645] ? bpf_test_init+0x171/0x1b0 [ 233.801655][ T9645] ? xdp_convert_buff_to_md+0x154/0x1e0 [ 233.807197][ T9645] bpf_prog_test_run_xdp+0x61c/0x910 [ 233.812495][ T9645] ? dev_put+0x70/0x70 [ 233.816572][ T9645] ? dev_put+0x70/0x70 [ 233.820635][ T9645] bpf_prog_test_run+0x31c/0x390 [ 233.825575][ T9645] __sys_bpf+0x5a5/0x6f0 [ 233.829819][ T9645] ? bpf_link_show_fdinfo+0x380/0x380 [ 233.835209][ T9645] __x64_sys_bpf+0x78/0x90 [ 233.839623][ T9645] do_syscall_64+0x4c/0xa0 [ 233.844034][ T9645] ? clear_bhb_loop+0x30/0x80 [ 233.848754][ T9645] ? clear_bhb_loop+0x30/0x80 [ 233.853445][ T9645] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.859337][ T9645] RIP: 0033:0x7f7c71922159 [ 233.863747][ T9645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.883346][ T9645] RSP: 002b:00007f7c6fb7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.891767][ T9645] RAX: ffffffffffffffda RBX: 00007f7c71ba9fa0 RCX: 00007f7c71922159 [ 233.899732][ T9645] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 000000000000000a [ 233.907698][ T9645] RBP: 00007f7c6fb7a090 R08: 0000000000000000 R09: 0000000000000000 [ 233.915667][ T9645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.923635][ T9645] R13: 00007f7c71baa038 R14: 00007f7c71ba9fa0 R15: 00007fffc1fa2068 [ 233.931619][ T9645] [ 234.158718][ T9656] validate_nla: 3 callbacks suppressed [ 234.158753][ T9656] netlink: 'syz.3.1504': attribute type 3 has an invalid length. [ 234.192901][ T9656] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1504'. [ 234.234810][ T9658] netlink: 'syz.3.1504': attribute type 10 has an invalid length. [ 234.499333][ T9660] FAULT_INJECTION: forcing a failure. [ 234.499333][ T9660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.616666][ T9660] CPU: 0 PID: 9660 Comm: syz.0.1515 Not tainted syzkaller #0 [ 234.624078][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.627443][ T9665] netlink: 'syz.4.1506': attribute type 10 has an invalid length. [ 234.634130][ T9660] Call Trace: [ 234.634155][ T9660] [ 234.634163][ T9660] dump_stack_lvl+0x188/0x250 [ 234.634190][ T9660] ? show_regs_print_info+0x20/0x20 [ 234.634208][ T9660] ? load_image+0x410/0x410 [ 234.662489][ T9660] ? __lock_acquire+0x7b50/0x7b50 [ 234.667525][ T9660] should_fail+0x383/0x4b0 [ 234.671950][ T9660] _copy_to_user+0x2e/0x130 [ 234.676463][ T9660] simple_read_from_buffer+0xe3/0x150 [ 234.681843][ T9660] proc_fail_nth_read+0x1a6/0x220 [ 234.686961][ T9660] ? proc_fault_inject_write+0x310/0x310 [ 234.692609][ T9660] ? fsnotify_perm+0x254/0x560 [ 234.697378][ T9660] ? proc_fault_inject_write+0x310/0x310 [ 234.701268][ T9665] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1506'. [ 234.703012][ T9660] vfs_read+0x2ff/0xd50 [ 234.703036][ T9660] ? __lock_acquire+0x7b50/0x7b50 [ 234.703060][ T9660] ? kernel_read+0x1e0/0x1e0 [ 234.725687][ T9660] ? mutex_lock_nested+0x17/0x20 [ 234.730623][ T9660] ? __fdget_pos+0x2bf/0x370 [ 234.735213][ T9660] ? ksys_read+0x70/0x260 [ 234.739548][ T9660] ksys_read+0x153/0x260 [ 234.743799][ T9660] ? vfs_write+0xd70/0xd70 [ 234.748216][ T9660] ? lockdep_hardirqs_on+0x94/0x140 [ 234.753420][ T9660] do_syscall_64+0x4c/0xa0 [ 234.757837][ T9660] ? clear_bhb_loop+0x30/0x80 [ 234.762517][ T9660] ? clear_bhb_loop+0x30/0x80 [ 234.767204][ T9660] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.773097][ T9660] RIP: 0033:0x7f7c718e298e [ 234.777514][ T9660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.797115][ T9660] RSP: 002b:00007f7c6fb79fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.805529][ T9660] RAX: ffffffffffffffda RBX: 00007f7c6fb7a6c0 RCX: 00007f7c718e298e [ 234.813506][ T9660] RDX: 000000000000000f RSI: 00007f7c6fb7a0a0 RDI: 0000000000000005 [ 234.821474][ T9660] RBP: 00007f7c6fb7a090 R08: 0000000000000000 R09: 0000000000000000 [ 234.829443][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.837413][ T9660] R13: 00007f7c71baa038 R14: 00007f7c71ba9fa0 R15: 00007fffc1fa2068 [ 234.845399][ T9660] [ 235.347407][ T9671] netlink: 'syz.3.1505': attribute type 21 has an invalid length. [ 235.360009][ T9671] netlink: 'syz.3.1505': attribute type 1 has an invalid length. [ 235.368101][ T9680] netlink: 'syz.1.1508': attribute type 10 has an invalid length. [ 235.414208][ T9680] team0: Port device wlan1 added [ 235.632014][ T9690] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1510'. [ 236.253235][ T9704] netlink: 'syz.1.1523': attribute type 21 has an invalid length. [ 236.264401][ T9704] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 238.488471][ T9708] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1514'. [ 238.629601][ T9715] netlink: 'syz.2.1513': attribute type 10 has an invalid length. [ 238.659192][ T9708] netlink: 'syz.3.1514': attribute type 9 has an invalid length. [ 238.679345][ T9708] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1514'. [ 239.371978][ T9733] netlink: 'syz.4.1524': attribute type 10 has an invalid length. [ 239.397849][ T9733] team0: Device nlmon0 is of different type [ 239.482501][ T9719] netlink: 'syz.3.1514': attribute type 9 has an invalid length. [ 239.534004][ T9719] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1514'. [ 239.832499][ T9748] netlink: 'syz.2.1525': attribute type 21 has an invalid length. [ 239.915427][ T9748] netlink: 'syz.2.1525': attribute type 1 has an invalid length. [ 240.471145][ T9765] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1533'. [ 240.936096][ T9775] netlink: 'syz.2.1537': attribute type 29 has an invalid length. [ 240.981898][ T9775] netlink: 'syz.2.1537': attribute type 29 has an invalid length. [ 241.016447][ T9780] netlink: 'syz.2.1537': attribute type 29 has an invalid length. [ 241.206522][ T9783] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1539'. [ 241.306749][ T9783] netlink: 'syz.4.1539': attribute type 9 has an invalid length. [ 241.326639][ T9783] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1539'. [ 241.465953][ T9791] netlink: 'syz.4.1539': attribute type 9 has an invalid length. [ 241.489484][ T9791] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1539'. [ 241.688517][ T9804] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1546'. [ 241.724000][ T9800] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1545'. [ 241.796044][ T9807] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1546'. [ 241.849889][ T9807] netlink: 'syz.2.1546': attribute type 2 has an invalid length. [ 241.904417][ T9802] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 242.094631][ T9813] team0: Port device team_slave_0 removed [ 242.119309][ T9813] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 242.155993][ T9814] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 242.454870][ T9824] can: request_module (can-proto-4) failed. [ 243.631853][ T9875] __nla_validate_parse: 9 callbacks suppressed [ 243.631871][ T9875] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1566'. [ 244.076698][ T9881] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1569'. [ 244.107368][ T9881] device hsr0 entered promiscuous mode [ 244.120724][ T9881] bridge0: port 3(hsr0) entered blocking state [ 244.127649][ T9881] bridge0: port 3(hsr0) entered disabled state [ 244.152063][ T9881] bridge0: port 3(hsr0) entered blocking state [ 244.158524][ T9881] bridge0: port 3(hsr0) entered forwarding state [ 244.387934][ T9888] validate_nla: 4 callbacks suppressed [ 244.387949][ T9888] netlink: 'syz.4.1573': attribute type 27 has an invalid length. [ 244.444719][ T9893] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1574'. [ 244.762480][ T9908] netlink: 'syz.4.1579': attribute type 10 has an invalid length. [ 244.867381][ T9921] netlink: 'syz.2.1593': attribute type 16 has an invalid length. [ 244.890790][ T9921] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1593'. [ 244.920581][ T9922] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1582'. [ 244.946912][ T9916] netlink: 'syz.1.1578': attribute type 39 has an invalid length. [ 244.993195][ T9931] netlink: 'syz.2.1593': attribute type 16 has an invalid length. [ 245.040160][ T9931] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1593'. [ 245.195448][ T9919] netlink: 'syz.4.1583': attribute type 10 has an invalid length. [ 245.214232][ T9919] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1583'. [ 245.252054][ T9919] nr0: port 1(hsr0) entered disabled state [ 245.327577][ T9919] bridge0: port 4(hsr0) entered blocking state [ 245.353076][ T9919] bridge0: port 4(hsr0) entered disabled state [ 245.396502][ T9955] netlink: 'syz.1.1588': attribute type 1 has an invalid length. [ 245.407274][ T9919] bridge0: port 4(hsr0) entered blocking state [ 245.413795][ T9919] bridge0: port 4(hsr0) entered forwarding state [ 245.425039][ T9955] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1588'. [ 245.454727][ T9956] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1587'. [ 245.482928][ T9953] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1587'. [ 245.963314][ T9984] netlink: 'syz.1.1596': attribute type 10 has an invalid length. [ 246.016154][ T9984] netlink: 'syz.1.1596': attribute type 16 has an invalid length. [ 246.351318][ T9997] pimreg: tun_chr_ioctl cmd 1074025677 [ 246.357840][ T9997] pimreg: linktype set to 0 [ 246.366339][ T9997] pimreg: tun_chr_ioctl cmd 1074812117 [ 246.389233][ T9997] pimreg: tun_chr_ioctl cmd 35106 [ 246.483680][T10004] netlink: 'syz.0.1613': attribute type 10 has an invalid length. [ 246.500077][T10004] device macvlan0 entered promiscuous mode [ 246.886838][T10011] device hsr0 entered promiscuous mode [ 246.894498][T10011] bridge0: port 3(hsr0) entered blocking state [ 246.932423][T10011] bridge0: port 3(hsr0) entered disabled state [ 247.583023][T10065] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 247.627687][T10065] CPU: 1 PID: 10065 Comm: syz.1.1620 Not tainted syzkaller #0 [ 247.635177][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.645236][T10065] Call Trace: [ 247.648523][T10065] [ 247.651458][T10065] dump_stack_lvl+0x188/0x250 [ 247.656148][T10065] ? show_regs_print_info+0x20/0x20 [ 247.661355][T10065] ? load_image+0x410/0x410 [ 247.665876][T10065] sysfs_warn_dup+0x8a/0xa0 [ 247.670379][T10065] sysfs_do_create_link_sd+0xc0/0x110 [ 247.675749][T10065] device_add+0x83b/0x1050 [ 247.680172][T10065] wiphy_register+0x1e74/0x2c40 [ 247.685041][T10065] ? cfg80211_event_work+0x40/0x40 [ 247.690153][T10065] ? minstrel_ht_alloc+0x807/0x980 [ 247.695275][T10065] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 247.701355][T10065] ieee80211_register_hw+0x2a03/0x3a60 [ 247.706821][T10065] ? ieee80211_register_hw+0xb21/0x3a60 [ 247.712373][T10065] ? ieee80211_tasklet_handler+0x20/0x20 [ 247.718012][T10065] ? rcu_is_watching+0x11/0xa0 [ 247.722779][T10065] ? hrtimer_init+0x10c/0x220 [ 247.727460][T10065] mac80211_hwsim_new_radio+0x209d/0x4050 [ 247.733200][T10065] hwsim_new_radio_nl+0xa7d/0xc50 [ 247.738243][T10065] genl_rcv_msg+0xd0b/0xfa0 [ 247.742757][T10065] ? genl_bind+0x370/0x370 [ 247.747184][T10065] ? perf_trace_lock+0xe4/0x390 [ 247.752035][T10065] ? verify_lock_unused+0x140/0x140 [ 247.757235][T10065] ? verify_lock_unused+0x140/0x140 [ 247.762434][T10065] ? perf_trace_lock+0xe4/0x390 [ 247.767296][T10065] ? perf_trace_lock+0xe4/0x390 [ 247.772153][T10065] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 247.778499][T10065] netlink_rcv_skb+0x1e9/0x430 [ 247.783262][T10065] ? genl_bind+0x370/0x370 [ 247.787677][T10065] ? netlink_ack+0xb10/0xb10 [ 247.792274][T10065] ? down_read+0x1aa/0x2e0 [ 247.796688][T10065] genl_rcv+0x24/0x40 [ 247.800666][T10065] netlink_unicast+0x78f/0x940 [ 247.805444][T10065] netlink_sendmsg+0x8ba/0xbe0 [ 247.810217][T10065] ? netlink_getsockopt+0x570/0x570 [ 247.815412][T10065] ? aa_sock_msg_perm+0x94/0x150 [ 247.820353][T10065] ? apparmor_socket_sendmsg+0x88/0x230 [ 247.825895][T10065] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.831173][T10065] ? security_socket_sendmsg+0x7c/0xa0 [ 247.836630][T10065] ? netlink_getsockopt+0x570/0x570 [ 247.841824][T10065] ____sys_sendmsg+0x5be/0x8f0 [ 247.846599][T10065] ? __sys_sendmsg_sock+0x30/0x30 [ 247.851628][T10065] ? import_iovec+0x6f/0xa0 [ 247.856136][T10065] ___sys_sendmsg+0x236/0x2e0 [ 247.860826][T10065] ? __sys_sendmsg+0x290/0x290 [ 247.865602][T10065] ? trace_event_raw_event_lock+0x250/0x250 [ 247.871523][T10065] __se_sys_sendmsg+0x1b7/0x2a0 [ 247.876374][T10065] ? __x64_sys_sendmsg+0x80/0x80 [ 247.881310][T10065] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 247.887308][T10065] ? lockdep_hardirqs_on+0x94/0x140 [ 247.892521][T10065] do_syscall_64+0x4c/0xa0 [ 247.896930][T10065] ? clear_bhb_loop+0x30/0x80 [ 247.901621][T10065] ? clear_bhb_loop+0x30/0x80 [ 247.906298][T10065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.912196][T10065] RIP: 0033:0x7f022d827159 [ 247.916609][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.936221][T10065] RSP: 002b:00007f022ba5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.944634][T10065] RAX: ffffffffffffffda RBX: 00007f022daaf090 RCX: 00007f022d827159 [ 247.952598][T10065] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 247.960563][T10065] RBP: 00007f022d8be06b R08: 0000000000000000 R09: 0000000000000000 [ 247.968530][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.976493][T10065] R13: 00007f022daaf128 R14: 00007f022daaf090 R15: 00007fff1c70bc38 [ 247.984481][T10065] [ 248.096632][T10079] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 248.154233][T10079] CPU: 1 PID: 10079 Comm: syz.1.1620 Not tainted syzkaller #0 [ 248.161732][T10079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.171787][T10079] Call Trace: [ 248.175072][T10079] [ 248.178001][T10079] dump_stack_lvl+0x188/0x250 [ 248.182684][T10079] ? show_regs_print_info+0x20/0x20 [ 248.187877][T10079] ? load_image+0x410/0x410 [ 248.192389][T10079] sysfs_warn_dup+0x8a/0xa0 [ 248.196890][T10079] sysfs_do_create_link_sd+0xc0/0x110 [ 248.202264][T10079] device_add+0x83b/0x1050 [ 248.206777][T10079] wiphy_register+0x1e74/0x2c40 [ 248.211645][T10079] ? cfg80211_event_work+0x40/0x40 [ 248.216749][T10079] ? minstrel_ht_alloc+0x807/0x980 [ 248.221856][T10079] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 248.227916][T10079] ieee80211_register_hw+0x2a03/0x3a60 [ 248.233367][T10079] ? ieee80211_register_hw+0xb21/0x3a60 [ 248.238904][T10079] ? ieee80211_tasklet_handler+0x20/0x20 [ 248.244525][T10079] ? rcu_is_watching+0x11/0xa0 [ 248.249274][T10079] ? hrtimer_init+0x10c/0x220 [ 248.253942][T10079] mac80211_hwsim_new_radio+0x209d/0x4050 [ 248.259661][T10079] hwsim_new_radio_nl+0xa7d/0xc50 [ 248.264679][T10079] genl_rcv_msg+0xd0b/0xfa0 [ 248.269171][T10079] ? genl_bind+0x370/0x370 [ 248.273575][T10079] ? perf_trace_lock+0xe4/0x390 [ 248.278409][T10079] ? verify_lock_unused+0x140/0x140 [ 248.283590][T10079] ? verify_lock_unused+0x140/0x140 [ 248.288770][T10079] ? perf_trace_lock+0xe4/0x390 [ 248.293607][T10079] ? perf_trace_lock+0xe4/0x390 [ 248.298442][T10079] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 248.304765][T10079] netlink_rcv_skb+0x1e9/0x430 [ 248.309524][T10079] ? genl_bind+0x370/0x370 [ 248.313924][T10079] ? netlink_ack+0xb10/0xb10 [ 248.318503][T10079] ? down_read+0x1aa/0x2e0 [ 248.322903][T10079] genl_rcv+0x24/0x40 [ 248.326863][T10079] netlink_unicast+0x78f/0x940 [ 248.331629][T10079] netlink_sendmsg+0x8ba/0xbe0 [ 248.336397][T10079] ? netlink_getsockopt+0x570/0x570 [ 248.341577][T10079] ? aa_sock_msg_perm+0x94/0x150 [ 248.346502][T10079] ? apparmor_socket_sendmsg+0x88/0x230 [ 248.352040][T10079] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 248.357314][T10079] ? security_socket_sendmsg+0x7c/0xa0 [ 248.362754][T10079] ? netlink_getsockopt+0x570/0x570 [ 248.367937][T10079] ____sys_sendmsg+0x5be/0x8f0 [ 248.372692][T10079] ? __sys_sendmsg_sock+0x30/0x30 [ 248.377707][T10079] ? import_iovec+0x6f/0xa0 [ 248.382196][T10079] ___sys_sendmsg+0x236/0x2e0 [ 248.386864][T10079] ? __sys_sendmsg+0x290/0x290 [ 248.391625][T10079] ? trace_event_raw_event_lock+0x250/0x250 [ 248.397524][T10079] __se_sys_sendmsg+0x1b7/0x2a0 [ 248.402358][T10079] ? __x64_sys_sendmsg+0x80/0x80 [ 248.407277][T10079] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 248.413274][T10079] ? lockdep_hardirqs_on+0x94/0x140 [ 248.418465][T10079] do_syscall_64+0x4c/0xa0 [ 248.422861][T10079] ? clear_bhb_loop+0x30/0x80 [ 248.427518][T10079] ? clear_bhb_loop+0x30/0x80 [ 248.432180][T10079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.438054][T10079] RIP: 0033:0x7f022d827159 [ 248.442452][T10079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.462039][T10079] RSP: 002b:00007f022b914028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.470434][T10079] RAX: ffffffffffffffda RBX: 00007f022daaf9f0 RCX: 00007f022d827159 [ 248.478385][T10079] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 248.486334][T10079] RBP: 00007f022d8be06b R08: 0000000000000000 R09: 0000000000000000 [ 248.494289][T10079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.502262][T10079] R13: 00007f022daafa88 R14: 00007f022daaf9f0 R15: 00007fff1c70bc38 [ 248.510239][T10079] [ 248.762041][ T6397] tipc: Subscription rejected, illegal request [ 249.160569][T10117] __nla_validate_parse: 16 callbacks suppressed [ 249.160586][T10117] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1633'. [ 251.027446][T10162] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1643'. [ 251.261413][T10169] validate_nla: 6 callbacks suppressed [ 251.261431][T10169] netlink: 'syz.1.1647': attribute type 9 has an invalid length. [ 251.325545][T10169] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1647'. [ 251.748510][T10187] netlink: 'syz.2.1654': attribute type 21 has an invalid length. [ 251.768855][T10187] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1654'. [ 252.228555][T10211] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1661'. [ 252.553900][T10227] netlink: 'syz.1.1664': attribute type 21 has an invalid length. [ 253.045770][T10244] device sit0 entered promiscuous mode [ 253.210047][T10250] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 253.217109][T10250] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 253.349919][T10247] netlink: 'syz.1.1672': attribute type 17 has an invalid length. [ 253.357983][T10247] netlink: 'syz.1.1672': attribute type 16 has an invalid length. [ 253.429752][T10247] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1672'. [ 253.589461][T10251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1673'. [ 254.383281][T10271] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.749601][T10292] device syzkaller0 entered promiscuous mode [ 255.441962][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.448364][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.035596][T10345] netlink: 209860 bytes leftover after parsing attributes in process `syz.1.1699'. [ 256.075681][T10345] openvswitch: netlink: Message has 4 unknown bytes. [ 256.814372][T10378] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1708'. [ 257.232207][T10384] -: renamed from syzkaller0 [ 257.338114][T10397] netlink: 'syz.4.1715': attribute type 3 has an invalid length. [ 257.367901][T10397] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1715'. [ 257.378993][T10398] netlink: 'syz.0.1711': attribute type 21 has an invalid length. [ 258.524377][T10431] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1723'. [ 258.537780][T10421] netlink: 'syz.4.1721': attribute type 29 has an invalid length. [ 258.549478][T10431] openvswitch: netlink: IP tunnel dst address not specified [ 258.588560][T10421] netlink: 'syz.4.1721': attribute type 29 has an invalid length. [ 259.250762][T10444] netlink: 'syz.0.1728': attribute type 3 has an invalid length. [ 259.301182][T10444] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1728'. [ 259.891265][T10468] netlink: 'syz.0.1732': attribute type 49 has an invalid length. [ 263.070027][T10477] netlink: 'syz.2.1735': attribute type 11 has an invalid length. [ 263.133226][T10486] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1738'. [ 263.269456][T10490] netlink: 'syz.4.1739': attribute type 10 has an invalid length. [ 263.284393][T10490] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1739'. [ 264.301106][T10517] netlink: 'syz.3.1747': attribute type 12 has an invalid length. [ 264.308956][T10517] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1747'. [ 264.319982][T10518] netlink: 'syz.4.1748': attribute type 21 has an invalid length. [ 264.327807][T10518] netlink: 'syz.4.1748': attribute type 7 has an invalid length. [ 264.356994][T10527] netlink: 'syz.4.1748': attribute type 21 has an invalid length. [ 264.365304][T10527] netlink: 'syz.4.1748': attribute type 7 has an invalid length. [ 264.839812][T10540] device syzkaller0 entered promiscuous mode [ 264.935634][T10544] netlink: 'syz.1.1753': attribute type 21 has an invalid length. [ 264.947699][T10544] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1753'. [ 265.046458][T10546] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1756'. [ 265.125119][T10556] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1759'. [ 265.144127][T10556] openvswitch: netlink: Flow key attribute not present in set flow. [ 265.155883][T10562] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1760'. [ 265.328930][T10575] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1764'. [ 266.485907][T10609] netlink: 'syz.3.1772': attribute type 10 has an invalid length. [ 267.024709][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.168898][T10609] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.241295][T10609] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 267.769639][ T6965] Bluetooth: hci1: command 0x0406 tx timeout [ 267.880884][T10628] device sit0 left promiscuous mode [ 268.201299][T10637] netlink: 'syz.4.1778': attribute type 5 has an invalid length. [ 268.820907][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.861895][T10645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.884284][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.939671][T10645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.963935][T10635] netlink: 7862 bytes leftover after parsing attributes in process `syz.2.1777'. [ 269.844434][T10669] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1783'. [ 270.027257][T10669] device hsr_slave_0 left promiscuous mode [ 270.143987][T10669] device hsr_slave_1 left promiscuous mode [ 270.229127][T10669] bridge0: port 3(hsr0) entered disabled state [ 270.288789][T10669] bridge0: port 3(hsr0) entered disabled state [ 270.882016][T10681] netlink: 'syz.2.1787': attribute type 9 has an invalid length. [ 270.999783][T10681] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.1787'. [ 271.773544][T10704] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.1793'. [ 272.253498][T10713] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1795'. [ 272.340735][T10717] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 272.414471][T10717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.327031][T10772] netlink: 'syz.4.1809': attribute type 49 has an invalid length. [ 278.489036][T10763] netlink: 'syz.2.1807': attribute type 3 has an invalid length. [ 278.507650][T10763] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1807'. [ 279.404360][T10788] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1811'. [ 279.590221][T10781] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1811'. [ 279.636670][T10781] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.1811'. [ 280.433089][T10795] netlink: 'syz.4.1814': attribute type 29 has an invalid length. [ 280.543935][T10795] netlink: 'syz.4.1814': attribute type 29 has an invalid length. [ 280.600150][T10802] netlink: 'syz.4.1814': attribute type 29 has an invalid length. [ 280.617883][T10799] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1815'. [ 280.685260][T10799] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 281.757265][T10813] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 281.821017][T10813] device macvlan0 left promiscuous mode [ 282.020817][T10813] team0: Port device macvlan0 added [ 282.129077][T10816] netlink: 'syz.0.1821': attribute type 7 has an invalid length. [ 282.217288][T10825] netlink: 'syz.4.1825': attribute type 10 has an invalid length. [ 283.068219][T10844] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1832'. [ 283.096851][T10846] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1833'. [ 283.097875][T10844] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 283.508172][T10848] chnl_net:caif_netlink_parms(): no params data found [ 284.035332][T10848] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.067361][T10848] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.090633][T10848] device bridge_slave_0 entered promiscuous mode [ 284.099478][T10848] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.106631][T10848] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.114661][T10848] device bridge_slave_1 entered promiscuous mode [ 284.137220][T10848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.150029][T10848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.175103][T10848] team0: Port device team_slave_0 added [ 284.183881][T10848] team0: Port device team_slave_1 added [ 284.217780][T10848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.241411][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.328296][T10848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.372084][T10848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.399100][T10848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.508536][T10848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.856038][T10848] device hsr_slave_0 entered promiscuous mode [ 284.876718][T10848] device hsr_slave_1 entered promiscuous mode [ 284.900845][T10892] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1842'. [ 284.939168][T10890] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1843'. [ 284.999538][T10890] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 285.133170][T10897] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1845'. [ 285.162182][T10897] netlink: get zone limit has 4 unknown bytes [ 285.209527][ T6955] Bluetooth: hci5: command 0x0409 tx timeout [ 285.232113][T10900] netlink: 'syz.0.1846': attribute type 28 has an invalid length. [ 285.270612][T10900] netlink: 'syz.0.1846': attribute type 4 has an invalid length. [ 285.352169][T10848] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 285.367492][T10900] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1846'. [ 285.384911][T10912] netlink: 'syz.3.1850': attribute type 13 has an invalid length. [ 285.430654][T10912] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.1850'. [ 285.490885][T10848] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 285.530960][T10848] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 285.588830][T10848] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 285.820121][T10920] : port 1(gretap0) entered blocking state [ 285.855581][T10920] : port 1(gretap0) entered disabled state [ 285.863514][T10923] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1854'. [ 285.888951][T10920] device gretap0 entered promiscuous mode [ 285.927058][T10923] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 285.934708][T10921] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1853'. [ 285.968407][T10927] netlink: 'syz.0.1855': attribute type 3 has an invalid length. [ 286.011906][T10848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.025459][T10927] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1855'. [ 286.059774][T10920] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1853'. [ 286.101728][T10920] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.1853'. [ 286.142707][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 286.164684][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 286.190071][T10848] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.482868][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 286.498412][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 286.525150][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.532306][ T6413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.556136][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 286.574412][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 286.640994][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 286.660126][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.667251][ T6413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.696051][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 286.706885][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 286.732440][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 286.745381][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 286.757273][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 286.769189][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 286.801646][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 286.836743][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 286.876227][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 286.901853][T10848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 286.938326][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 286.955215][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 286.981831][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 287.147662][T10958] netlink: 'syz.0.1864': attribute type 4 has an invalid length. [ 287.290652][ T6964] Bluetooth: hci5: command 0x041b tx timeout [ 287.319428][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 287.350694][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 287.380729][T10848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.788102][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 287.808200][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 287.863558][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 287.903812][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 287.937270][T10848] device veth0_vlan entered promiscuous mode [ 287.950736][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 287.982413][T10991] netlink: 'syz.3.1873': attribute type 10 has an invalid length. [ 287.992227][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.026146][T10992] netlink: 'syz.2.1872': attribute type 5 has an invalid length. [ 288.041922][T10848] device veth1_vlan entered promiscuous mode [ 288.049663][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.061669][T10991] netlink: 'syz.3.1873': attribute type 10 has an invalid length. [ 288.117333][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.167559][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.201741][T10848] device veth0_macvtap entered promiscuous mode [ 288.274609][T10848] device veth1_macvtap entered promiscuous mode [ 288.337936][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.353836][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.361685][T11010] netlink: 'syz.3.1880': attribute type 6 has an invalid length. [ 288.365257][T10848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.389072][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.404674][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.439630][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.458591][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.476553][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.514860][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.559213][T10848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.614048][T10848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.650847][T10848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.716269][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.749833][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.855364][T10848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.867810][T10848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.880908][T10848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.890435][T10848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.263484][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.289416][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.346953][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 289.369812][ T5046] Bluetooth: hci5: command 0x040f tx timeout [ 289.387018][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.395884][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.404000][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 289.914407][T11039] __nla_validate_parse: 48 callbacks suppressed [ 289.914424][T11039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 289.957578][T11039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 289.981617][T11059] : port 1(gretap0) entered blocking state [ 289.996762][T11059] : port 1(gretap0) entered disabled state [ 290.009799][T11052] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1886'. [ 290.021036][T11059] device gretap0 entered promiscuous mode [ 290.101346][T11039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 290.135244][T11039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 290.197565][T11054] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.1885'. [ 290.200880][T11039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 290.256412][T11039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 290.296625][T11059] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.1885'. [ 290.333097][T11039] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1889'. [ 291.007645][T11088] device syzkaller0 entered promiscuous mode [ 291.458137][ T5046] Bluetooth: hci5: command 0x0419 tx timeout [ 291.668868][T11121] netlink: 'syz.5.1907': attribute type 10 has an invalid length. [ 291.716412][T11121] batman_adv: batadv0: Adding interface: virt_wifi0 [ 291.729125][T11121] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.782262][T11121] batman_adv: batadv0: Interface activated: virt_wifi0 [ 291.964837][T11130] pimreg1: tun_chr_ioctl cmd 1074025677 [ 291.975278][T11130] pimreg1: linktype set to 774 [ 292.003279][T11133] netlink: 'syz.5.1911': attribute type 10 has an invalid length. [ 292.049075][T11133] team0: Port device netdevsim0 added [ 293.205048][T11192] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 293.302848][T11192] team0: Device wg1 is of different type [ 293.386506][T11191] delete_channel: no stack [ 293.697215][T11203] device syzkaller0 entered promiscuous mode [ 293.885618][T11218] netlink: 'syz.3.1933': attribute type 10 has an invalid length. [ 294.021908][T11226] netlink: 'syz.4.1936': attribute type 6 has an invalid length. [ 294.072503][T11228] netlink: 'syz.2.1935': attribute type 21 has an invalid length. [ 294.183150][T11228] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 294.186183][T11232] netlink: 'syz.4.1936': attribute type 3 has an invalid length. [ 294.203030][T11232] netlink: 'syz.4.1936': attribute type 8 has an invalid length. [ 294.219026][T11228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.403424][ T1290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.476339][ T1290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.553374][ T1290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.520096][ T1290] batman_adv: batadv0: Removing interface: netdevsim0 [ 295.556378][ T1290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.850412][T11287] __nla_validate_parse: 19 callbacks suppressed [ 295.850427][T11287] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1947'. [ 296.076894][T11293] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1947'. [ 296.446044][T11312] netlink: 'syz.2.1952': attribute type 3 has an invalid length. [ 296.477219][T11312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1952'. [ 296.746315][T11322] device syzkaller0 entered promiscuous mode [ 296.954579][T11345] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.082121][T11346] netlink: 'syz.5.1957': attribute type 10 has an invalid length. [ 297.099415][T11346] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1957'. [ 297.974947][T11372] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1964'. [ 297.990032][T11370] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.1963'. [ 298.379593][T11379] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1963'. [ 298.664259][T11392] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1967'. [ 298.777281][T11398] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 298.954937][T11401] netlink: 'syz.0.1970': attribute type 9 has an invalid length. [ 299.058722][T11401] netlink: 62176 bytes leftover after parsing attributes in process `syz.0.1970'. [ 299.283128][T11414] @0: renamed from bond_slave_1 [ 300.142549][ T1290] team0: Port device wlan1 removed [ 300.570513][T11468] netlink: 'syz.2.1981': attribute type 39 has an invalid length. [ 300.616256][T11468] bridge0: port 2(syz_tun) entered disabled state [ 300.763918][T11468] device syz_tun left promiscuous mode [ 300.780912][T11468] bridge0: port 2(syz_tun) entered disabled state [ 301.023574][ T1290] device hsr_slave_0 left promiscuous mode [ 301.042325][ T1290] device hsr_slave_1 left promiscuous mode [ 301.169047][ T1290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.186152][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.201236][ T1290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.218928][ T1290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.228427][ T1290] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.232984][T11484] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1985'. [ 301.251223][ T1290] device bridge_slave_0 left promiscuous mode [ 301.257420][ T1290] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.598113][ T1290] team0 (unregistering): Port device team_slave_1 removed [ 301.651234][ T1290] team0 (unregistering): Port device team_slave_0 removed [ 301.847038][T11487] netlink: 'syz.0.1985': attribute type 21 has an invalid length. [ 301.859985][T11487] netlink: 'syz.0.1985': attribute type 1 has an invalid length. [ 301.899478][T11487] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1985'. [ 301.945153][T11490] netlink: 'syz.0.1985': attribute type 46 has an invalid length. [ 301.971525][T11490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1985'. [ 301.993220][T11493] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1986'. [ 302.012732][T11493] tc_dump_action: action bad kind [ 302.018372][T11494] netlink: 'syz.5.1986': attribute type 1 has an invalid length. [ 302.332727][T11498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1987'. [ 302.789255][T11521] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1991'. [ 302.840248][T11521] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 302.848408][T11521] netlink: 21820 bytes leftover after parsing attributes in process `syz.0.1991'. [ 303.225021][T11543] netlink: 'syz.0.1994': attribute type 1 has an invalid length. [ 303.424627][T11550] netlink: 'syz.5.1993': attribute type 9 has an invalid length. [ 303.444379][T11550] netlink: 62176 bytes leftover after parsing attributes in process `syz.5.1993'. [ 304.029493][T11578] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2004'. [ 304.114968][T11584] netlink: 'syz.3.2005': attribute type 1 has an invalid length. [ 304.151852][T11584] netlink: 'syz.3.2005': attribute type 4 has an invalid length. [ 304.211965][T11584] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2005'. [ 304.912908][T11605] device sit0 left promiscuous mode [ 305.719652][T11630] netlink: 'syz.0.2013': attribute type 12 has an invalid length. [ 305.950748][T11636] netlink: 'syz.3.2012': attribute type 9 has an invalid length. [ 306.352350][T11646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.182832][T11659] device wlan1 left promiscuous mode [ 307.202691][T11661] device wlan1 entered promiscuous mode [ 307.336587][T11678] IPv6: pim6reg1: Disabled Multicast RS [ 307.448219][T11683] __nla_validate_parse: 3 callbacks suppressed [ 307.448250][T11683] netlink: 115680 bytes leftover after parsing attributes in process `syz.3.2023'. [ 307.513181][T11690] netlink: 'syz.2.2025': attribute type 27 has an invalid length. [ 307.560457][T11690] netlink: 'syz.2.2025': attribute type 25 has an invalid length. [ 309.146579][T11751] netlink: 'syz.5.2036': attribute type 1 has an invalid length. [ 309.237316][T11751] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2036'. [ 310.947244][T11804] device sit0 entered promiscuous mode [ 311.503735][T11818] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2048'. [ 312.194373][T11836] syz.2.2054[11836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.194508][T11836] syz.2.2054[11836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.644601][T11873] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2058'. [ 312.753703][T11877] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2060'. [ 312.837046][T11880] netlink: 'syz.0.2060': attribute type 10 has an invalid length. [ 312.979252][T11884] netlink: 'syz.4.2062': attribute type 4 has an invalid length. [ 313.028419][T11884] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.2062'. [ 313.060926][T11880] team0 (unregistering): Port device team_slave_0 removed [ 313.179706][T11880] team0 (unregistering): Port device team_slave_1 removed [ 313.231694][T11880] team0 (unregistering): Port device macvlan0 removed [ 313.359081][T11890] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2063'. [ 313.482112][T11890] netlink: 'syz.5.2063': attribute type 1 has an invalid length. [ 313.512011][T11893] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2064'. [ 313.628982][T11893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.443284][T11918] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.2072'. [ 314.512607][T11918] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.2072'. [ 314.647716][T11927] delete_channel: no stack [ 314.753638][T11927] delete_channel: no stack [ 315.280446][T11943] : port 1(hsr0) entered blocking state [ 315.299921][T11943] : port 1(hsr0) entered disabled state [ 315.319579][T11943] device hsr0 entered promiscuous mode [ 315.354704][T11940] : port 1(hsr0) entered blocking state [ 315.360548][T11940] : port 1(hsr0) entered forwarding state [ 315.410851][T11941] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2076'. [ 316.077444][T11977] netlink: 'syz.0.2084': attribute type 8 has an invalid length. [ 316.246664][T11977] netlink: 'syz.0.2084': attribute type 8 has an invalid length. [ 316.307660][T11995] netlink: 'syz.4.2085': attribute type 29 has an invalid length. [ 316.400599][T11995] netlink: 'syz.4.2085': attribute type 29 has an invalid length. [ 316.439157][T11998] netlink: 'syz.4.2085': attribute type 29 has an invalid length. [ 316.486228][T11995] netlink: 'syz.4.2085': attribute type 10 has an invalid length. [ 316.507145][T11995] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2085'. [ 316.785292][T12009] netlink: 143108 bytes leftover after parsing attributes in process `syz.5.2088'. [ 316.884452][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.890816][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.459087][T12031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.729588][T12045] __nla_validate_parse: 2 callbacks suppressed [ 317.729618][T12045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2095'. [ 317.914627][T12048] netlink: 'syz.0.2095': attribute type 3 has an invalid length. [ 317.943094][T12048] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2095'. [ 318.219312][T12067] netlink: 'syz.3.2100': attribute type 10 has an invalid length. [ 318.428356][T12067] device wlan1 left promiscuous mode [ 318.473809][T12067] bond0: (slave wlan1): Releasing backup interface [ 318.524804][T12067] team0: Port device wlan1 added [ 318.530711][T12070] netlink: 'syz.3.2100': attribute type 10 has an invalid length. [ 318.539017][T12070] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2100'. [ 318.804259][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2105'. [ 318.828222][T12094] netlink: 'syz.3.2107': attribute type 19 has an invalid length. [ 319.035673][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2105'. [ 319.266760][T12101] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2109'. [ 319.301722][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2105'. [ 319.565918][T12129] netlink: 198236 bytes leftover after parsing attributes in process `syz.4.2115'. [ 319.909090][T12140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2121'. [ 320.003815][T12146] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2122'. [ 320.294365][T12164] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0 [ 322.757514][T12261] __nla_validate_parse: 5 callbacks suppressed [ 322.757528][T12261] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2149'. [ 322.777139][T12262] validate_nla: 9 callbacks suppressed [ 322.777152][T12262] netlink: 'syz.4.2149': attribute type 4 has an invalid length. [ 323.263452][T12286] device syzkaller0 entered promiscuous mode [ 323.301674][T12288] netlink: 'syz.0.2156': attribute type 21 has an invalid length. [ 323.329810][T12287] netlink: 'syz.0.2156': attribute type 21 has an invalid length. [ 324.398201][T12346] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2164'. [ 324.422658][T12352] netlink: 'syz.5.2165': attribute type 1 has an invalid length. [ 324.663239][T12365] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 324.904396][T12376] netlink: 4091 bytes leftover after parsing attributes in process `syz.5.2171'. [ 325.603247][T12401] netlink: 'syz.4.2178': attribute type 21 has an invalid length. [ 325.625669][T12408] netlink: 'syz.2.2180': attribute type 29 has an invalid length. [ 325.736694][T12408] netlink: 'syz.2.2180': attribute type 29 has an invalid length. [ 325.766442][T12401] netlink: 'syz.4.2178': attribute type 10 has an invalid length. [ 325.790163][T12401] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2178'. [ 325.833822][T12408] netlink: 'syz.2.2180': attribute type 29 has an invalid length. [ 325.844675][T12414] device syzkaller0 entered promiscuous mode [ 326.089903][T12412] netlink: 'syz.2.2180': attribute type 29 has an invalid length. [ 326.400446][T12426] device syzkaller0 entered promiscuous mode [ 327.331046][T12481] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2194'. [ 327.358589][T12481] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 327.620061][T12488] device syzkaller0 entered promiscuous mode [ 327.683767][T12489] netlink: 50295 bytes leftover after parsing attributes in process `syz.4.2195'. [ 328.904767][T12551] netlink: 'syz.0.2204': attribute type 3 has an invalid length. [ 328.992661][T12551] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2204'. [ 329.068039][T12559] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2206'. [ 329.312961][T12577] netlink: 'syz.4.2209': attribute type 1 has an invalid length. [ 329.322513][T12580] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2208'. [ 329.409859][T12580] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 329.417984][T12588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2210'. [ 329.450535][T12589] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2210'. [ 329.462559][T12577] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2209'. [ 329.816191][T12598] device syzkaller0 entered promiscuous mode [ 330.339045][T12623] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2218'. [ 330.361223][T12623] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.2218'. [ 330.379616][T12623] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2218'. [ 330.399451][T12623] tc_dump_action: action bad kind [ 330.667111][T12638] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2222'. [ 330.708187][T12641] netlink: 'syz.3.2223': attribute type 6 has an invalid length. [ 331.322187][T12667] device syzkaller0 entered promiscuous mode [ 331.752691][T12688] netlink: 'syz.3.2232': attribute type 3 has an invalid length. [ 332.039071][T12695] netlink: 'syz.3.2234': attribute type 1 has an invalid length. [ 333.000915][T12705] netlink: 'syz.5.2238': attribute type 2 has an invalid length. [ 333.235515][T12719] netlink: 'syz.3.2242': attribute type 2 has an invalid length. [ 333.255751][T12719] netlink: 'syz.3.2242': attribute type 8 has an invalid length. [ 333.493209][T12730] netlink: 'syz.3.2247': attribute type 10 has an invalid length. [ 333.557831][T12731] netlink: 'syz.3.2247': attribute type 3 has an invalid length. [ 333.699700][T12730] team0: Device gre0 is of different type [ 334.595734][T12772] validate_nla: 6 callbacks suppressed [ 334.595749][T12772] netlink: 'syz.3.2256': attribute type 15 has an invalid length. [ 334.658794][T12772] __nla_validate_parse: 10 callbacks suppressed [ 334.658809][T12772] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2256'. [ 334.965537][T12792] netlink: 'syz.2.2260': attribute type 6 has an invalid length. [ 334.994076][T12792] netlink: 1034 bytes leftover after parsing attributes in process `syz.2.2260'. [ 335.270858][T12794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2260'. [ 335.359382][T12803] netlink: 'syz.0.2262': attribute type 21 has an invalid length. [ 335.368685][T12803] netlink: 'syz.0.2262': attribute type 19 has an invalid length. [ 335.401188][T12803] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.2262'. [ 338.887696][T12827] netlink: 'syz.5.2267': attribute type 1 has an invalid length. [ 338.979982][T12827] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2267'. [ 339.127715][T12846] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2272'. [ 339.313882][T12853] netlink: 'syz.5.2273': attribute type 6 has an invalid length. [ 339.339740][T12853] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.2273'. [ 339.402683][T12857] netlink: 'syz.2.2274': attribute type 11 has an invalid length. [ 339.415059][T12853] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2273'. [ 339.702062][T12864] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2278'. [ 339.729179][T12864] openvswitch: netlink: Key type 7440 is out of range max 29 [ 340.629723][T12886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2284'. [ 340.664784][T12886] netlink: 'syz.4.2284': attribute type 10 has an invalid length. [ 342.103030][T12928] netlink: 'syz.5.2296': attribute type 10 has an invalid length. [ 342.152090][T12928] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2296'. [ 342.194683][T12936] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2297'. [ 342.208976][T12928] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 342.234752][T12928] batman_adv: batadv0: Removing interface: virt_wifi0 [ 342.340195][T12941] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2297'. [ 342.414145][T12936] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2297'. [ 342.473431][T12945] device syzkaller0 entered promiscuous mode [ 342.558999][T12949] netlink: 'syz.2.2299': attribute type 7 has an invalid length. [ 342.577511][T12936] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2297'. [ 342.578732][T12951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 342.683334][T12953] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2302'. [ 342.725827][T12953] netlink: 'syz.5.2302': attribute type 21 has an invalid length. [ 342.735691][T12936] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2297'. [ 342.745995][T12953] IPv6: NLM_F_CREATE should be specified when creating new route [ 342.800813][T12953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 342.808090][T12953] IPv6: NLM_F_CREATE should be set when creating new route [ 342.815423][T12953] IPv6: NLM_F_CREATE should be set when creating new route [ 342.822688][T12953] IPv6: NLM_F_CREATE should be set when creating new route [ 343.013989][T12971] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 343.266565][T13004] netlink: 'syz.3.2312': attribute type 4 has an invalid length. [ 343.412952][T13010] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 343.474694][T13010] netlink: 'syz.4.2316': attribute type 29 has an invalid length. [ 343.520073][T13006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.527851][T13006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.543110][T13006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.553403][T13006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.844453][T13018] netlink: 'syz.2.2320': attribute type 2 has an invalid length. [ 343.891927][T13020] netlink: 'syz.0.2319': attribute type 10 has an invalid length. [ 344.127803][T13025] netlink: 'syz.0.2319': attribute type 13 has an invalid length. [ 344.212334][T13025] syz_tun: refused to change device tx_queue_len [ 344.245865][T13025] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 348.407984][T13116] validate_nla: 1 callbacks suppressed [ 348.407998][T13116] netlink: 'syz.4.2342': attribute type 11 has an invalid length. [ 348.702911][T13123] __nla_validate_parse: 11 callbacks suppressed [ 348.702927][T13123] netlink: 10374 bytes leftover after parsing attributes in process `syz.0.2344'. [ 348.745245][T13127] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 348.859723][T13126] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.2346'. [ 348.890575][T13126] openvswitch: netlink: Duplicate key (type 0). [ 349.505324][T13149] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2353'. [ 349.546434][T13149] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2353'. [ 349.607141][T13159] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2353'. [ 349.925404][T13172] netlink: 'syz.0.2356': attribute type 11 has an invalid length. [ 351.344788][T13198] delete_channel: no stack [ 352.071784][T13216] netlink: 'syz.5.2373': attribute type 10 has an invalid length. [ 352.095408][T13216] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2373'. [ 353.601152][T13262] sock: sock_set_timeout: `syz.5.2386' (pid 13262) tries to set negative timeout [ 354.412165][T13285] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2392'. [ 354.530706][T13285] openvswitch: netlink: Key type 7440 is out of range max 29 [ 354.571323][T13298] netlink: 'syz.5.2395': attribute type 9 has an invalid length. [ 354.629519][T13298] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2395'. [ 355.021131][T13303] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2397'. [ 355.077543][T13305] device syzkaller0 entered promiscuous mode [ 355.090306][T13303] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 355.123021][T13305] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 355.216552][T13305] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2398'. [ 356.994458][T13339] netlink: 'syz.0.2407': attribute type 11 has an invalid length. [ 357.441160][T13346] netlink: 'syz.0.2410': attribute type 3 has an invalid length. [ 357.489979][T13348] netlink: 'syz.0.2410': attribute type 10 has an invalid length. [ 357.505398][T13346] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2410'. [ 357.882674][T13364] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2415'. [ 358.169858][T13377] netlink: 'syz.4.2421': attribute type 11 has an invalid length. [ 359.057958][T13403] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2428'. [ 359.144184][T13405] device lo entered promiscuous mode [ 359.151800][T13408] netlink: 'syz.0.2431': attribute type 9 has an invalid length. [ 359.188420][T13408] netlink: 'syz.0.2431': attribute type 23 has an invalid length. [ 359.212042][T13408] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.2431'. [ 360.065191][T13429] netlink: 'syz.3.2434': attribute type 11 has an invalid length. [ 361.444315][T13459] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2446'. [ 361.503404][T13459] netlink: 'syz.0.2446': attribute type 10 has an invalid length. [ 361.545288][T13459] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2446'. [ 361.591970][T13459] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 361.947797][T13465] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2447'. [ 362.080692][T13465] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.206380][T13465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.314890][T13469] netlink: 'syz.3.2448': attribute type 11 has an invalid length. [ 363.539110][T13484] netlink: 'syz.0.2464': attribute type 29 has an invalid length. [ 363.603201][T13484] netlink: 'syz.0.2464': attribute type 29 has an invalid length. [ 363.700025][T13485] netlink: 'syz.0.2464': attribute type 29 has an invalid length. [ 364.035521][T13504] netlink: 'syz.3.2460': attribute type 11 has an invalid length. [ 364.084077][ T1277] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.261903][T13557] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2473'. [ 365.387576][T13560] netlink: 'syz.3.2474': attribute type 11 has an invalid length. [ 366.545801][T13591] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2482'. [ 366.652311][T13591] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 366.691052][T13591] CPU: 0 PID: 13591 Comm: syz.0.2482 Not tainted syzkaller #0 [ 366.698552][T13591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.708611][T13591] Call Trace: [ 366.711890][T13591] [ 366.714824][T13591] dump_stack_lvl+0x188/0x250 [ 366.719512][T13591] ? show_regs_print_info+0x20/0x20 [ 366.724715][T13591] ? load_image+0x410/0x410 [ 366.729236][T13591] sysfs_warn_dup+0x8a/0xa0 [ 366.733741][T13591] sysfs_do_create_link_sd+0xc0/0x110 [ 366.739113][T13591] device_add+0x83b/0x1050 [ 366.743540][T13591] wiphy_register+0x1e74/0x2c40 [ 366.748419][T13591] ? cfg80211_event_work+0x40/0x40 [ 366.753535][T13591] ? minstrel_ht_alloc+0x807/0x980 [ 366.758658][T13591] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 366.764750][T13591] ieee80211_register_hw+0x2a03/0x3a60 [ 366.770227][T13591] ? ieee80211_register_hw+0xb21/0x3a60 [ 366.775784][T13591] ? ieee80211_tasklet_handler+0x20/0x20 [ 366.781424][T13591] ? rcu_is_watching+0x11/0xa0 [ 366.786200][T13591] ? hrtimer_init+0x10c/0x220 [ 366.790887][T13591] mac80211_hwsim_new_radio+0x209d/0x4050 [ 366.796999][T13591] hwsim_new_radio_nl+0xa7d/0xc50 [ 366.802063][T13591] genl_rcv_msg+0xd0b/0xfa0 [ 366.806584][T13591] ? genl_bind+0x370/0x370 [ 366.811010][T13591] ? __dev_queue_xmit+0x1b64/0x2e50 [ 366.816212][T13591] ? verify_lock_unused+0x140/0x140 [ 366.821417][T13591] ? perf_trace_lock+0xe4/0x390 [ 366.826251][T13591] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 366.832581][T13591] netlink_rcv_skb+0x1e9/0x430 [ 366.837344][T13591] ? genl_bind+0x370/0x370 [ 366.841759][T13591] ? netlink_ack+0xb10/0xb10 [ 366.846370][T13591] ? down_read+0x1aa/0x2e0 [ 366.850795][T13591] genl_rcv+0x24/0x40 [ 366.854774][T13591] netlink_unicast+0x78f/0x940 [ 366.859548][T13591] netlink_sendmsg+0x8ba/0xbe0 [ 366.864328][T13591] ? netlink_getsockopt+0x570/0x570 [ 366.869524][T13591] ? aa_sock_msg_perm+0x94/0x150 [ 366.874465][T13591] ? apparmor_socket_sendmsg+0x88/0x230 [ 366.880007][T13591] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 366.885292][T13591] ? security_socket_sendmsg+0x7c/0xa0 [ 366.890753][T13591] ? netlink_getsockopt+0x570/0x570 [ 366.895959][T13591] ____sys_sendmsg+0x5be/0x8f0 [ 366.900736][T13591] ? __sys_sendmsg_sock+0x30/0x30 [ 366.905773][T13591] ? import_iovec+0x6f/0xa0 [ 366.910287][T13591] ___sys_sendmsg+0x236/0x2e0 [ 366.914976][T13591] ? __sys_sendmsg+0x290/0x290 [ 366.919758][T13591] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 366.925522][T13591] __se_sys_sendmsg+0x1b7/0x2a0 [ 366.930379][T13591] ? __x64_sys_sendmsg+0x80/0x80 [ 366.935418][T13591] ? syscall_enter_from_user_mode+0x2a/0x70 [ 366.941316][T13591] do_syscall_64+0x4c/0xa0 [ 366.945735][T13591] ? clear_bhb_loop+0x30/0x80 [ 366.950413][T13591] ? clear_bhb_loop+0x30/0x80 [ 366.955093][T13591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.960984][T13591] RIP: 0033:0x7f7c71922159 [ 366.965403][T13591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.985013][T13591] RSP: 002b:00007f7c6fb7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.993435][T13591] RAX: ffffffffffffffda RBX: 00007f7c71ba9fa0 RCX: 00007f7c71922159 [ 367.001412][T13591] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 367.009381][T13591] RBP: 00007f7c719b906b R08: 0000000000000000 R09: 0000000000000000 [ 367.017358][T13591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.025326][T13591] R13: 00007f7c71baa038 R14: 00007f7c71ba9fa0 R15: 00007fffc1fa2068 [ 367.033326][T13591] [ 367.140679][T13598] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2484'. [ 367.197179][T13598] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2484'. [ 367.296296][T13610] netlink: 'syz.2.2484': attribute type 3 has an invalid length. [ 367.809864][T13620] netlink: 'syz.4.2489': attribute type 11 has an invalid length. [ 368.056170][T13632] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2494'. [ 368.073836][T13632] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 368.336538][T13641] delete_channel: no stack [ 368.346573][T13641] delete_channel: no stack [ 368.373463][T13641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2497'. [ 368.538751][T13646] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2499'. [ 368.646796][T13648] mac80211_hwsim hwsim19 : renamed from wlan0 [ 368.986843][T13656] netlink: 'syz.0.2502': attribute type 11 has an invalid length. [ 369.341069][T13662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2503'. [ 369.403463][T13666] netlink: 'syz.3.2506': attribute type 9 has an invalid length. [ 369.478557][T13669] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2506'. [ 369.562954][T13666] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2506'. [ 369.575168][T13673] netlink: 'syz.2.2509': attribute type 11 has an invalid length. [ 369.594912][T13675] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2506'. [ 369.854690][T13690] tun0: tun_chr_ioctl cmd 1074025675 [ 369.869646][T13690] tun0: persist enabled [ 369.927945][T13690] tun0: tun_chr_ioctl cmd 1074025675 [ 369.940660][T13690] tun0: persist disabled [ 370.124564][T13698] netlink: 'syz.2.2514': attribute type 2 has an invalid length. [ 370.291453][T13702] netlink: 'syz.3.2516': attribute type 11 has an invalid length. [ 370.471199][T13709] netlink: 'syz.2.2519': attribute type 4 has an invalid length. [ 370.722052][T13717] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 371.033619][T13728] team0: Port device team_slave_0 removed [ 371.056553][T13745] netlink: 'syz.4.2523': attribute type 3 has an invalid length. [ 371.102544][T13733] netlink: 'syz.2.2526': attribute type 10 has an invalid length. [ 371.150597][T13733] team0: Port device geneve0 added [ 371.260011][T13748] netlink: 'syz.3.2527': attribute type 1 has an invalid length. [ 371.358986][T13761] netlink: 'syz.3.2530': attribute type 11 has an invalid length. [ 371.722055][T13774] __nla_validate_parse: 9 callbacks suppressed [ 371.722072][T13774] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2532'. [ 373.056924][T13811] netlink: 'syz.2.2543': attribute type 11 has an invalid length. [ 374.645664][T13838] netlink: 'syz.2.2548': attribute type 10 has an invalid length. [ 374.693777][T13838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2548'. [ 374.744603][T13839] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2548'. [ 374.825684][T13838] netlink: 'syz.2.2548': attribute type 10 has an invalid length. [ 374.859528][T13838] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2548'. [ 375.797999][T13853] netlink: 'syz.0.2554': attribute type 11 has an invalid length. [ 376.020471][T13857] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2553'. [ 378.281624][T13876] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2558'. [ 378.326165][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.332605][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.472361][T13890] netlink: 'syz.0.2561': attribute type 16 has an invalid length. [ 379.502643][T13890] netlink: 'syz.0.2561': attribute type 3 has an invalid length. [ 379.522185][T13890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2561'. [ 380.293630][T13902] netlink: 'syz.3.2565': attribute type 11 has an invalid length. [ 380.783572][T13905] netlink: 'syz.3.2566': attribute type 10 has an invalid length. [ 380.833472][T13905] device netdevsim0 entered promiscuous mode [ 383.840826][T13925] netlink: 'syz.0.2571': attribute type 17 has an invalid length. [ 383.848696][T13925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2571'. [ 383.873766][T13925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 385.220665][T13941] netlink: 'syz.0.2576': attribute type 11 has an invalid length. [ 385.635781][T13949] netlink: 'syz.3.2579': attribute type 2 has an invalid length. [ 385.699710][T13949] netlink: 'syz.3.2579': attribute type 8 has an invalid length. [ 385.707561][T13949] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2579'. [ 385.762343][T13951] netlink: 'syz.3.2579': attribute type 2 has an invalid length. [ 385.792642][T13951] netlink: 'syz.3.2579': attribute type 8 has an invalid length. [ 385.836175][T13951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2579'. [ 386.735098][T13961] tap0: tun_chr_ioctl cmd 1074025678 [ 386.749497][T13961] tap0: group set to 0 [ 386.774046][T13964] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2584'. [ 387.061273][T13973] netlink: 'syz.5.2588': attribute type 11 has an invalid length. [ 387.149291][T13977] netlink: 'syz.0.2590': attribute type 29 has an invalid length. [ 387.226634][T13977] netlink: 'syz.0.2590': attribute type 29 has an invalid length. [ 387.258698][T13981] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2592'. [ 387.300521][T13982] netlink: 'syz.0.2590': attribute type 29 has an invalid length. [ 387.884364][T14014] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2598'. [ 390.991014][T14039] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2605'. [ 391.227518][T14054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2610'. [ 391.767258][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 395.095096][T14109] netlink: 'syz.5.2623': attribute type 21 has an invalid length. [ 395.119722][T14109] netlink: 'syz.5.2623': attribute type 6 has an invalid length. [ 396.362855][T14166] pimreg: tun_chr_ioctl cmd 1074025677 [ 396.386269][T14166] pimreg: linktype set to 270 [ 396.476817][T14173] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2643'. [ 396.577752][T14179] netlink: 'syz.0.2644': attribute type 1 has an invalid length. [ 396.625613][T14179] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2644'. [ 396.717329][T14182] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2645'. [ 396.913653][T14185] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2646'. [ 396.938306][T14185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.972587][T14188] netlink: 'syz.0.2648': attribute type 10 has an invalid length. [ 396.984229][T14188] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2648'. [ 397.027876][T14192] netlink: 130904 bytes leftover after parsing attributes in process `syz.0.2648'. [ 397.120505][T14191] netlink: 'syz.4.2649': attribute type 21 has an invalid length. [ 397.272811][T14204] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2651'. [ 397.298969][T14197] netlink: 'syz.2.2651': attribute type 12 has an invalid length. [ 397.326076][T14197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2651'. [ 397.385461][T14197] netlink: 'syz.2.2651': attribute type 12 has an invalid length. [ 397.412939][T14197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2651'. [ 397.565899][T14197] netlink: 'syz.2.2651': attribute type 12 has an invalid length. [ 397.629483][T14197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2651'. [ 397.688604][T14197] netlink: 'syz.2.2651': attribute type 12 has an invalid length. [ 397.703401][T14197] netlink: 'syz.2.2651': attribute type 12 has an invalid length. [ 397.717101][T14220] : renamed from pimreg0 [ 398.096858][T14227] device netdevsim0 left promiscuous mode [ 398.388800][ T4193] device syz_tun left promiscuous mode [ 398.396199][ T4193] bridge0: port 2(syz_tun) entered disabled state [ 398.718976][T14241] chnl_net:caif_netlink_parms(): no params data found [ 398.785293][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.819436][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.828350][T14241] device bridge_slave_0 entered promiscuous mode [ 398.842663][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.854864][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.864751][T14241] device bridge_slave_1 entered promiscuous mode [ 398.901874][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.917821][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.954853][T14241] team0: Port device team_slave_0 added [ 398.968539][T14241] team0: Port device team_slave_1 added [ 398.997259][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.004357][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.033749][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.047018][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.057447][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.090410][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.093731][ C0] ODEBUG: Out of memory. ODEBUG disabled [ 400.399529][ T6965] Bluetooth: hci0: command 0x0409 tx timeout [ 401.775942][T14241] device hsr_slave_0 entered promiscuous mode [ 401.795239][T14241] device hsr_slave_1 entered promiscuous mode [ 401.822820][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.843306][T14241] Cannot create hsr debugfs directory [ 401.882101][ T6413] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.997632][ T6413] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.116689][ T6413] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.134739][T14292] __nla_validate_parse: 33 callbacks suppressed [ 402.134758][T14292] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2678'. [ 402.185787][ T6413] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.339113][T14297] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2679'. [ 402.359154][T14297] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 402.403216][T14300] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2680'. [ 402.418783][T14300] netlink: get zone limit has 8 unknown bytes [ 402.489494][ T6963] Bluetooth: hci0: command 0x041b tx timeout [ 402.659237][T14310] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2682'. [ 402.757565][T14315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2682'. [ 402.815692][T14310] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 402.854544][T14310] CPU: 0 PID: 14310 Comm: syz.4.2682 Not tainted syzkaller #0 [ 402.862041][T14310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.872095][T14310] Call Trace: [ 402.875378][T14310] [ 402.878314][T14310] dump_stack_lvl+0x188/0x250 [ 402.882997][T14310] ? show_regs_print_info+0x20/0x20 [ 402.888180][T14310] ? load_image+0x410/0x410 [ 402.892689][T14310] sysfs_warn_dup+0x8a/0xa0 [ 402.897181][T14310] sysfs_do_create_link_sd+0xc0/0x110 [ 402.902544][T14310] device_add+0x83b/0x1050 [ 402.906965][T14310] wiphy_register+0x1e74/0x2c40 [ 402.911813][T14310] ? cfg80211_event_work+0x40/0x40 [ 402.916922][T14310] ? minstrel_ht_alloc+0x807/0x980 [ 402.922030][T14310] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 402.928108][T14310] ieee80211_register_hw+0x2a03/0x3a60 [ 402.933565][T14310] ? ieee80211_register_hw+0xb21/0x3a60 [ 402.939118][T14310] ? ieee80211_tasklet_handler+0x20/0x20 [ 402.944767][T14310] ? rcu_is_watching+0x11/0xa0 [ 402.949542][T14310] ? hrtimer_init+0x10c/0x220 [ 402.954236][T14310] mac80211_hwsim_new_radio+0x209d/0x4050 [ 402.959986][T14310] hwsim_new_radio_nl+0xa7d/0xc50 [ 402.965034][T14310] genl_rcv_msg+0xd0b/0xfa0 [ 402.969560][T14310] ? genl_bind+0x370/0x370 [ 402.973993][T14310] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 402.979981][T14310] ? verify_lock_unused+0x140/0x140 [ 402.985192][T14310] ? lock_chain_count+0x20/0x20 [ 402.990055][T14310] ? perf_trace_lock+0xe4/0x390 [ 402.994921][T14310] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 403.001275][T14310] netlink_rcv_skb+0x1e9/0x430 [ 403.006048][T14310] ? genl_bind+0x370/0x370 [ 403.010474][T14310] ? netlink_ack+0xb10/0xb10 [ 403.015080][T14310] ? down_read+0x1aa/0x2e0 [ 403.019506][T14310] genl_rcv+0x24/0x40 [ 403.023496][T14310] netlink_unicast+0x78f/0x940 [ 403.028271][T14310] netlink_sendmsg+0x8ba/0xbe0 [ 403.033026][T14310] ? netlink_getsockopt+0x570/0x570 [ 403.038210][T14310] ? aa_sock_msg_perm+0x94/0x150 [ 403.043149][T14310] ? apparmor_socket_sendmsg+0x88/0x230 [ 403.048677][T14310] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 403.053946][T14310] ? security_socket_sendmsg+0x7c/0xa0 [ 403.059401][T14310] ? netlink_getsockopt+0x570/0x570 [ 403.064592][T14310] ____sys_sendmsg+0x5be/0x8f0 [ 403.069350][T14310] ? __sys_sendmsg_sock+0x30/0x30 [ 403.074411][T14310] ? import_iovec+0x6f/0xa0 [ 403.078916][T14310] ___sys_sendmsg+0x236/0x2e0 [ 403.083581][T14310] ? __sys_sendmsg+0x290/0x290 [ 403.088332][T14310] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 403.094564][T14310] __se_sys_sendmsg+0x1b7/0x2a0 [ 403.099400][T14310] ? __x64_sys_sendmsg+0x80/0x80 [ 403.104318][T14310] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 403.110303][T14310] ? lockdep_hardirqs_on+0x94/0x140 [ 403.115497][T14310] do_syscall_64+0x4c/0xa0 [ 403.119893][T14310] ? clear_bhb_loop+0x30/0x80 [ 403.124547][T14310] ? clear_bhb_loop+0x30/0x80 [ 403.129204][T14310] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.135082][T14310] RIP: 0033:0x7f0672fec159 [ 403.139485][T14310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.159095][T14310] RSP: 002b:00007f0671244028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.167486][T14310] RAX: ffffffffffffffda RBX: 00007f0673273fa0 RCX: 00007f0672fec159 [ 403.175437][T14310] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000013 [ 403.183387][T14310] RBP: 00007f067308306b R08: 0000000000000000 R09: 0000000000000000 [ 403.191347][T14310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.199301][T14310] R13: 00007f0673274038 R14: 00007f0673273fa0 R15: 00007ffe04b7ab78 [ 403.207287][T14310] [ 404.126024][T14241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 404.179762][T14241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 404.194237][T14241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 404.204089][T14241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 404.295037][T14364] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2691'. [ 404.374996][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.433213][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 404.444465][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 404.455258][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.512618][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 404.525600][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 404.535254][ T4363] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.542354][ T4363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.553982][T14372] validate_nla: 30 callbacks suppressed [ 404.553996][T14372] netlink: 'syz.2.2704': attribute type 39 has an invalid length. [ 404.567923][ T6965] Bluetooth: hci0: command 0x040f tx timeout [ 404.597372][T14368] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2693'. [ 404.608678][T14368] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 404.634863][T14368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.667368][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 404.720525][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 404.729248][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 404.780075][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.787146][ T6397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.802728][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 404.813885][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 404.866349][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 404.883210][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 404.894440][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 404.906723][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 404.918739][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 404.927632][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 404.960323][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 404.977293][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 404.985860][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 405.002681][T14241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 405.014136][T14381] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2698'. [ 405.067504][T14383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2698'. [ 405.098091][T14381] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 405.192191][ T6413] device hsr_slave_0 left promiscuous mode [ 405.198642][ T6413] device hsr_slave_1 left promiscuous mode [ 405.206871][ T6413] bridge0: port 3(hsr0) entered disabled state [ 405.221901][ T6413] device bridge_slave_0 left promiscuous mode [ 405.228236][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.238447][ T6413] device veth1_vlan left promiscuous mode [ 405.245302][ T6413] device veth0_vlan left promiscuous mode [ 405.619747][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 405.630098][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 405.643789][T14403] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2702'. [ 405.655801][T14401] netlink: 'syz.4.2705': attribute type 25 has an invalid length. [ 405.663962][T14401] netlink: 'syz.4.2705': attribute type 25 has an invalid length. [ 405.673671][T14405] netlink: 'syz.4.2705': attribute type 25 has an invalid length. [ 405.682870][T14405] netlink: 'syz.4.2705': attribute type 25 has an invalid length. [ 405.709706][T14407] device syzkaller0 entered promiscuous mode [ 405.721292][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.879007][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 405.890017][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 405.911553][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 405.924487][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 405.933686][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 405.944292][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 405.975010][T14241] device veth0_vlan entered promiscuous mode [ 405.988562][T14241] device veth1_vlan entered promiscuous mode [ 406.009449][ T6962] Bluetooth: hci5: command 0x0406 tx timeout [ 406.048767][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.061537][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.091341][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.107849][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 406.153990][T14241] device veth0_macvtap entered promiscuous mode [ 406.199723][T14432] netlink: 'syz.4.2713': attribute type 2 has an invalid length. [ 406.232925][T14241] device veth1_macvtap entered promiscuous mode [ 406.299778][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.318748][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 406.332551][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 406.345153][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 406.354117][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 406.366098][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.377192][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.388561][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.409573][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 406.447856][ T6387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 406.464178][T14439] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 406.564160][T14241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.583453][T14241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.595154][T14241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.604605][T14241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.651580][ T6962] Bluetooth: hci0: command 0x0419 tx timeout [ 406.796919][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.808402][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.825603][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.862481][ T4363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.873840][ T4363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.888829][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 407.309964][T14468] netlink: 'syz.5.2724': attribute type 39 has an invalid length. [ 407.704836][T14482] __nla_validate_parse: 3 callbacks suppressed [ 407.704882][T14482] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.2728'. [ 407.747711][T14482] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2728'. [ 407.868371][T14485] netlink: 'syz.3.2729': attribute type 3 has an invalid length. [ 407.899569][T14485] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2729'. [ 408.926107][T14513] netlink: 'syz.3.2738': attribute type 29 has an invalid length. [ 408.970705][T14513] netlink: 'syz.3.2738': attribute type 29 has an invalid length. [ 409.026474][T14513] device pim6reg1 entered promiscuous mode [ 409.596964][T14507] device syzkaller0 entered promiscuous mode [ 410.060050][T14539] netlink: 'syz.3.2743': attribute type 29 has an invalid length. [ 410.068195][T14539] netlink: 'syz.3.2743': attribute type 29 has an invalid length. [ 410.288770][T14542] netlink: 'syz.3.2743': attribute type 29 has an invalid length. [ 410.393622][T14546] netlink: 'syz.0.2746': attribute type 1 has an invalid length. [ 410.430863][T14546] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2746'. [ 410.829889][T14586] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2757'. [ 410.873549][T14581] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2755'. [ 411.071502][T14586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.125693][T14586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.163765][T14586] bond0 (unregistering): Released all slaves [ 411.187330][T14601] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2757'. [ 411.246008][T14601] team0: Port device team_slave_0 removed [ 411.954028][T14625] netlink: 'syz.3.2766': attribute type 10 has an invalid length. [ 412.162777][T14635] FAULT_INJECTION: forcing a failure. [ 412.162777][T14635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.250277][T14635] CPU: 1 PID: 14635 Comm: syz.0.2770 Not tainted syzkaller #0 [ 412.257773][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 412.267834][T14635] Call Trace: [ 412.271110][T14635] [ 412.274041][T14635] dump_stack_lvl+0x188/0x250 [ 412.278729][T14635] ? show_regs_print_info+0x20/0x20 [ 412.283938][T14635] ? load_image+0x410/0x410 [ 412.288453][T14635] ? __lock_acquire+0x7b50/0x7b50 [ 412.293487][T14635] should_fail+0x383/0x4b0 [ 412.297918][T14635] _copy_to_user+0x2e/0x130 [ 412.302426][T14635] simple_read_from_buffer+0xe3/0x150 [ 412.307813][T14635] proc_fail_nth_read+0x1a6/0x220 [ 412.312850][T14635] ? proc_fault_inject_write+0x310/0x310 [ 412.318494][T14635] ? fsnotify_perm+0x254/0x560 [ 412.323265][T14635] ? proc_fault_inject_write+0x310/0x310 [ 412.328903][T14635] vfs_read+0x2ff/0xd50 [ 412.333070][T14635] ? __lock_acquire+0x7b50/0x7b50 [ 412.338103][T14635] ? kernel_read+0x1e0/0x1e0 [ 412.342715][T14635] ? mutex_lock_nested+0x17/0x20 [ 412.347665][T14635] ? __fdget_pos+0x2bf/0x370 [ 412.352255][T14635] ? ksys_read+0x70/0x260 [ 412.356592][T14635] ksys_read+0x153/0x260 [ 412.360845][T14635] ? vfs_write+0xd70/0xd70 [ 412.365268][T14635] ? lockdep_hardirqs_on+0x94/0x140 [ 412.370472][T14635] do_syscall_64+0x4c/0xa0 [ 412.374881][T14635] ? clear_bhb_loop+0x30/0x80 [ 412.379550][T14635] ? clear_bhb_loop+0x30/0x80 [ 412.384229][T14635] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 412.390112][T14635] RIP: 0033:0x7f7430d0398e [ 412.394510][T14635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.414200][T14635] RSP: 002b:00007f742ef9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.422609][T14635] RAX: ffffffffffffffda RBX: 00007f742ef9b6c0 RCX: 00007f7430d0398e [ 412.430567][T14635] RDX: 000000000000000f RSI: 00007f742ef9b0a0 RDI: 0000000000000006 [ 412.438526][T14635] RBP: 00007f742ef9b090 R08: 0000000000000000 R09: 0000000000000000 [ 412.446484][T14635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.454448][T14635] R13: 00007f7430fcb038 R14: 00007f7430fcafa0 R15: 00007ffdbc812618 [ 412.462417][T14635] [ 412.681293][T14651] netlink: 'syz.2.2774': attribute type 3 has an invalid length. [ 412.829383][T14651] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2774'. [ 413.403576][T14670] netlink: 144308 bytes leftover after parsing attributes in process `syz.4.2778'. [ 413.730377][T14656] netlink: 'syz.0.2775': attribute type 10 has an invalid length. [ 413.738377][T14656] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2775'. [ 413.859969][T14682] netlink: 'syz.5.2781': attribute type 2 has an invalid length. [ 413.880168][T14682] netlink: 'syz.5.2781': attribute type 1 has an invalid length. [ 413.926208][T14682] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.2781'. [ 414.128283][T14694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2786'. [ 414.187557][T14696] netlink: 'syz.2.2784': attribute type 41 has an invalid length. [ 414.653699][T14737] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.2794'. [ 414.807603][T14743] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2799'. [ 414.877565][T14743] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2799'. [ 414.909193][T14743] device dummy0 entered promiscuous mode [ 414.964655][T14743] bridge0: port 2(dummy0) entered blocking state [ 414.998193][T14743] bridge0: port 2(dummy0) entered disabled state [ 415.040957][T14743] bridge0: port 2(dummy0) entered blocking state [ 415.047525][T14743] bridge0: port 2(dummy0) entered forwarding state [ 415.069820][T14749] IPv6: Can't replace route, no match found [ 415.232431][T14751] device syzkaller0 entered promiscuous mode [ 417.413663][T14783] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2808'. [ 417.762775][T14809] device wlan1 entered promiscuous mode [ 418.065124][ T4198] bridge0: port 3(syz_tun) entered disabled state [ 418.103644][ T4198] device syz_tun left promiscuous mode [ 418.109206][ T4198] bridge0: port 3(syz_tun) entered disabled state [ 418.172076][T14827] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2819'. [ 418.286207][T14821] chnl_net:caif_netlink_parms(): no params data found [ 418.346009][T14836] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2821'. [ 418.381063][T14836] netlink: zone id is out of range [ 418.387039][T14836] netlink: zone id is out of range [ 418.392577][T14836] netlink: zone id is out of range [ 418.398173][T14836] netlink: zone id is out of range [ 418.404558][T14836] netlink: zone id is out of range [ 418.410620][T14836] netlink: zone id is out of range [ 418.418834][T14836] netlink: zone id is out of range [ 418.427433][T14836] netlink: zone id is out of range [ 418.454753][T14836] netlink: zone id is out of range [ 418.489728][T14836] netlink: zone id is out of range [ 418.531604][T14821] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.563136][T14821] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.563946][T14849] validate_nla: 3 callbacks suppressed [ 418.563956][T14849] netlink: 'syz.3.2823': attribute type 27 has an invalid length. [ 418.586349][T14849] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2823'. [ 418.587008][T14850] netlink: 'syz.0.2822': attribute type 3 has an invalid length. [ 418.608215][T14821] device bridge_slave_0 entered promiscuous mode [ 418.658609][T14821] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.674092][T14821] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.708848][T14850] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2822'. [ 418.724685][T14821] device bridge_slave_1 entered promiscuous mode [ 419.015868][T14821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.048860][T14821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.122212][T14821] team0: Port device team_slave_0 added [ 419.152352][T14821] team0: Port device team_slave_1 added [ 419.212437][T14821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.229362][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.299327][T14821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.346735][T14821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.359740][T14821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.439680][T14821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.743458][T14821] device hsr_slave_0 entered promiscuous mode [ 419.751180][T14821] device hsr_slave_1 entered promiscuous mode [ 419.767062][T14821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.782540][T14821] Cannot create hsr debugfs directory [ 420.089471][ T6948] Bluetooth: hci3: command 0x0409 tx timeout [ 420.261629][T14821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.312492][T14899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2835'. [ 420.400760][T14821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.579242][T14821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.703894][T14821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.123913][T14919] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2842'. [ 421.154721][T14821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.188892][T14821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.159449][ T7752] Bluetooth: hci3: command 0x041b tx timeout [ 423.927373][T14821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 424.032539][T14821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 424.239462][ T7750] Bluetooth: hci3: command 0x040f tx timeout [ 424.250187][T14934] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.2847'. [ 424.272661][T14934] netlink: 'syz.0.2847': attribute type 3 has an invalid length. [ 424.306624][T14934] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2847'. [ 424.311620][T14821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.429820][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 424.447253][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.448556][T14939] netlink: 'syz.5.2849': attribute type 3 has an invalid length. [ 424.469069][T14939] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2849'. [ 424.480494][T14821] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.511633][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 424.520606][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 424.529087][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.536193][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.559065][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 424.587410][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 424.601843][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 424.612084][ T1290] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.619143][ T1290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.627566][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 424.637249][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 424.646678][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 424.667602][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 424.693681][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.727450][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 424.750439][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 424.775725][T14821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.808295][T14821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.839056][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.861717][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.876880][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.895976][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.911796][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.116031][T14972] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2853'. [ 425.364159][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 425.371858][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 425.393441][T14821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.832754][T14990] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2856'. [ 425.883363][T14990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2856'. [ 426.017339][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 426.031543][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.098452][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.116975][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.135680][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.157734][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.172393][T14821] device veth0_vlan entered promiscuous mode [ 426.215794][T14821] device veth1_vlan entered promiscuous mode [ 426.262791][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 426.280786][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 426.294320][T14821] device veth0_macvtap entered promiscuous mode [ 426.308129][T14821] device veth1_macvtap entered promiscuous mode [ 426.319465][ T7755] Bluetooth: hci3: command 0x0419 tx timeout [ 426.342575][T14821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.356811][T14821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.368519][T14821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.380873][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 426.401455][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 426.440761][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 426.459365][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 426.470239][T14821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.492623][T14821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.502894][T14821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.531979][T14821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.557781][T14821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.588601][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 426.622318][ T6413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 426.664993][T14821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.688081][T14821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.715736][T14821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.733370][T14821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.773245][T15005] netlink: 'syz.3.2860': attribute type 3 has an invalid length. [ 426.791332][T15005] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2860'. [ 426.898873][T15005] device wlan1 left promiscuous mode [ 427.104975][ T6413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.141621][ T6413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.167307][ T1277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 427.235962][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.266932][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.281691][ T1290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 428.084167][T15033] netlink: 'syz.0.2868': attribute type 22 has an invalid length. [ 428.114853][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2868'. [ 428.420890][T15048] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2872'. [ 429.535547][T15062] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2876'. [ 430.254808][T15064] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2877'. [ 430.269245][T15064] netlink: 'syz.0.2877': attribute type 1 has an invalid length. [ 430.277703][T15064] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2877'. [ 430.393160][T15074] netlink: 'syz.2.2881': attribute type 10 has an invalid length. [ 430.437661][ T6387] device hsr_slave_0 left promiscuous mode [ 430.455770][ T6387] device hsr_slave_1 left promiscuous mode [ 430.483255][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.491296][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.506267][ T6387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.516740][ T6387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.524685][ T6387] bridge0: port 4(hsr0) entered disabled state [ 430.532314][ T6387] device bridge_slave_1 left promiscuous mode [ 430.538521][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.546721][ T6387] device bridge_slave_0 left promiscuous mode [ 430.552914][ T6387] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.269791][ T6387] team0 (unregistering): Port device team_slave_1 removed [ 431.448402][T15078] netlink: 'syz.2.2882': attribute type 16 has an invalid length. [ 431.457353][T15078] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2882'. [ 431.466493][T15080] netlink: 'syz.3.2883': attribute type 12 has an invalid length. [ 431.474781][T15080] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2883'. [ 431.484482][T15081] netlink: 'syz.2.2882': attribute type 10 has an invalid length. [ 431.492723][T15081] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2882'. [ 431.509166][T15083] netlink: 'syz.2.2882': attribute type 10 has an invalid length. [ 431.518493][T15083] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2882'. [ 431.532838][T15085] netlink: 'syz.2.2882': attribute type 10 has an invalid length. [ 431.541059][T15085] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2882'. [ 431.597827][T15102] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2886'. [ 431.616493][T15102] tap0: tun_chr_ioctl cmd 1074025680 [ 432.699859][T15114] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2889'. [ 432.758578][T15111] netlink: 'syz.0.2899': attribute type 10 has an invalid length. [ 433.217895][T15111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.257028][T15111] team0: Port device batadv0 added [ 435.562182][T15138] netlink: 'syz.2.2898': attribute type 25 has an invalid length. [ 435.623839][T15138] netlink: 'syz.2.2898': attribute type 9 has an invalid length. [ 435.675719][T15138] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2898'. [ 436.954153][T15257] device syzkaller0 entered promiscuous mode [ 436.967846][T15261] delete_channel: no stack [ 437.272266][T15280] netlink: 'syz.3.2921': attribute type 21 has an invalid length. [ 437.297375][T15280] netlink: 'syz.3.2921': attribute type 1 has an invalid length. [ 437.307691][T15280] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.2921'. [ 437.322199][T15280] netlink: 'syz.3.2921': attribute type 11 has an invalid length. [ 437.369239][T15280] netlink: 'syz.3.2921': attribute type 2 has an invalid length. [ 437.395491][T15280] netlink: 198236 bytes leftover after parsing attributes in process `syz.3.2921'. [ 437.466079][T15294] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.2926'. [ 437.506090][T15294] net_ratelimit: 161 callbacks suppressed [ 437.506102][T15294] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 437.591819][T15305] netlink: 192436 bytes leftover after parsing attributes in process `syz.5.2926'. [ 437.621348][T15305] openvswitch: netlink: Key 0 has unexpected len 7424 expected 0 [ 437.695457][T15311] netlink: 'syz.3.2928': attribute type 21 has an invalid length. [ 437.801456][T15311] IPv6: NLM_F_CREATE should be specified when creating new route [ 437.847308][T15311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 437.854638][T15311] IPv6: NLM_F_CREATE should be set when creating new route [ 437.861879][T15311] IPv6: NLM_F_CREATE should be set when creating new route [ 438.224498][T15332] netlink: 'syz.4.2935': attribute type 3 has an invalid length. [ 438.242752][T15332] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2935'. [ 438.446236][T15333] netlink: 'syz.4.2935': attribute type 21 has an invalid length. [ 438.499506][T15333] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2935'. [ 438.528964][T15333] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2935'. [ 438.571500][T15334] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.2935'. [ 438.688921][T15338] netlink: 'syz.3.2937': attribute type 39 has an invalid length. [ 438.819657][T15350] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2941'. [ 438.895634][T15353] team0: Device wg1 is of different type [ 439.382303][T15376] delete_channel: no stack [ 439.648394][T15407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.699097][ C0] [ 439.699105][ C0] ================================ [ 439.699110][ C0] WARNING: inconsistent lock state [ 439.699126][ C0] syzkaller #0 Not tainted [ 439.699134][ C0] -------------------------------- [ 439.699138][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 439.699143][ C0] syz.2.2958/15412 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 439.699160][ C0] ffff88807a40fa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8e/0x620 [ 439.699201][ C0] {INITIAL USE} state was registered at: [ 439.699207][ C0] lock_acquire+0x19e/0x400 [ 439.699224][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 439.699239][ C0] trie_update_elem+0xb9/0xc10 [ 439.699252][ C0] bpf_map_update_value+0x57c/0x650 [ 439.699267][ C0] map_update_elem+0x603/0x760 [ 439.699283][ C0] __sys_bpf+0x46b/0x6f0 [ 439.699294][ C0] __x64_sys_bpf+0x78/0x90 [ 439.699306][ C0] do_syscall_64+0x4c/0xa0 [ 439.699320][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.699334][ C0] irq event stamp: 988 [ 439.699339][ C0] hardirqs last enabled at (987): [] ___slab_alloc+0xccd/0xdd0 [ 439.699357][ C0] hardirqs last disabled at (988): [] exc_debug+0x6e/0x130 [ 439.699375][ C0] softirqs last enabled at (930): [] bpf_prog_load+0x10ee/0x14e0 [ 439.699403][ C0] softirqs last disabled at (928): [] bpf_ksym_add+0x28/0x330 [ 439.699420][ C0] [ 439.699420][ C0] other info that might help us debug this: [ 439.699424][ C0] Possible unsafe locking scenario: [ 439.699424][ C0] [ 439.699428][ C0] CPU0 [ 439.699431][ C0] ---- [ 439.699433][ C0] lock(&trie->lock); [ 439.699443][ C0] [ 439.699445][ C0] lock(&trie->lock); [ 439.699453][ C0] [ 439.699453][ C0] *** DEADLOCK *** [ 439.699453][ C0] [ 439.699456][ C0] no locks held by syz.2.2958/15412. [ 439.699462][ C0] [ 439.699462][ C0] stack backtrace: [ 439.699466][ C0] CPU: 0 PID: 15412 Comm: syz.2.2958 Not tainted syzkaller #0 [ 439.699481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 439.699489][ C0] Call Trace: [ 439.699494][ C0] <#DB> [ 439.699499][ C0] dump_stack_lvl+0x188/0x250 [ 439.699514][ C0] ? show_regs_print_info+0x20/0x20 [ 439.699530][ C0] ? print_usage_bug+0x42a/0x690 [ 439.699543][ C0] ? verify_lock_unused+0x15/0x140 [ 439.699561][ C0] lock_acquire+0x2c3/0x400 [ 439.699578][ C0] ? trie_delete_elem+0x8e/0x620 [ 439.699594][ C0] ? read_lock_is_recursive+0x10/0x10 [ 439.699610][ C0] ? look_up_lock_class+0x71/0x110 [ 439.699627][ C0] ? verify_lock_unused+0x15/0x140 [ 439.699645][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 439.699659][ C0] ? trie_delete_elem+0x8e/0x620 [ 439.699673][ C0] ? _raw_spin_lock+0x40/0x40 [ 439.699687][ C0] ? read_lock_is_recursive+0x10/0x10 [ 439.699706][ C0] trie_delete_elem+0x8e/0x620 [ 439.699724][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x708 [ 439.699739][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 439.699760][ C0] ? perf_event_switch_output+0x730/0x730 [ 439.699779][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 439.699794][ C0] __perf_event_overflow+0x35f/0x550 [ 439.699812][ C0] perf_bp_event+0x276/0x320 [ 439.699827][ C0] ? perf_trace_lock_acquire+0x341/0x3f0 [ 439.699842][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 439.699856][ C0] ? perf_trace_lock+0xe4/0x390 [ 439.699882][ C0] ? rcu_lock_acquire+0x9/0x30 [ 439.699898][ C0] ? read_lock_is_recursive+0x10/0x10 [ 439.699916][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 439.699933][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 439.699952][ C0] notify_die+0x141/0x1a0 [ 439.699967][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 439.699985][ C0] ? exc_debug+0x6e/0x130 [ 439.699998][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 439.700013][ C0] notify_debug+0x20/0x30 [ 439.700029][ C0] exc_debug+0xcf/0x130 [ 439.700044][ C0] asm_exc_debug+0x1a/0x40 [ 439.700059][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 439.700078][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 439.700090][ C0] RSP: 0018:ffffc900038c7d10 EFLAGS: 00050202 [ 439.700102][ C0] RAX: ffffffff83e8f101 RBX: 0000000000000fff RCX: 0000000000000cff [ 439.700113][ C0] RDX: 0000000000000fff RSI: 0000200000000340 RDI: ffff888043078300 [ 439.700124][ C0] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000007 [ 439.700132][ C0] R10: dffffc0000000000 R11: ffffed100860f1ff R12: 00007ffffffff000 [ 439.700144][ C0] R13: 000020000000103f R14: ffff888043078000 R15: 0000200000000040 [ 439.700158][ C0] ? _copy_from_user+0xd1/0x170 [ 439.700175][ C0] [ 439.700179][ C0] [ 439.700183][ C0] _copy_from_user+0xfa/0x170 [ 439.700198][ C0] map_update_elem+0x5a1/0x760 [ 439.700215][ C0] __sys_bpf+0x46b/0x6f0 [ 439.700231][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 439.700254][ C0] __x64_sys_bpf+0x78/0x90 [ 439.700269][ C0] do_syscall_64+0x4c/0xa0 [ 439.700282][ C0] ? clear_bhb_loop+0x30/0x80 [ 439.700297][ C0] ? clear_bhb_loop+0x30/0x80 [ 439.700313][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 439.700329][ C0] RIP: 0033:0x7f95e2bfc159 [ 439.700340][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.700352][ C0] RSP: 002b:00007f95e0e54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.700367][ C0] RAX: ffffffffffffffda RBX: 00007f95e2e83fa0 RCX: 00007f95e2bfc159 [ 439.700378][ C0] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000002 [ 439.700400][ C0] RBP: 00007f95e2c9306b R08: 0000000000000000 R09: 0000000000000000 [ 439.700410][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.700419][ C0] R13: 00007f95e2e84038 R14: 00007f95e2e83fa0 R15: 00007fffeebd5888 [ 439.700436][ C0] [ 440.284254][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.290562][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.389400][T15406] team0: Device gre0 is of different type