last executing test programs: 12m26.576904333s ago: executing program 2 (id=3): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x0]}}, 0x0, 0x1b, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005"], 0x0, 0x29}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x21, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000008c0)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex=r12, r11, 0x13, 0x202c, 0x0, @void, @void, @value=r13}, 0x20) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m25.263848235s ago: executing program 2 (id=5): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8fea4a1190015000600142603600e120800110000810401040016000a0010400500", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af4ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4, 0x4000000}, 0x8, 0x10, &(0x7f0000000040)={0x200000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8c10, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') r2 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcff11997af0ce6ae066505acb612f691f3bd3508abca1be6eeb89c44ebb37392dc2bdb", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000580)=""/95}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x38b137f9a619bb39, 0x14, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="0d8baf0670f8184f78de80c5c7932f87f2be59c438b1c44ed4f945f09455cfec4ed82e73a1b8c6abba338e07f7b31103b839ae30bec02f2ffbc469f7d412f3e0568d14065d7c2b50ac5c532eac5c8794a08ac2550ccf2d0da95c1975dbc02874487cd0f2536919bf016fb5af017dab70d24e46f3c6912fd00628635aaf21e7df174e65bd9ab5061d9723a69f22d41d3d9b5260236399d22088a3c358bff7563b7857bb333fb7bdd8304539", 0xab}, {&(0x7f0000000540)="ad4a9ce733870fd272a9c4df9d432ff7d5a7ebef51d2b114bce6947b13d35d524be8c5bd4403b0f6525bcc271ec05e59da8b", 0x32}, {&(0x7f0000000680)="ac39fe403a3010d2db9a453825c0f155843b18a71ac60dfb06d799aa195d95d5b504f808", 0x24}, {&(0x7f00000006c0)="7e2c0b2e139654656eb930fb13226ccf611a247e8d1332b1b65c22386164fd9769bbdfd36cc403841b88885c4d56786be5e21e7819b945c2ae7bbac2e939c91ebdc11d6f2fc4ef334d6293de8e3d49d0f3975e5679b15f099b121ea96af452a64fb480e58ed033c21f8e4b2973c480550d8ddee1aeba678f3553f2d3ed36e379dd447bb83d37e508c2d2de86d0370019a4154c07edd1b017d48b5e55", 0x9c}], 0x4, &(0x7f0000001880)=[{0x90, 0x29, 0x5, "e4e97a6edb44d345a457a7cbdb3e0201e02b87a151f559bd771384b11fed11d578a48ad0ed2eb90242fc226c3f9030a9478a3cfebdf70bcf651949365849c27bf54206a1cb5f38b9fcc72e9dadf15d82e8bb8a1c1b777cdd73c9831f26ea2c66f11f2862d5455341381fe3d50d13dfa79750582c5f716f1c87b90679c0"}, {0xc8, 0x10a, 0x7fffffff, "65a045c53ff2a5e7b66bbb7b1a7f8e3a665e4375d06e025bb355e1e3674c8f3e73621a3d509f39bd5aab2e071bca95bb2a8dde6c70b8ced3c3e3f83eee9897e30950d1dca86136c04711d52ef70e5c0441f0e567f315bff4132102e8fa4c70b1566e9893c5f90e204e0ad77d9353485171d49c8e5b726ce05b8c63fddfdd5b58d0b58c6a5913c3d14e033a6f4bf983472202189d2a85f6c7715a57a87959b36c99fa63c96d52cf702daaa76711d5592516"}, {0x70, 0x1, 0x6, "8660bb638e5d6f84afb005f5bbacffded1109958df2f7579399425e491bb2d34e0fb15bf0d6b9f2a0a163cff1705dc0ff65159269e8b6bcb9aca57e2578ea3b3f88690307ae194910fd52c1a3e0707f714578886a3f79ec605b79577"}, {0x88, 0x109, 0x3ff, "a10aa6230654bc22fe80e5789a6d87f86fa3be586ab96ece9bd67de4ba3ab7a1101d2715f00c2547f5d5585376b77514d561c4eabf1d94684d9adcf17a7d5aa92a29a19179b6fd5bcc06b80d8d21863387c6125ca1fedd47204d87eba6a7ea86fb98f6858b8ac580b5a32e91db3e5f85bf2d78a20ffac2c7"}], 0x250}, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x60000002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x14) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002cc0)={@cgroup, 0xffffffffffffffff, 0x1d, 0x2, r4}, 0x20) r6 = perf_event_open$cgroup(&(0x7f0000000180)={0x2, 0x80, 0x98, 0x9, 0xa, 0x9, 0x0, 0x100000002, 0x10220, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x1}, 0x2000, 0x7, 0x0, 0x0, 0x2, 0x7, 0x3, 0x0, 0x906}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000200)=0x5) 12m24.591161673s ago: executing program 3 (id=4): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r0, &(0x7f0000000a00)={&(0x7f00000004c0)=@nfc_llcp, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)=""/84, 0x54}, {&(0x7f00000008c0)=""/183, 0xb7}], 0x2, &(0x7f00000009c0)=""/27, 0x1b}, 0x40010201) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)={r0, r3}) sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d00e8030000a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000006c0)=r5}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup=r0, 0x2, 0x1, 0x1, &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r7, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x240}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r9, 0x1, 0x34, &(0x7f0000000200)=r10, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@ifindex=r8, r3, 0x29, 0x10, r5, @void, @value=r5, @void, @void, r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000040)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f0000000100)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x82, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x20, 0xffffffff, 0x0, 0x30a, 0x8b041, r4, 0xbb, '\x00', r11, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) 12m24.49812879s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc600d0003000a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 12m24.486435382s ago: executing program 0 (id=1): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x4099, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848030000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0xcc800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 12m23.910705153s ago: executing program 2 (id=6): socket$kcm(0x11, 0xa, 0x300) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x4ecb14dfdbcba6a8, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x11, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f00000000c0)="a4795d5b392a64edf5b7cbf4edc308", 0xf}], 0x2}, 0x4804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x3fc2bda6, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b"], 0x0}, 0x90) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000780)={&(0x7f0000000000), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000180)=""/185, 0xb9}, {&(0x7f0000000240)=""/167, 0xa7}, {&(0x7f0000000300)=""/147, 0x93}, {&(0x7f00000003c0)=""/241, 0xf1}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/85, 0x55}, {&(0x7f0000000640)=""/2, 0x2}], 0x7, &(0x7f0000000740)}, 0x40000020) 12m23.293089693s ago: executing program 3 (id=7): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x45004400, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x40a10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0xffffffffffffec23, 0x0, 0x7, 0x1c3b0979, 0x0, 0x10, 0x0, 0x0, 0x0, 0x959}, 0xffffffffffffffff, 0x0, r1, 0x8) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 12m23.107195585s ago: executing program 0 (id=8): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x33e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x52, 0x0, 0x0, 0x9, 0x0, 0x6b6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x9901, 0xc8, 0xffffffff, 0x0, 0x0, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x2, 0x8000, 0xc4, 0x20100, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000e50309dd29000100000077ad838f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000180)={'veth0_macvtap\x00', 0x400}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000003000000020000000300000000000000", @ANYRES32, @ANYBLOB="0300000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="09400000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000a40)=[{}], 0x8, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x8c, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0x15, &(0x7f00000008c0)=ANY=[@ANYRESDEC=r9, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa20000000000000702", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', r8, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f00000019c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r4}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a00)={0x1}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000008000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001c7a00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z^\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000030000000200"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001ac0)={0x1}, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'ip6tnl0\x00', @broadcast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x68, &(0x7f00000009c0)=r13, 0x4) 12m22.937227585s ago: executing program 2 (id=9): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x40000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000400000002000000000000110300000000000000000000c03d00000000020100000002000000000000080200000000005f006d479f38241e625fa2dbcf145aef8710851ff631c2a2c4ea468fca3e8da837d653403658f0c3647ce99ad39cf0fe412983614453c9bd10110d531dd0276a1b929c9eda718708cdcf0d9a50981ac2f4aacca138889e35a22747080618a2a15d69e032f292826ddf"], 0x0, 0x44}, 0x20) r0 = perf_event_open(&(0x7f0000001100)={0x4, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x8, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x8, 0xeb, 0x6, 0x9, 0x0, 0x6, 0x10220, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xffffffffffffffbc, 0x2}, 0x90020, 0x5, 0x1, 0x1c, 0x24, 0x408, 0x1, 0x0, 0x2, 0x0, 0x20008}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000005, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cb, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x38, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000200000000005875e470300085000000a800000085000000d00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0x2, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188006ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 12m22.046822682s ago: executing program 1 (id=10): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu==0||!') bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x9a, 0x7}, 0x8000, 0x82, 0xffffff81, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m21.928555943s ago: executing program 0 (id=11): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x28, 0x1, 0x50, 0x0, 0x0, 0x8, 0x1029, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x8001, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000003c06510160000000000400005000200000000be9d00090000000000184000000200001a00001200000000000500fcff000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 12m21.420465653s ago: executing program 2 (id=12): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xce}, @ldst={0x3, 0x1, 0x1, 0x8, 0x2, 0x50, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}, @exit, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff}, @ldst={0x0, 0x0, 0x4, 0x5, 0x3, 0xf8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x8, 0xfffff801, 0x9}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000740)=[{0x2, 0x4, 0x7, 0x3}, {0x2, 0x5, 0x9, 0x1}, {0x3, 0x4, 0x2, 0x4}, {0x2, 0x5, 0xf, 0xb}, {0x1, 0x3, 0x3, 0x8}, {0x5, 0x4, 0x0, 0x5}, {0x4, 0x3, 0x2, 0xa}, {0x1, 0x2, 0x2, 0x8}], 0x10, 0x8}, 0x94) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000980), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r4, 0x10, 0x0, 0x363253ea, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r8, 0xffffffffffffffff, 0x20, 0x18, 0x0, @void, @value, @void, @void, r7}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a00)='syz0\x00', 0x200002, 0x0) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x4, &(0x7f0000000b00)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40}], &(0x7f0000000b40)='GPL\x00', 0x47, 0x4, &(0x7f0000000b80)=""/4, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xf8e9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@cgroup=r11, r2, 0x1d, 0x8, r3, @void, @value=r12, @void, @void, r7}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r15, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x8, 0x3, 0x1, 0x5, 0x0, 0x2, 0x400, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x9, 0x2}, 0x101000, 0x1, 0x5, 0x3, 0x5, 0x8d70, 0xf001, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$unix(r6, &(0x7f0000001380)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xfffffffffffffe5e, &(0x7f0000000dc0)=[{&(0x7f0000000300)="95be079bb5f0b32e2e0c2c323cbce77d45f5d640353eb5a8fb7a0289005ac537ac8677ebfcc9d0a0487c49964069e1e822a5c7", 0x33}, {&(0x7f00000004c0)="a4c3d809cd31c0", 0x7}, {&(0x7f0000000d00)="98d35106c61a57078c08fb73efd0c46e72db5bdf59ff3190caf787c3627e01683b0079e298428e77a0ff1564dd80e572818e10711b12a3d16a648f573a5c75ca33deb915b038b53c7621776d6138cb3cb0c269ecdc5db073a1409b428219af287eb148f53525da72ba3da794ab37006ab35ac47546b034c32a9f4d34c42b5c0a81ca5661c51cd26e5b0a44914c431ded8f7d54b02cf29d840b3a9ca1de46728a948451256df8bfc4c2b7d45ac399215c5573850cc53c33", 0xb7}], 0x3, &(0x7f0000001240)=[@rights={{0x2c, 0x1, 0x1, [r10, r5, r14, r1, r3, r2, r9]}}, @cred={{0x0, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r9]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}], 0x108, 0x800}, 0x14) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {&(0x7f0000000f40)=""/213, 0xd5}], 0x2}, 0x40012100) 12m21.328554289s ago: executing program 0 (id=13): ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0xc1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="fa0a00ff8020404b040200000000000000aaba0000020000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x59, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20442, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x111000, 0x0, 0x3, 0x0, 0x6, 0x7effffff, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000db8843f6f784a457f5a014daf04ac23b357a094e8107f9ae5f59131748719c3a22bde9b31688f947e59499d2d2fdb54d4b6e7fee51b809d393b00088077b61b2fd0b6783c877099642f95cbb7c6b6e99b2c3232177f601000000da41ad8546c6bd21b340db9ce1dd27a54cb2eccbc02ea676c3a8d24b703c5355dd2468576d110da2ac0e81c6867b03a872dc3c0251cd4d196d007256593f851686", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="010000000300"/28], 0x50) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f0000000240)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a7402", 0x1b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc6010000500", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="97d9deabea3520180000000000000067611198e25584ef8eca95c7a85d5e0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a00020005", 0x1d}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xf, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x419, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @printk={@lu}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}]}, &(0x7f00000002c0)='syzkaller\x00', 0xffffffdd, 0xe2, &(0x7f0000000500)=""/226, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r0, r5, r3, r3, r0, r5, r2], &(0x7f0000000780), 0x10, 0x3}, 0x94) 12m21.247331703s ago: executing program 1 (id=14): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001000000", @ANYRESDEC=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES8=r0, @ANYBLOB="00000000000000000000000000000000000000010001000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f00000001c0)=""/155}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000911909000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f00000002c0)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000800)="dfb3c0", 0x3}], 0x1}, 0x4001) close(r2) 12m20.107012354s ago: executing program 0 (id=15): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_clone(0xc0400, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd72, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007c11000000000000731a0eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r7 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x100000000, 0x12) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ea05080000000000000000000000b989a7f60ee033743dc32e786c669113e8afeb8fad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000ff900000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00e90800000000000000000007010000f8ffffffb702000008000000b7030000000000008500000000000000950003000000000033bf82144c01a46ce68ec13b45db"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 12m20.021393249s ago: executing program 1 (id=16): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x3}, 0x100088, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, &(0x7f0000000280)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f00000001c0)='./file0\x00', r5}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m19.983789936s ago: executing program 2 (id=17): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x4099, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848030000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0xcc800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 12m2.742993357s ago: executing program 32 (id=15): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_clone(0xc0400, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x5, 0x10102, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x6, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd72, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007c11000000000000731a0eff000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r7 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x100000000, 0x12) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000ea05080000000000000000000000b989a7f60ee033743dc32e786c669113e8afeb8fad", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000ff900000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00e90800000000000000000007010000f8ffffffb702000008000000b7030000000000008500000000000000950003000000000033bf82144c01a46ce68ec13b45db"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) 12m2.422451083s ago: executing program 33 (id=16): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x3}, 0x100088, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, 0x0, &(0x7f0000000280)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f00000001c0)='./file0\x00', r5}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000002100)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03030180b7060000000000000081005d11", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 12m2.121194376s ago: executing program 34 (id=17): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x4099, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848030000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0xcc800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e0000001000818803b62aa73772cc9f1ba1f848430000005e1446ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 12m0.869134197s ago: executing program 35 (id=7): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x45004400, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x40a10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400, 0xffffffffffffec23, 0x0, 0x7, 0x1c3b0979, 0x0, 0x10, 0x0, 0x0, 0x0, 0x959}, 0xffffffffffffffff, 0x0, r1, 0x8) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 4.456158978s ago: executing program 6 (id=3145): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0xd384ed8852b2f03d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/mnt\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 4.298041164s ago: executing program 6 (id=3148): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001c40)) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000200)="97", 0x1}], 0x1}, 0xc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) setsockopt$sock_attach_bpf(r0, 0x0, 0xd, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socketpair(0x8, 0x80000, 0x7ff, &(0x7f00000001c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) 4.2019827s ago: executing program 4 (id=3150): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) write$cgroup_type(r0, &(0x7f0000000040), 0x9) (async, rerun: 32) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="089bc887e4e75b0916e8861cc888993edd70de87475b9b5a0d817ba0d433751fe1825ea3a65db09ba564", 0x2a}, {&(0x7f0000000100)="24666e340bb1ecc8569897dea8da7c5012c0b3d2a53b3d5bd6a67d0a3929c8fe13a60db03dcf3b90f46b695a39f038eae6c08cfda73c013ee1affdc773a2a584b822aee73dfd5bc868211ff1", 0x4c}], 0x2, &(0x7f00000001c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x91}}], 0x18}, 0x4040042) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (rerun: 64) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x6, [@restrict={0x7, 0x0, 0x0, 0xb, 0x1}, @enum64={0x9, 0x6, 0x0, 0x13, 0x1, 0x5, [{0xb, 0x80, 0x8}, {0x2, 0x3ff, 0x4}, {0x7, 0x7, 0x3}, {0x3, 0x0, 0x2}, {0xd, 0x7, 0x2}, {0x9, 0x0, 0x800}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x200}}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x1, 0x8}, @restrict={0x2}]}, {0x0, [0x5f, 0x5f, 0x85daba000db695f4, 0x2e]}}, &(0x7f0000000380)=""/96, 0xca, 0x60, 0x1, 0x4, 0x10000, @value=r0}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r1, 0x20, &(0x7f0000000540)={&(0x7f0000000440)=""/25, 0x19, 0x0, &(0x7f0000000480)=""/144, 0x90}}, 0x10) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0)={r0}, 0x8) recvmsg(r3, &(0x7f0000000840)={&(0x7f0000000600)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f0000000740)=""/60, 0x3c}], 0x2, &(0x7f00000007c0)=""/104, 0x68}, 0x10042) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r0, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=r2, 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x1, 0x0, r3, 0x100, '\x00', r4, r5, 0x2, 0x4, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r3, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001cc0)={0x6, 0x12, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x0, 0xc, 0x6, 0x9, 0x100, 0xfe74e2e08094fbb7}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000ac0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000b00)=""/4096, 0x40f00, 0x59, '\x00', r4, 0x25, r3, 0x8, &(0x7f0000001b00)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001b40)={0x4, 0xb, 0x7fff, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001c40)=[r3, r3, r7, r3, r0], &(0x7f0000001c80)=[{0x3, 0x1, 0x6, 0xb}, {0x4, 0x4, 0x7, 0x3}], 0x10, 0x1ff}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={r3, 0x0, 0x0, 0x1000, &(0x7f0000001d80), &(0x7f0000001dc0)=""/4096, 0x5, 0x0, 0xbe, 0x38, &(0x7f0000002dc0)="9c8630cae2bd7e3d72d6d86109b69629cff92a5020969a12ea202d7aba0f825bc5be3baa6cda9ffb943287699ead881182209360c4c87c439111be7f1c8ec5eb58daeeeb51a5918bf0351d0c84e56becf495c8104bb28f22ba026f13d34de232d1baa0f4ac34dbcd2bfebe62caa840749a2a05227171873b590f3130757b0cf064da316acdcf3c1cdbbbf22d727e0c881132feb6242a415531eff983787e4472b48ef2c81526a0e7d581b316bb81635016f2cb1bffb904fa603cee095f3c", &(0x7f0000002e80)="f2e8db289cfef326bfe6c0196e43db83cb52d4a6fcfa4e0a350664f9786a051e43ca5e4ee364b5cc9dc08163c4d249f6463120307c1b76fe", 0x2, 0x0, 0x5}, 0x50) (async, rerun: 32) openat$cgroup_int(r3, &(0x7f0000002f40)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) (async) openat$cgroup_procs(r0, &(0x7f0000002f80)='tasks\x00', 0x2, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002fc0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, r3, 0x3, 0x4, 0x1}, 0x50) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000003040)={'team0\x00', 0x1131}) (async, rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003240)=@bpf_lsm={0x1d, 0x3, &(0x7f0000003080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffa}}, &(0x7f00000030c0)='GPL\x00', 0x6, 0x93, &(0x7f0000003100)=""/147, 0x41100, 0x20, '\x00', 0x0, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000031c0)={0x1, 0xf, 0x200}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003200)=[r3, r7, r6, r6, r6, 0xffffffffffffffff, r0, r3], 0x0, 0x10, 0x101}, 0x94) (rerun: 32) sendmsg$sock(r0, &(0x7f0000003980)={&(0x7f0000003300)=@xdp={0x2c, 0xb, r4, 0xf}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003380)="948920af869a1942f1dc128ef36aed47f5ab055aab29d26e528079f279e239c4c901c3fbd2d0d949d127644d3fde53f3eb6c231c9c650e35c9efd4f2c0173e5f507b9fa24320e597b415d134fb13e27f6e30f2933f8ef57f2e87890d745298c7fa0b3de55d9739eaad7fc04639aa543d958dc917e819", 0x76}, {&(0x7f0000003400)="4f3c215d634a0ed2e857feab8390cb50e8e8a8d5ecb12154779812d24533d6e3169f9f2b380910ae71a17cd6fc01bffbdcd0acc2e1fb3de3739479c6e25d3836e5f5aa2b0e2a3bb77830a5a49e5cf51a8130ea2a042b8f215605f2e42aebe00b890eaf1c47ea2ca69e515f6a10071f425c81e59e67d10067330c7e9ac4", 0x7d}, {&(0x7f0000003480)="7a83f2050fd89af75984d9cd6e7dc24d18c7b83b6d99e83d1e838256d1e5e758220bb812db08527ec317fe8c12a6ac364a837f3350781fc85054b0e03a4c13bba660043406643acc9ad97e43a1071ad7a01764896d2f85edee43b99ff74bd651671a50d09d77019493bd0fe1c87589048b385bfc868c77d0f36ff9eb5a862e7d401faaecf8b9f236b36bcd5b74a1064b450a31ed4b2b8a5465fa476ec62bb538aab291bd841ec538", 0xa8}, {&(0x7f0000003540)="95d367324ebf8c3b13c9f1bf1ca4d5b53e42660fcbb223b1ebd9d6a13179a8974956fc5c5d64773cf67fdc18337a35aad63370c7a5d16e4273ae5baf0174428a0d4cca26fcdf61711230fb0dc3ee6ee967b1a0ded1ab550592f7e790c843396c780d2743410c7471ecc5abdacda8e7e5ccdefe494f821caba47d92fc68c0578c5e508dde730ada6b28798125f529685c58c830b9b0ce3bb2d596bda816b6f6d51880b04aa9f239d44f88a68b1e397bcf4109543037fb98d255e4e4c30f0e9dc954b93a3cb264f50dbabee46cad99ed6838b337c7097d7eb13d364b567994ee42c9c4a35756e18e5f883feca55e5ad007336aa96bf62037ca49", 0xf9}, {&(0x7f0000003640)="06f3083e67545edfca0adfada59f048df52abf03888b5395b9d7cc008dab91eccb5a8a334c772c148e8cf95d5b3f176b2ffb9190b0d66879ab9a85d4a0418dae008a79e02d67ffc1b08e7a442f25d0af26998614cf4122ae3d9b7e8daa1b40aa7f656b44e669719bbba25718e68d35ca045dbc004fd5455d2936b7", 0x7b}, {&(0x7f00000036c0)="016353fe4d8b8329d318cb806c46b0d00cb4526db33bb6", 0x17}, {&(0x7f0000003700)="6781b9f6b313a527c44688d36d5fe8731632b3d919a79625db23349199bfc259c52de53fe427239ee4a313493dbfcba148feb4d43feecd21e29290f49a3aa0935ebe1d08e9c311632fc5977a7bdf606e118cfdb201b55513a6ce44cf7c15d85efdb6e6c365ed79b93f38d814a83a84810c0d84c03879b1996a49ada835b22ab047e55ab04b1ca19821b339a1cbfd145721f132c8871a2361df", 0x99}, {&(0x7f00000037c0)="8dd2a6a954ad36e55615324d1f9ac8ed0552dcb4beb5cb7320cbcbe114fbd2e8a7581d376c622037c94eea08dbea931ce83773716dc9d791569cda5d4f551ba9864c783c4ede5342f1bc2e6744acf506574b31a3c2a072ae1f5c2f34dd89a824bef4f079ea3ac3e0f50b7f0d2895f8c08881702d78", 0x75}], 0x8, &(0x7f00000038c0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x9c8}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0xa8}, 0x80) (async) write$cgroup_subtree(r3, &(0x7f00000039c0)={[{0x2b, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2d, 'perf_event'}, {0x2d, 'memory'}, {0x2d, 'cpuacct'}]}, 0x32) (async) recvmsg$kcm(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003a00)=""/112, 0x70}], 0x1, &(0x7f0000003ac0)=""/60, 0x3c}, 0x40000123) r9 = openat$cgroup_procs(r0, &(0x7f0000003c80)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003c40)={@fallback=r9, 0xd, 0x0, 0xa, &(0x7f0000003b40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000003b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003c00)}, 0x40) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003cc0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f0000003d00)='syz0\x00', 0x1ff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000004f40)={r8, 0x58, &(0x7f0000004ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000005040)={&(0x7f0000003d40)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000004e80)=[{&(0x7f0000003d80)="7513efac0b30bf5769d68cbeb6a108647ef205c6baa6a7afaac801aa30aec9f7579de6675aa0ce80761759f5a9f95c76831ed307cb3cbd2515df82e41e2c391dd91ee905f256ee", 0x47}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="3f5a0621ea62117da01ebc5a4977e589ae8f898d38a83dd5ab225c3902234a9acb79ded1a2239e538c1ea06dead2fa6df1ab174a04e7a13518e24c47e896d25cb72581434aee2e5e17f799798bc2ac38fa68c0ea68c69037bb0797e3d35041b7024a9c946cdbb2030d907d01d46fedfc1a", 0x71}], 0x3, &(0x7f0000004f80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x40, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x4b, [@broadcast, @multicast2, @multicast2, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0x1d}]}, @generic={0xcc, 0x9, "215d5e85798977"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x90}, 0x404d800) (async) bpf$PROG_LOAD(0x5, &(0x7f0000006380)={0x15, 0x14, &(0x7f0000005100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x5e}, @alu={0x4, 0x0, 0x3, 0xb, 0x0, 0xfffffffffffffffc, 0x8}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000051c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000005200)=""/4096, 0x100, 0x2d, '\x00', r11, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000006200)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000006240)={0x3, 0xe, 0x8, 0x7f}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000006280)=[r3, r8], &(0x7f00000062c0)=[{0x5, 0x3, 0x8, 0xa}, {0x3, 0x3, 0x0, 0xe}, {0x2, 0x4, 0x8, 0xb}, {0x4, 0x4, 0xb, 0x2}, {0x2, 0x4, 0x1, 0xc}, {0x4, 0x2, 0x2, 0x1}, {0x3, 0x4, 0x1, 0x7}, {0x5, 0x3, 0x3}, {0x0, 0x5, 0xc, 0x4}], 0x10, 0xe27}, 0x94) 3.938588364s ago: executing program 4 (id=3151): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], 0x48}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c00)=""/4024, 0xfb8}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000440)=""/197, 0xc5}], 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x67}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r4 = getpid() r5 = perf_event_open(&(0x7f00000010c0)={0x4, 0x80, 0xbc, 0x3d, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x4}, 0x8601, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x83, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r5, 0x0, 0x1, &(0x7f0000000280)='\\{\x00'}, 0x12) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xa, 0x3, 0x1, 0x52, 0x0, 0x1c2cda97, 0x43349, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8000000008, 0x9}, 0x4441, 0x3, 0x700, 0x7, 0x8, 0x3, 0x4, 0x0, 0x1, 0x0, 0x7}, r4, 0x2, r0, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r3, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8c, &(0x7f0000001c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000940)}}, 0xfffffffffffffe68) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3f) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="2b00000021200000000000003a32bbbf0f4e3e029e33b6542eb281ba7899e044f22562aeaf27f314f37350ac352147b6b6be4456bd752a67471f6fce6e805f02bfc1b1d7e53e3ca337bae980d30843a4889e7321002a0de3f10afb9c25cdad55b653485478e074403bdf05793f378c9ce601462e2a5d938b05fd3a4c5869c6e17a7be1", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x1000}) 3.802308367s ago: executing program 5 (id=3152): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffef1, 0x0, 0x18}, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x84) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r5, &(0x7f0000000180)}, 0x1a) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x54d2}, [@exit, @map_fd={0x18, 0xa, 0x1, 0x0, r2}, @generic={0x7f, 0x7, 0x9, 0x2, 0x6c8}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000380)='GPL\x00', 0x6, 0xaa, &(0x7f00000003c0)=""/170, 0x41000, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000004c0)=[r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000500)=[{0x5, 0x1, 0x2, 0xc}, {0x5, 0x5, 0x5, 0xa}, {0x2, 0x5, 0x4, 0x5}, {0x5, 0x3, 0x10, 0x9}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0x4, 0xb, 0xa}, {0x4, 0x3, 0x7, 0xa}, {0x4, 0x2, 0xa, 0xa}, {0x5, 0x2, 0x2, 0xb}, {0x0, 0x5, 0x9, 0xa}], 0x10, 0x9}, 0x94) (async) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) (async) close(r7) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000740)=""/110, 0x6e, 0x0, &(0x7f00000007c0)=""/76, 0x4c}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcc9, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50018bf3a8", 0x10}], 0x1}, 0x20040000) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r10, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r11, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@func={0xc, 0x0, 0x0, 0xc, 0x1}, @fwd={0x2}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x4, 0x7}, @restrict={0x8}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x1}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x6, [{0x4, 0x3, 0x6}, {0x1, 0x2, 0x2}, {0x3, 0x3}, {0x10, 0x3, 0x3d}]}, @restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @fwd={0x8}, @var={0x9, 0x0, 0x0, 0xe, 0x2}, @ptr={0xd, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000b80)=""/14, 0xcf, 0xe, 0x0, 0x5, 0x10000, @value=r7}, 0x28) (async) r13 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r13, 0x84, 0x22, &(0x7f0000000000)=r15, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x1f, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8e0f}}, @ldst={0x2, 0x3, 0x0, 0x4, 0xa, 0xffffffffffffffc0, 0x4}, @ldst={0x0, 0x2, 0x6, 0x0, 0x2, 0xffffffffffffffc0, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x86}, @generic={0xf9, 0xb, 0x4, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x4, 0x43, &(0x7f0000000a00)=""/67, 0x41000, 0x6, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000000c00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0x7, 0xb72, 0x7}, 0x10, 0x51a7, r9, 0x4, &(0x7f0000000c80)=[r2, r2, r2, r2, r2, r15, r2, r2], &(0x7f0000000cc0)=[{0x3, 0x3, 0x10}, {0x0, 0x3, 0x0, 0x2}, {0x3, 0x5, 0x8, 0x6}, {0x4, 0x5, 0xa, 0xb}], 0x10, 0x7}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4000, r9}, 0x18) 3.606161669s ago: executing program 5 (id=3153): r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xc29, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x9, 0x4}, {0xe, 0x1}]}, @const={0x9, 0x0, 0x0, 0xa, 0x2}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x61, 0x5f, 0x51]}}, &(0x7f0000000440)=""/200, 0x5d, 0xc8, 0x1, 0x9eac, 0x10000}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x5, 0x10001, 0x8, 0x40a00, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xe}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000050000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0x1, 0xffffffffffffffff}, 0x4) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000000180), &(0x7f00000001c0)=r12}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x69}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xae, &(0x7f0000000300)=""/174, 0x40f00, 0x1, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x5, 0xf, 0x6, 0x24}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r6, r7, r8, r9, r10, r11], 0x0, 0x10, 0x8e5}, 0x94) (async) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x8924, &(0x7f0000000080)) 3.282832133s ago: executing program 6 (id=3154): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000005c0)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='memory.swap.max\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', 0x1, 0x4000, r2}, 0x18) openat$cgroup_subtree(r1, &(0x7f0000000080), 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffffe1, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003d000b08d25a80d60f7494f90224fc605800024009000400050082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x8004) 3.222121513s ago: executing program 5 (id=3155): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x420}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x59, 0x8, 0x1, 0x6, 0x0, 0x2, 0x8000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0xffffffff00000000, 0x101}, 0x80, 0xffffffffffffff6a, 0x8000, 0x8, 0x3f, 0x7a6, 0x1, 0x0, 0x1000, 0x0, 0x3}, r2, 0x3, r0, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r4, 0x4) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], &(0x7f0000000580)=""/242, 0x46, 0xf2, 0x6, 0xfffffffd}, 0x28) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x6, 0x4, 0x0, 0xfff5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000140)='syz0\x00', 0x1ff) 3.087533295s ago: executing program 6 (id=3157): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x6, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0xfff, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07186702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6fabf707, 0x1, @perf_config_ext={0x7fffffffffffffff}, 0x0, 0xfffffffffffffffa, 0xffffff80, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048050) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b0000001801000020786c250000000000ff20207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x6d}]}, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1}, 0x16264, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x6, 0xffffffffffffffff, 0x0) 3.076740967s ago: executing program 7 (id=3158): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000950000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0x2d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x46}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x4, 0xb2, &(0x7f00000006c0)=""/178, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, r5, 0x8, &(0x7f00000007c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xa, 0xfffff0a8, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100) 2.834276758s ago: executing program 7 (id=3159): perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9fb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x8, 0x83bc}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r1, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f901", 0x11}], 0x1}, 0x0) 2.790900445s ago: executing program 4 (id=3160): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x5000) (async) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0xe, 0x0, 0x0, 0x9, 0x80c01, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000280), 0xc}, 0x0, 0x32, 0x43e1bd74, 0x2, 0x100000009, 0x85, 0x2, 0x0, 0x0, 0x0, 0x9}, r1, 0x0, r2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r4}, 0x18) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x500}, 0x57) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (rerun: 32) close(r6) (async) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r6, 0x40047451, &(0x7f00000002c0)) 1.954803764s ago: executing program 4 (id=3161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffa395, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='syzkaller\x00', 0x8000, 0x24, &(0x7f00000002c0)=""/36, 0x41100, 0xe07aa1c61858ad4f, '\x00', r3, 0x18, r7, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0xa, 0x22, 0xc}, 0x10, 0x14706, r1, 0x3, 0x0, &(0x7f0000000580)=[{0x4, 0x4, 0x4, 0x1}, {0x4, 0x2, 0x2, 0xc}, {0x0, 0x1, 0x7, 0x4}], 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.807371399s ago: executing program 5 (id=3162): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000ac0)=""/129, 0x81}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000003280)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f00000059c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/102, 0x66}], 0x10}, 0x2122) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x47) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0b0000000500000001b19be2208e1a0001000900000001ab6454362e32663a28b60000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)=0x10000) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000001e00), 0xa}, 0x117f0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x3, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0xc}, 0x11540, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d3}, 0x0, 0x5, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="040200"/12, @ANYRESDEC=r0, @ANYBLOB="fcffffff00"/20, @ANYRES32=r7, @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRES32=r1, @ANYBLOB="6cdc02233c3c31e9395db373e1dc7e0de7a56f7be8aa3bb20623400d626eafe207767017dbd469c40b0915393a9c972bc143ab78a87b97c33738f9"], 0x50) 1.56032926s ago: executing program 7 (id=3163): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8482c0000005e14060205cd1f000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000932f2210b390332c030000007c863223a76aecd06233ff2d544b1e5f5581e89940018534c3868533f5e1fe77931b58183a5d9e33d989b4f30e06caca445b5dfedaa9a444ecc364706fe8c1114a699ab454ea8f55d709ef4ae002ed737c42fc2c1e2821e5a76ca639632688e88c"], 0x10}, 0xf7e5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000001c40)={0x0, 0x0, 0x0}, 0x0) close(r5) socketpair(0x29, 0x800, 0x1, &(0x7f0000000200)) recvmsg(r3, &(0x7f00000006c0)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000800)=""/207, 0xcf}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/122, 0x7a}], 0x7, &(0x7f0000000640)=""/92, 0x5c}, 0x40000061) 1.446639659s ago: executing program 4 (id=3164): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000081ff09000100"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x10, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1, 0x4}, 0xa0, 0x58, 0x0, 0x4, 0x7fffffffffffffff, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0}, 0x20008810) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000080)={r6}) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000200)="19f99a39dd7fa513ee52551b5ef01ace04a2f4a621f737661515cb9d280c6934715a9702d338356cec300da70286e9b662ddefbce4e82c3b054f50729fddbd24c74a9dedae308b91e2f4b0cdb59b7be6ba19d7f9c479b7e303b6113eeccccd09466dc110ace8422d0b175c6aae72794464b8e75c4e45d913e5da3cd2c9ff6ddb539c8e72f47268a84d5e352f4035a8053bdf6f8d776c8255affe98421826d2b206a1551877498e5ae35183088a834745d507c57cd6e8d309e9aab6e8559588fc889d5c"}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f00000001c0)="11000000680081044e80f782db44b90402", 0x11}], 0x1a}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3c, &(0x7f0000000280), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000070000000000000000c000009500000000000000021d8a4f4f232f2b7b59efb04524caf70aa7fd589e28fb648967b5e54b51ca007891427ed15dfe9a97a2c27c127f95df519b456603"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000048f0000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) 1.43984716s ago: executing program 5 (id=3165): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r7, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, r7}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x18, &(0x7f0000001a80)=ANY=[@ANYBLOB="180000000300000000000000030000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000080850000002d000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0xc) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1080, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r10, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r10) 934.422324ms ago: executing program 7 (id=3166): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) (async, rerun: 64) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) (rerun: 64) write$cgroup_subtree(r1, &(0x7f0000001280)=ANY=[@ANYBLOB='1-2:', @ANYRESDEC, @ANYRESHEX], 0x31) 637.008394ms ago: executing program 6 (id=3167): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8080, 0x5, 0x43a1bd76, 0x7, 0x1ff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x20) setsockopt$sock_attach_bpf(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x4) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0x3}, 0x8080, 0x5, 0x43a1bd76, 0x7, 0x1ff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x5}, {0x2}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x20) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0xe, &(0x7f0000000000), 0x4) (async) 422.791379ms ago: executing program 7 (id=3168): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2019c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw\nr'], 0xa) (async) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x1170) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000010e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 230.372402ms ago: executing program 4 (id=3169): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], 0x48}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c00)=""/4024, 0xfb8}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000440)=""/197, 0xc5}], 0x3}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r2}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x67}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r4 = getpid() r5 = perf_event_open(&(0x7f00000010c0)={0x4, 0x80, 0xbc, 0x3d, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x4}, 0x8601, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x83, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000041ffffff000000000800000091114d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r5, 0x0, 0x1, &(0x7f0000000280)='\\{\x00'}, 0x12) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xa, 0x3, 0x1, 0x52, 0x0, 0x1c2cda97, 0x43349, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x8000000008, 0x9}, 0x4441, 0x3, 0x700, 0x7, 0x8, 0x3, 0x4, 0x0, 0x1, 0x0, 0x7}, r4, 0x2, r0, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r3, 0xe0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], 0x0, 0x8c, &(0x7f0000001c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001cc0), &(0x7f0000001d00), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000940)}}, 0xfffffffffffffe68) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3f) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="2b00000021200000000000003a32bbbf0f4e3e029e33b6542eb281ba7899e044f22562aeaf27f314f37350ac352147b6b6be4456bd752a67471f6fce6e805f02bfc1b1d7e53e3ca337bae980d30843a4889e7321002a0de3f10afb9c25cdad55b653485478e074403bdf05793f378c9ce601462e2a5d938b05fd3a4c5869c6e17a7be1", @ANYRES32=r9, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x1000}) 60.73413ms ago: executing program 7 (id=3170): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000300)) (async) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000300)) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000001000)=ANY=[@ANYRESOCT=r1], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r5, r2}) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) (async) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000380)=r3, 0x4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000240)) (async) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000240)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x5411, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r8) (async) close(r8) 2.647049ms ago: executing program 5 (id=3171): socket$kcm(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1e, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x5, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0x2, 0x0, @mcast2, 0x6}, 0x80, &(0x7f0000000800)=[{0x0}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x2000000000000101, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x4, 0x0, 0x0, 0x9, 0x262b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x808) close(r5) sendmsg$inet(r6, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x44004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x3, 0x0, 0x1}]}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000960000", @ANYRES16=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000004c0)="ac", &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 0s ago: executing program 6 (id=3172): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5eaa000000000000611067000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000000c0)="1400000027000bff001b05290000000000000000", 0x14}], 0x1}, 0x4080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r1}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x2}, 0x94) recvmsg(r7, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a", 0x35}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xc, '\x00', r9, r2, 0x1, 0x2, 0x5}, 0x50) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) kernel console output (not intermixed with test programs): 23408][T13742] netlink: 'syz.7.1702': attribute type 29 has an invalid length. [ 514.743715][T13742] netlink: 'syz.7.1702': attribute type 29 has an invalid length. [ 514.767497][T13743] netlink: 'syz.7.1702': attribute type 29 has an invalid length. [ 515.175544][T13761] netlink: 'syz.4.1706': attribute type 10 has an invalid length. [ 515.531954][T13757] netlink: 'syz.4.1706': attribute type 9 has an invalid length. [ 515.541267][T13757] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1706'. [ 515.971598][T13761] netlink: 'syz.4.1706': attribute type 9 has an invalid length. [ 515.985482][T13761] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1706'. [ 516.112313][T13772] netlink: 539 bytes leftover after parsing attributes in process `syz.7.1712'. [ 516.504616][T13793] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1718'. [ 516.560175][T13793] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1718'. [ 516.609351][T13799] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1718'. [ 517.363832][T13826] validate_nla: 6 callbacks suppressed [ 517.363853][T13826] netlink: 'syz.6.1725': attribute type 29 has an invalid length. [ 517.420254][T13826] netlink: 'syz.6.1725': attribute type 29 has an invalid length. [ 517.463733][T13827] netlink: 'syz.6.1725': attribute type 29 has an invalid length. [ 518.194316][T13838] netlink: 'syz.4.1730': attribute type 29 has an invalid length. [ 518.273717][T13838] netlink: 'syz.4.1730': attribute type 29 has an invalid length. [ 518.356766][T13841] netlink: 'syz.4.1730': attribute type 29 has an invalid length. [ 518.885911][ T5783] Bluetooth: hci7: unexpected event 0x2c length: 151 > 17 [ 519.524895][T13861] netlink: 'syz.7.1738': attribute type 27 has an invalid length. [ 519.593676][T13861] netlink: 'syz.7.1738': attribute type 3 has an invalid length. [ 519.699381][T13861] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1738'. [ 519.743857][T13864] netlink: 'syz.4.1739': attribute type 29 has an invalid length. [ 519.827375][T13864] netlink: 'syz.4.1739': attribute type 29 has an invalid length. [ 520.046648][T13870] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1741'. [ 520.087468][T13870] team0: left allmulticast mode [ 520.118860][T13870] team_slave_1: left allmulticast mode [ 520.150822][T13870] macvlan0: left allmulticast mode [ 520.168264][T13870] veth1_vlan: left allmulticast mode [ 520.430681][T13884] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1744'. [ 520.445042][T13884] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1744'. [ 520.485659][T13884] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1744'. [ 520.610859][T13889] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1746'. [ 520.666053][T13889] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1746'. [ 520.720708][T13894] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 521.020685][T13897] -: renamed from syzkaller0 [ 521.785843][T13922] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1754'. [ 522.534210][T13942] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1762'. [ 522.715415][T13940] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1761'. [ 522.748006][T13949] validate_nla: 8 callbacks suppressed [ 522.748028][T13949] netlink: 'syz.5.1759': attribute type 2 has an invalid length. [ 522.845063][T13949] netlink: 'syz.5.1759': attribute type 1 has an invalid length. [ 525.588853][T13990] netlink: 'syz.7.1772': attribute type 21 has an invalid length. [ 525.618387][T13992] __nla_validate_parse: 1 callbacks suppressed [ 525.618406][T13992] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.1772'. [ 525.648118][T13990] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1772'. [ 525.695029][T13991] netlink: 'syz.5.1773': attribute type 10 has an invalid length. [ 525.703974][T13992] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 525.709299][T13991] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1773'. [ 525.722137][T13991] vlan1: entered promiscuous mode [ 525.738876][T13991] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 526.002238][T14006] netlink: 'syz.6.1777': attribute type 8 has an invalid length. [ 526.021480][T14006] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1777'. [ 526.048607][T14006] netlink: 'syz.6.1777': attribute type 21 has an invalid length. [ 526.063274][T14006] netlink: 'syz.6.1777': attribute type 1 has an invalid length. [ 526.245133][T14011] netlink: 'syz.4.1778': attribute type 29 has an invalid length. [ 526.273185][T14011] netlink: 'syz.4.1778': attribute type 29 has an invalid length. [ 526.307210][T14015] netlink: 'syz.4.1778': attribute type 29 has an invalid length. [ 526.943060][T14026] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.1782'. [ 527.251982][T14039] netlink: 149044 bytes leftover after parsing attributes in process `syz.6.1785'. [ 527.689793][T14051] nla_validate_range_unsigned: 26 callbacks suppressed [ 527.689812][T14051] netlink: 'syz.7.1789': attribute type 11 has an invalid length. [ 527.731112][T14051] netlink: 184116 bytes leftover after parsing attributes in process `syz.7.1789'. [ 528.105537][T14055] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1791'. [ 528.287094][T14057] tap0: tun_chr_ioctl cmd 1074025675 [ 528.305433][T14057] tap0: persist enabled [ 528.440537][T14063] validate_nla: 7 callbacks suppressed [ 528.440555][T14063] netlink: 'syz.4.1794': attribute type 3 has an invalid length. [ 528.489076][T14067] C: renamed from team_slave_0 [ 528.508700][T14067] netlink: 'syz.6.1795': attribute type 1 has an invalid length. [ 528.525021][T14067] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1795'. [ 528.537037][T14067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 528.660027][T14074] C: renamed from team_slave_0 [ 528.808663][T14074] netlink: 'syz.4.1796': attribute type 3 has an invalid length. [ 528.830097][T14078] netlink: 'syz.7.1799': attribute type 29 has an invalid length. [ 528.835132][T14074] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1796'. [ 528.866273][T14078] netlink: 'syz.7.1799': attribute type 29 has an invalid length. [ 528.887915][T14085] netlink: 'syz.7.1799': attribute type 29 has an invalid length. [ 530.010611][T14106] netlink: 'syz.6.1805': attribute type 1 has an invalid length. [ 530.047894][T14106] netlink: 'syz.6.1805': attribute type 39 has an invalid length. [ 530.760337][T14114] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1808'. [ 531.201373][T14127] netlink: 'syz.5.1810': attribute type 29 has an invalid length. [ 531.262770][T14127] netlink: 'syz.5.1810': attribute type 29 has an invalid length. [ 531.722607][T14149] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1816'. [ 532.667953][T14168] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1818'. [ 532.811881][T14168] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 533.249843][T14186] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1827'. [ 533.467590][T14188] validate_nla: 3 callbacks suppressed [ 533.467629][T14188] netlink: 'syz.6.1829': attribute type 29 has an invalid length. [ 533.500186][T14188] netlink: 'syz.6.1829': attribute type 29 has an invalid length. [ 533.565300][T14195] netlink: 'syz.6.1829': attribute type 29 has an invalid length. [ 533.698565][T14202] netlink: 195064 bytes leftover after parsing attributes in process `syz.4.1832'. [ 534.233487][T14216] netlink: 16399 bytes leftover after parsing attributes in process `syz.6.1836'. [ 534.881356][T14224] netlink: 9447 bytes leftover after parsing attributes in process `syz.5.1837'. [ 534.968622][T14232] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1840'. [ 535.258599][T14237] netlink: 'syz.4.1842': attribute type 29 has an invalid length. [ 535.288432][T14237] netlink: 'syz.4.1842': attribute type 29 has an invalid length. [ 535.304001][T14242] netlink: 'syz.4.1842': attribute type 29 has an invalid length. [ 535.378553][T14240] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1844'. [ 535.453280][T14240] netlink: 'syz.5.1844': attribute type 10 has an invalid length. [ 535.472399][T14240] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1844'. [ 536.401659][T14263] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1851'. [ 536.634218][T14268] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1853'. [ 536.676463][T14268] FAULT_INJECTION: forcing a failure. [ 536.676463][T14268] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 536.715934][T14268] CPU: 0 PID: 14268 Comm: syz.6.1853 Not tainted syzkaller #0 [ 536.723659][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 536.734551][T14268] Call Trace: [ 536.737874][T14268] [ 536.741542][T14268] dump_stack_lvl+0x18c/0x250 [ 536.746378][T14268] ? show_regs_print_info+0x20/0x20 [ 536.751992][T14268] ? load_image+0x420/0x420 [ 536.756980][T14268] ? __might_fault+0xaa/0x120 [ 536.762507][T14268] ? __lock_acquire+0x7d40/0x7d40 [ 536.767867][T14268] should_fail_ex+0x39d/0x4d0 [ 536.772721][T14268] _copy_from_user+0x2f/0xe0 [ 536.777443][T14268] ___sys_recvmsg+0x176/0x590 [ 536.782441][T14268] ? __sys_recvmsg+0x2a0/0x2a0 [ 536.787372][T14268] ? ksys_write+0x1c4/0x260 [ 536.792144][T14268] ? __fget_files+0x43d/0x4b0 [ 536.797076][T14268] __x64_sys_recvmsg+0x20c/0x2e0 [ 536.802188][T14268] ? ___sys_recvmsg+0x590/0x590 [ 536.807445][T14268] ? lockdep_hardirqs_on+0x98/0x150 [ 536.812888][T14268] do_syscall_64+0x55/0xa0 [ 536.813435][T14270] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1854'. [ 536.817427][T14268] ? clear_bhb_loop+0x40/0x90 [ 536.817458][T14268] ? clear_bhb_loop+0x40/0x90 [ 536.817481][T14268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.817504][T14268] RIP: 0033:0x7fe49d79c819 [ 536.817523][T14268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.817540][T14268] RSP: 002b:00007fe49e700028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 536.817563][T14268] RAX: ffffffffffffffda RBX: 00007fe49da15fa0 RCX: 00007fe49d79c819 [ 536.817577][T14268] RDX: 0000000000000000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 536.817589][T14268] RBP: 00007fe49e700090 R08: 0000000000000000 R09: 0000000000000000 [ 536.817601][T14268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.817613][T14268] R13: 00007fe49da16038 R14: 00007fe49da15fa0 R15: 00007ffdfceabb58 [ 536.817642][T14268] [ 536.868289][T14272] netlink: 'syz.5.1855': attribute type 29 has an invalid length. [ 537.000745][T14272] netlink: 'syz.5.1855': attribute type 29 has an invalid length. [ 537.025037][T14274] netlink: 'syz.5.1855': attribute type 29 has an invalid length. [ 537.189257][T14277] veth0_vlan: left promiscuous mode [ 537.209483][T14277] veth0_vlan: entered promiscuous mode [ 537.245993][T14277] team0: Device veth0_vlan failed to register rx_handler [ 537.504161][T14285] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1859'. [ 537.890635][T14289] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1861'. [ 538.896900][T14300] validate_nla: 9 callbacks suppressed [ 538.896921][T14300] netlink: 'syz.5.1864': attribute type 39 has an invalid length. [ 539.042275][T14300] veth0_macvtap: left promiscuous mode [ 539.204050][T14302] netlink: 196 bytes leftover after parsing attributes in process `syz.7.1863'. [ 540.025534][T14311] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1866'. [ 540.079340][T14312] FAULT_INJECTION: forcing a failure. [ 540.079340][T14312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.165973][T14312] CPU: 1 PID: 14312 Comm: syz.5.1866 Not tainted syzkaller #0 [ 540.173656][T14312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 540.183884][T14312] Call Trace: [ 540.187228][T14312] [ 540.190229][T14312] dump_stack_lvl+0x18c/0x250 [ 540.195185][T14312] ? show_regs_print_info+0x20/0x20 [ 540.200458][T14312] ? load_image+0x420/0x420 [ 540.205063][T14312] ? __lock_acquire+0x7d40/0x7d40 [ 540.210400][T14312] ? snprintf+0xe9/0x140 [ 540.215015][T14312] should_fail_ex+0x39d/0x4d0 [ 540.220157][T14312] _copy_to_user+0x2f/0xa0 [ 540.224830][T14312] simple_read_from_buffer+0xe7/0x150 [ 540.230383][T14312] proc_fail_nth_read+0x1e8/0x260 [ 540.235496][T14312] ? proc_fault_inject_write+0x360/0x360 [ 540.241393][T14312] ? fsnotify_perm+0x271/0x5e0 [ 540.246327][T14312] ? proc_fault_inject_write+0x360/0x360 [ 540.252123][T14312] vfs_read+0x28b/0x970 [ 540.256382][T14312] ? kernel_read+0x1e0/0x1e0 [ 540.261048][T14312] ? __fget_files+0x28/0x4b0 [ 540.265800][T14312] ? __fget_files+0x28/0x4b0 [ 540.270634][T14312] ? __fget_files+0x43d/0x4b0 [ 540.275706][T14312] ? __fdget_pos+0x2a3/0x330 [ 540.281073][T14312] ? ksys_read+0x75/0x260 [ 540.285737][T14312] ksys_read+0x150/0x260 [ 540.290096][T14312] ? vfs_write+0x990/0x990 [ 540.294863][T14312] ? lockdep_hardirqs_on+0x98/0x150 [ 540.300299][T14312] do_syscall_64+0x55/0xa0 [ 540.304966][T14312] ? clear_bhb_loop+0x40/0x90 [ 540.309795][T14312] ? clear_bhb_loop+0x40/0x90 [ 540.314641][T14312] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.320804][T14312] RIP: 0033:0x7f9166b5d04e [ 540.325393][T14312] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.345514][T14312] RSP: 002b:00007f916798cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.354011][T14312] RAX: ffffffffffffffda RBX: 00007f916798d6c0 RCX: 00007f9166b5d04e [ 540.362218][T14312] RDX: 000000000000000f RSI: 00007f916798d0a0 RDI: 0000000000000004 [ 540.370509][T14312] RBP: 00007f916798d090 R08: 0000000000000000 R09: 0000000000000000 [ 540.378754][T14312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.386901][T14312] R13: 00007f9166e16128 R14: 00007f9166e16090 R15: 00007ffda25e7338 [ 540.395114][T14312] [ 541.020626][T14323] netlink: 'syz.5.1869': attribute type 29 has an invalid length. [ 541.037045][T14323] netlink: 'syz.5.1869': attribute type 29 has an invalid length. [ 541.132420][T14324] netlink: 'syz.5.1869': attribute type 29 has an invalid length. [ 541.312493][T14329] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1879'. [ 541.361837][ T5970] tipc: Subscription rejected, illegal request [ 541.490017][T14331] netlink: 'syz.7.1871': attribute type 3 has an invalid length. [ 541.544983][T14331] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1871'. [ 541.703592][T14340] netlink: 'syz.4.1882': attribute type 29 has an invalid length. [ 541.853125][T14340] netlink: 'syz.4.1882': attribute type 29 has an invalid length. [ 541.931990][T14348] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1875'. [ 541.975061][T14338] netlink: 'syz.4.1882': attribute type 29 has an invalid length. [ 542.008996][T14346] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1875'. [ 542.062827][T14346] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1875'. [ 542.081157][T14346] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.1875'. [ 542.337580][T14352] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1877'. [ 542.767536][T14366] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1883'. [ 543.182682][T14381] netlink: 'syz.4.1888': attribute type 29 has an invalid length. [ 543.210799][T14381] netlink: 'syz.4.1888': attribute type 29 has an invalid length. [ 544.379743][T14403] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1895'. [ 544.450290][ T5970] tipc: Subscription rejected, illegal request [ 544.828217][T14407] validate_nla: 3 callbacks suppressed [ 544.828280][T14407] netlink: 'syz.7.1897': attribute type 9 has an invalid length. [ 545.223034][T14417] netlink: 'syz.6.1900': attribute type 29 has an invalid length. [ 545.304194][T14417] netlink: 'syz.6.1900': attribute type 29 has an invalid length. [ 545.340391][T14419] netlink: 'syz.6.1900': attribute type 29 has an invalid length. [ 545.691012][T14428] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1903'. [ 545.714349][T14429] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1903'. [ 546.792669][T14431] netlink: 'syz.4.1904': attribute type 39 has an invalid length. [ 547.382107][T14447] __nla_validate_parse: 1 callbacks suppressed [ 547.382128][T14447] netlink: 196 bytes leftover after parsing attributes in process `syz.6.1909'. [ 548.473722][T14459] netlink: 'syz.6.1913': attribute type 29 has an invalid length. [ 548.530016][T14459] netlink: 'syz.6.1913': attribute type 29 has an invalid length. [ 548.580800][T14466] netlink: 'syz.7.1915': attribute type 10 has an invalid length. [ 548.811848][T14465] netlink: 'syz.6.1913': attribute type 29 has an invalid length. [ 549.190226][T14473] netlink: 'syz.7.1916': attribute type 29 has an invalid length. [ 549.556728][T14460] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1911'. [ 550.673623][T14501] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 550.700396][T14503] validate_nla: 4 callbacks suppressed [ 550.700433][T14503] netlink: 'syz.4.1925': attribute type 29 has an invalid length. [ 550.720307][T14503] netlink: 'syz.4.1925': attribute type 29 has an invalid length. [ 550.739961][T14503] netlink: 'syz.4.1925': attribute type 29 has an invalid length. [ 550.938896][T14508] netlink: 'syz.6.1928': attribute type 46 has an invalid length. [ 551.589454][T14512] netlink: 'syz.7.1926': attribute type 39 has an invalid length. [ 551.616304][T14516] macvlan1: entered promiscuous mode [ 551.622314][T14516] macvlan1: entered allmulticast mode [ 551.630300][T14516] veth1_vlan: entered allmulticast mode [ 552.059903][T14524] netlink: 'syz.5.1930': attribute type 10 has an invalid length. [ 552.187445][T14534] delete_channel: no stack [ 552.192382][T14534] delete_channel: no stack [ 552.822734][T14553] netlink: 'syz.5.1939': attribute type 29 has an invalid length. [ 552.844138][T14553] netlink: 'syz.5.1939': attribute type 29 has an invalid length. [ 552.858962][T14555] netlink: 'syz.5.1939': attribute type 29 has an invalid length. [ 553.492346][T14565] netlink: 'syz.6.1942': attribute type 39 has an invalid length. [ 553.519273][T14551] delete_channel: no stack [ 553.524617][T14551] delete_channel: no stack [ 553.599075][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 553.752490][T14579] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1947'. [ 553.767189][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1947'. [ 555.089901][T14613] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 555.131225][T14613] team0: Port device netdevsim0 added [ 555.499437][T14625] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.1959'. [ 556.597692][T14640] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1963'. [ 556.790418][T14645] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1964'. [ 556.926359][T14652] delete_channel: no stack [ 556.931528][T14652] delete_channel: no stack [ 560.409405][T14663] validate_nla: 6 callbacks suppressed [ 560.409442][T14663] netlink: 'syz.4.1968': attribute type 29 has an invalid length. [ 560.439007][T14663] netlink: 'syz.4.1968': attribute type 29 has an invalid length. [ 560.451502][T14668] netlink: 'syz.4.1968': attribute type 29 has an invalid length. [ 561.912616][T14698] netlink: 'syz.7.1979': attribute type 1 has an invalid length. [ 561.991894][T14698] netlink: 'syz.7.1979': attribute type 3 has an invalid length. [ 562.027447][T14698] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1979'. [ 562.142112][T14700] netlink: 'syz.7.1979': attribute type 10 has an invalid length. [ 562.230858][T14700] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1979'. [ 562.483553][T14715] netlink: 126588 bytes leftover after parsing attributes in process `syz.7.1983'. [ 562.504037][T14712] netlink: 'syz.5.1982': attribute type 29 has an invalid length. [ 562.520023][T14712] netlink: 'syz.5.1982': attribute type 29 has an invalid length. [ 562.558864][T14718] netlink: 'syz.5.1982': attribute type 29 has an invalid length. [ 563.310183][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.316735][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.149891][T14752] IPv6: NLM_F_CREATE should be specified when creating new route [ 564.428445][T14756] netlink: 'syz.7.1999': attribute type 29 has an invalid length. [ 564.578118][T14765] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.2000'. [ 564.620746][T14765] netlink: 4548 bytes leftover after parsing attributes in process `syz.5.2000'. [ 564.884659][T14774] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 564.921568][T14774] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2002'. [ 565.769232][T14811] validate_nla: 4 callbacks suppressed [ 565.769275][T14811] netlink: 'syz.7.2012': attribute type 29 has an invalid length. [ 565.791137][T14811] netlink: 'syz.7.2012': attribute type 29 has an invalid length. [ 565.835565][T14815] netlink: 'syz.7.2012': attribute type 29 has an invalid length. [ 566.293274][T14831] netlink: 'syz.7.2018': attribute type 29 has an invalid length. [ 566.327380][T14829] syzkaller0: entered promiscuous mode [ 566.333045][T14829] syzkaller0: entered allmulticast mode [ 566.519722][T14831] netlink: 'syz.7.2018': attribute type 29 has an invalid length. [ 566.544067][T14837] netlink: 'syz.7.2018': attribute type 29 has an invalid length. [ 566.615708][T14825] netlink: 'syz.7.2018': attribute type 29 has an invalid length. [ 566.924537][T14843] netlink: 'syz.5.2021': attribute type 2 has an invalid length. [ 567.015543][T14843] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2021'. [ 567.776566][T14859] netlink: 'syz.6.2026': attribute type 29 has an invalid length. [ 567.790549][T14859] netlink: 'syz.6.2026': attribute type 29 has an invalid length. [ 567.867915][T14856] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2025'. [ 568.584459][T14867] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2028'. [ 568.618637][T14867] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 569.680956][T14881] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2033'. [ 569.897651][T14883] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2034'. [ 570.242740][ T5951] wlan1: Trigger new scan to find an IBSS to join [ 570.478479][T14884] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2034'. [ 570.611599][T14882] delete_channel: no stack [ 570.771286][T14900] veth0_vlan: entered allmulticast mode [ 570.950185][T14901] veth0_vlan: left promiscuous mode [ 570.962901][T14901] veth0_vlan: entered promiscuous mode [ 571.059479][T14903] validate_nla: 4 callbacks suppressed [ 571.059500][T14903] netlink: 'syz.6.2040': attribute type 29 has an invalid length. [ 571.075528][T14903] netlink: 'syz.6.2040': attribute type 29 has an invalid length. [ 571.089226][T14903] netlink: 'syz.6.2040': attribute type 29 has an invalid length. [ 571.100095][T14903] netlink: 'syz.6.2040': attribute type 29 has an invalid length. [ 572.151242][ T5783] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 572.451558][T14916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.950499][T14942] delete_channel: no stack [ 572.989247][T14943] netlink: 'syz.6.2051': attribute type 29 has an invalid length. [ 573.119937][T14943] netlink: 'syz.6.2051': attribute type 29 has an invalid length. [ 573.176451][ T5965] wlan1: Creating new IBSS network, BSSID 36:70:38:42:8c:72 [ 573.405296][T14947] netlink: 'syz.4.2052': attribute type 29 has an invalid length. [ 573.448322][T14947] netlink: 'syz.4.2052': attribute type 29 has an invalid length. [ 573.500736][T14950] netlink: 'syz.4.2052': attribute type 29 has an invalid length. [ 573.587259][T14946] veth1_to_bond: entered allmulticast mode [ 574.003604][T14958] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2063'. [ 574.244926][T14923] Bluetooth: hci0: command 0x0406 tx timeout [ 577.169653][T14963] syzkaller0: entered promiscuous mode [ 577.179842][T14963] syzkaller0: entered allmulticast mode [ 577.300515][T14969] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2057'. [ 577.942444][T14988] netlink: 'syz.6.2062': attribute type 29 has an invalid length. [ 577.974569][T14988] netlink: 'syz.6.2062': attribute type 29 has an invalid length. [ 578.011916][T14989] netlink: 'syz.5.2064': attribute type 39 has an invalid length. [ 578.430780][T14997] netlink: 'syz.7.2067': attribute type 29 has an invalid length. [ 578.449796][T14997] netlink: 'syz.7.2067': attribute type 29 has an invalid length. [ 578.472260][T14996] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2066'. [ 578.496597][T14997] netlink: 'syz.7.2067': attribute type 29 has an invalid length. [ 578.606594][T14994] delete_channel: no stack [ 578.767275][T15002] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.2068'. [ 578.792868][T15004] netlink: 'syz.4.2069': attribute type 3 has an invalid length. [ 578.809208][T15004] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2069'. [ 579.012116][T15006] netlink: 'syz.5.2070': attribute type 10 has an invalid length. [ 579.773627][T15019] netlink: 'syz.4.2073': attribute type 29 has an invalid length. [ 579.804763][T15019] netlink: 'syz.4.2073': attribute type 29 has an invalid length. [ 583.219184][T15075] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 583.259394][T15066] validate_nla: 3 callbacks suppressed [ 583.259413][T15066] netlink: 'syz.6.2085': attribute type 29 has an invalid length. [ 583.312702][T15077] syzkaller0: entered promiscuous mode [ 583.318707][T15077] syzkaller0: entered allmulticast mode [ 583.325993][T15066] netlink: 'syz.6.2085': attribute type 29 has an invalid length. [ 583.500204][T15084] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2089'. [ 583.529247][T15086] netlink: 'syz.4.2091': attribute type 46 has an invalid length. [ 583.588926][T15084] netlink: 'syz.7.2089': attribute type 17 has an invalid length. [ 583.619229][T15084] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2089'. [ 583.652371][T15084] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 583.679994][T15091] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2089'. [ 583.747029][T15093] netlink: 'syz.6.2093': attribute type 29 has an invalid length. [ 583.765505][T15093] netlink: 'syz.6.2093': attribute type 29 has an invalid length. [ 583.802496][T15093] netlink: 'syz.6.2093': attribute type 29 has an invalid length. [ 586.384235][T15108] netlink: 'syz.7.2097': attribute type 11 has an invalid length. [ 586.420391][T15108] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2097'. [ 586.473018][T15113] IPv6: NLM_F_CREATE should be specified when creating new route [ 586.491873][T15113] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2099'. [ 586.899792][T15117] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2098'. [ 586.922348][T15117] bridge_slave_1: default FDB implementation only supports local addresses [ 586.998307][T15118] netlink: 'syz.7.2100': attribute type 29 has an invalid length. [ 587.015358][T15118] netlink: 'syz.7.2100': attribute type 29 has an invalid length. [ 587.547630][T15111] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2098'. [ 587.640053][T15111] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 587.943816][T15139] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2106'. [ 588.418319][T15150] validate_nla: 2 callbacks suppressed [ 588.418347][T15150] netlink: 'syz.5.2107': attribute type 29 has an invalid length. [ 588.449011][T15150] netlink: 'syz.5.2107': attribute type 29 has an invalid length. [ 588.490719][T15150] netlink: 'syz.5.2107': attribute type 29 has an invalid length. [ 590.476620][T15165] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2109'. [ 590.877362][T15183] netlink: 3787 bytes leftover after parsing attributes in process `syz.5.2112'. [ 591.136746][T15173] delete_channel: no stack [ 591.919406][T15192] netlink: 'syz.5.2117': attribute type 46 has an invalid length. [ 592.103171][T15196] netlink: 'syz.7.2118': attribute type 9 has an invalid length. [ 592.162968][T15196] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.2118'. [ 592.892534][T15205] netlink: 'syz.4.2120': attribute type 29 has an invalid length. [ 592.947609][T15205] netlink: 'syz.4.2120': attribute type 29 has an invalid length. [ 592.968381][T15211] netlink: 'syz.4.2120': attribute type 29 has an invalid length. [ 593.066621][T15217] netlink: 'syz.5.2130': attribute type 39 has an invalid length. [ 593.118277][T15218] netlink: 'syz.7.2123': attribute type 27 has an invalid length. [ 593.153788][T15218] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2123'. [ 593.218477][T15222] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2123'. [ 593.853582][T15239] netlink: 'syz.5.2129': attribute type 1 has an invalid length. [ 593.863584][T15239] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.2129'. [ 593.940798][T15248] netlink: 'syz.5.2129': attribute type 1 has an invalid length. [ 593.961670][T15248] netlink: 'syz.5.2129': attribute type 3 has an invalid length. [ 593.991524][T15248] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2129'. [ 594.029745][T15252] netlink: set zone limit has 8 unknown bytes [ 594.113478][T15255] netlink: 'syz.7.2133': attribute type 2 has an invalid length. [ 594.141134][T15255] netlink: 'syz.7.2133': attribute type 9 has an invalid length. [ 594.163038][T15255] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2133'. [ 594.321078][T15260] netlink: 'syz.4.2135': attribute type 29 has an invalid length. [ 594.333870][T15260] netlink: 'syz.4.2135': attribute type 29 has an invalid length. [ 594.351106][T15261] netlink: 'syz.4.2135': attribute type 29 has an invalid length. [ 594.722407][T15267] netlink: 'syz.5.2138': attribute type 2 has an invalid length. [ 594.745179][T15267] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2138'. [ 594.780700][T15267] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 594.987153][T15279] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2141'. [ 596.318005][T15305] netlink: 'syz.5.2148': attribute type 29 has an invalid length. [ 596.783436][T15311] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2150'. [ 596.850983][T15309] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2149'. [ 597.598063][T15332] sock: sock_set_timeout: `syz.7.2156' (pid 15332) tries to set negative timeout [ 598.370803][T15335] can: request_module (can-proto-0) failed. [ 598.502947][T15348] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2161'. [ 598.527090][T15348] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2161'. [ 598.537001][T15345] delete_channel: no stack [ 598.576618][T15345] .`: left promiscuous mode [ 598.581881][T15345] bond_slave_0: left promiscuous mode [ 598.637652][T15345] .&nr: left promiscuous mode [ 598.643128][T15345] .`: left allmulticast mode [ 598.713192][T15345] bond_slave_0: left allmulticast mode [ 598.724242][T15345] .&nr: left allmulticast mode [ 598.776984][T15343] delete_channel: no stack [ 599.082171][T15362] validate_nla: 13 callbacks suppressed [ 599.082198][T15362] netlink: 'syz.7.2165': attribute type 9 has an invalid length. [ 599.190586][T15362] netlink: 399 bytes leftover after parsing attributes in process `syz.7.2165'. [ 600.135906][T15378] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2169'. [ 600.307471][T15390] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2173'. [ 600.534027][T15402] netlink: 'syz.6.2174': attribute type 29 has an invalid length. [ 600.567667][T15402] netlink: 'syz.6.2174': attribute type 29 has an invalid length. [ 600.603923][T15398] netlink: 'syz.6.2174': attribute type 29 has an invalid length. [ 600.621273][T15405] netlink: 'syz.7.2177': attribute type 1 has an invalid length. [ 600.633419][T15405] netlink: 193500 bytes leftover after parsing attributes in process `syz.7.2177'. [ 600.746069][T15407] netlink: 'syz.5.2178': attribute type 29 has an invalid length. [ 601.360382][ T5936] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 601.572314][T15440] netlink: 'syz.5.2186': attribute type 1 has an invalid length. [ 601.601464][T15440] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2186'. [ 602.173418][T15462] netlink: 'syz.5.2191': attribute type 29 has an invalid length. [ 602.213688][T15462] netlink: 'syz.5.2191': attribute type 29 has an invalid length. [ 602.318690][T15466] netlink: 'syz.5.2191': attribute type 29 has an invalid length. [ 604.541918][T15517] netlink: 'syz.4.2206': attribute type 29 has an invalid length. [ 604.578144][T15517] netlink: 'syz.4.2206': attribute type 29 has an invalid length. [ 604.611614][T15521] netlink: 'syz.4.2206': attribute type 29 has an invalid length. [ 604.689088][T15518] netlink: 'syz.7.2204': attribute type 39 has an invalid length. [ 604.751662][T15518] veth0_macvtap: left promiscuous mode [ 605.223411][T15528] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2209'. [ 605.517780][T15546] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2211'. [ 605.541964][T15545] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2211'. [ 605.598817][T15543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.614959][T15543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.628416][T15543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.662274][T15543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.685014][T15543] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 605.724834][T15543] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 605.815601][T15549] netlink: 'syz.7.2213': attribute type 22 has an invalid length. [ 605.848560][T15549] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2213'. [ 605.900561][T15551] netlink: 'syz.7.2213': attribute type 21 has an invalid length. [ 605.944236][T15551] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2213'. [ 605.978891][T15550] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2214'. [ 606.516191][T15566] netlink: 'syz.4.2219': attribute type 29 has an invalid length. [ 606.557295][T15566] netlink: 'syz.4.2219': attribute type 29 has an invalid length. [ 606.697964][T15575] netlink: 'syz.4.2219': attribute type 29 has an invalid length. [ 606.791612][T15582] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.2223'. [ 607.441113][T15603] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2227'. [ 607.602537][T15608] netlink: 'syz.5.2227': attribute type 1 has an invalid length. [ 607.945715][T15617] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2230'. [ 608.404520][T15629] syzkaller0: left promiscuous mode [ 608.409883][T15629] syzkaller0: left allmulticast mode [ 608.576151][T15630] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.2233'. [ 608.708506][T15630] tc_dump_action: action bad kind [ 610.440289][T15659] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2242'. [ 613.686124][T15681] validate_nla: 3 callbacks suppressed [ 613.686144][T15681] netlink: 'syz.6.2247': attribute type 46 has an invalid length. [ 613.974955][T15681] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2247'. [ 616.148969][T15692] netlink: 'syz.4.2250': attribute type 21 has an invalid length. [ 617.062461][T15716] netlink: 'syz.4.2257': attribute type 29 has an invalid length. [ 617.111380][T15716] netlink: 'syz.4.2257': attribute type 29 has an invalid length. [ 617.252625][T15719] netlink: 'syz.4.2257': attribute type 29 has an invalid length. [ 617.480549][T15729] netlink: 'syz.7.2259': attribute type 21 has an invalid length. [ 617.522778][T15729] IPv6: NLM_F_CREATE should be specified when creating new route [ 617.565866][T15729] IPv6: Can't replace route, no match found [ 618.010311][T15738] netlink: 'syz.4.2264': attribute type 2 has an invalid length. [ 618.048894][T15738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2264'. [ 618.427810][T15753] netlink: 'syz.4.2266': attribute type 3 has an invalid length. [ 618.437128][T15753] netlink: 'syz.4.2266': attribute type 1 has an invalid length. [ 618.447605][T15753] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2266'. [ 618.742022][T15756] netlink: 'syz.6.2267': attribute type 12 has an invalid length. [ 618.827478][T15756] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2267'. [ 618.886816][T15766] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2269'. [ 619.286148][T15768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.027469][T15777] netlink: 'syz.4.2272': attribute type 29 has an invalid length. [ 620.078456][T15777] netlink: 'syz.4.2272': attribute type 29 has an invalid length. [ 620.190957][T15779] netlink: 'syz.4.2272': attribute type 29 has an invalid length. [ 620.498111][T15786] syzkaller0: entered promiscuous mode [ 620.507922][T15786] syzkaller0: entered allmulticast mode [ 620.516777][T15790] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2275'. [ 620.569001][T15790] netlink: 'syz.4.2275': attribute type 1 has an invalid length. [ 620.591614][T15790] netlink: 'syz.4.2275': attribute type 3 has an invalid length. [ 620.612637][T15790] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2275'. [ 622.867940][T15800] netlink: 'syz.7.2278': attribute type 10 has an invalid length. [ 622.886017][T15800] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2278'. [ 622.993384][T15805] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.2280'. [ 623.117178][T15807] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.2280'. [ 623.323403][T15820] netlink: 'syz.6.2283': attribute type 29 has an invalid length. [ 623.342646][T15820] netlink: 'syz.6.2283': attribute type 29 has an invalid length. [ 623.359017][T15822] netlink: 'syz.6.2283': attribute type 29 has an invalid length. [ 623.430248][T15828] netlink: 207508 bytes leftover after parsing attributes in process `syz.7.2286'. [ 623.697552][T15839] netlink: 150456 bytes leftover after parsing attributes in process `syz.5.2288'. [ 623.715606][T15839] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 624.086684][T15854] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2293'. [ 624.119705][T15854] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2293'. [ 624.707856][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.714399][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.790943][T15867] netlink: 'syz.4.2297': attribute type 29 has an invalid length. [ 624.825278][T15867] netlink: 'syz.4.2297': attribute type 29 has an invalid length. [ 624.856554][T15868] netlink: 'syz.4.2297': attribute type 29 has an invalid length. [ 625.311578][T15881] netlink: 830 bytes leftover after parsing attributes in process `syz.7.2302'. [ 625.389990][T15884] netlink: 'syz.6.2303': attribute type 2 has an invalid length. [ 625.452246][T15886] netlink: 'syz.4.2304': attribute type 29 has an invalid length. [ 625.461257][T15886] netlink: 'syz.4.2304': attribute type 29 has an invalid length. [ 625.509119][T15886] pim6reg1: entered promiscuous mode [ 625.518286][T15886] pim6reg1: entered allmulticast mode [ 626.600662][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 626.612480][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 626.621689][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 626.648867][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 626.658724][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 626.667552][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.709839][T14923] Bluetooth: hci1: command tx timeout [ 630.777357][T14923] Bluetooth: hci1: command tx timeout [ 631.507905][T15929] netlink: 'syz.4.2312': attribute type 29 has an invalid length. [ 631.554924][T15929] netlink: 'syz.4.2312': attribute type 29 has an invalid length. [ 631.592720][T15932] netlink: 'syz.4.2312': attribute type 29 has an invalid length. [ 631.999576][T15942] netlink: 'syz.5.2316': attribute type 3 has an invalid length. [ 632.012796][T15945] netlink: 'syz.7.2315': attribute type 4 has an invalid length. [ 632.014818][T15942] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2316'. [ 632.034941][T15945] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2315'. [ 632.050657][T15945] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 632.077648][T15941] netlink: 'syz.5.2316': attribute type 21 has an invalid length. [ 632.087712][T15941] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2316'. [ 632.133606][T15913] chnl_net:caif_netlink_parms(): no params data found [ 632.391451][T15913] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.402513][T15913] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.410548][T15913] bridge_slave_0: entered allmulticast mode [ 632.422192][T15913] bridge_slave_0: entered promiscuous mode [ 632.446927][T15913] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.454550][T15913] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.478452][T15913] bridge_slave_1: entered allmulticast mode [ 632.499233][T15913] bridge_slave_1: entered promiscuous mode [ 632.582524][T15913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.600442][ T5970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 632.629726][T15913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.757766][T15913] team0: Port device team_slave_0 added [ 632.768107][T15913] team0: Port device team_slave_1 added [ 632.819474][T15913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.827127][T15913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.865285][T14923] Bluetooth: hci1: command tx timeout [ 632.880966][T15913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.897712][T15913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.906367][T15913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.934278][T15913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.064153][ T5965] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.481392][ T5965] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.992012][T15913] hsr_slave_0: entered promiscuous mode [ 634.179698][T15913] hsr_slave_1: entered promiscuous mode [ 634.668283][ T5965] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.882099][T15985] netlink: 'syz.7.2325': attribute type 10 has an invalid length. [ 634.913783][T15985] netlink: 'syz.7.2325': attribute type 10 has an invalid length. [ 634.923126][ T5965] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 634.950126][T14923] Bluetooth: hci1: command tx timeout [ 634.989763][T15985] netlink: 209216 bytes leftover after parsing attributes in process `syz.7.2325'. [ 634.993003][T15987] netlink: 'syz.4.2326': attribute type 29 has an invalid length. [ 635.033166][T15985] openvswitch: netlink: Message has 4 unknown bytes. [ 635.061174][ T5965] team0: Port device netdevsim0 removed [ 635.088470][ T5965] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.216197][T15987] netlink: 'syz.4.2326': attribute type 29 has an invalid length. [ 636.178344][T16011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2329'. [ 636.457905][T16014] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2332'. [ 636.483609][T16018] netlink: 121460 bytes leftover after parsing attributes in process `syz.7.2333'. [ 636.747233][T16018] netlink: 22856 bytes leftover after parsing attributes in process `syz.7.2333'. [ 636.921813][T16028] validate_nla: 1 callbacks suppressed [ 636.921832][T16028] netlink: 'syz.5.2334': attribute type 10 has an invalid length. [ 638.676040][T16059] netlink: 4595 bytes leftover after parsing attributes in process `syz.7.2339'. [ 638.847151][T15913] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 638.875016][T15913] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 638.936886][T15913] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 639.075933][T15913] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 639.103051][T16074] netlink: 'syz.7.2342': attribute type 2 has an invalid length. [ 639.125102][T16074] netlink: 'syz.7.2342': attribute type 11 has an invalid length. [ 639.133090][T16074] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2342'. [ 639.301603][T16082] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.2343'. [ 639.536931][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2344'. [ 639.677937][T16090] netlink: 'syz.7.2345': attribute type 39 has an invalid length. [ 639.730373][T15913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.777573][T16092] netlink: 'syz.5.2346': attribute type 29 has an invalid length. [ 639.810044][T16092] netlink: 'syz.5.2346': attribute type 29 has an invalid length. [ 639.840462][T16093] netlink: 'syz.5.2346': attribute type 29 has an invalid length. [ 639.889424][T15913] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.939979][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.947765][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.968857][ T5949] tipc: Subscription rejected, illegal request [ 640.002190][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.009603][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.667359][T16101] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.2349'. [ 640.921639][T16105] netlink: 'syz.7.2350': attribute type 6 has an invalid length. [ 640.951742][T16105] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2350'. [ 641.124792][T16116] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.2352'. [ 641.228405][T16113] netlink: 'syz.5.2352': attribute type 39 has an invalid length. [ 641.320964][T16116] netlink: 6324 bytes leftover after parsing attributes in process `syz.5.2352'. [ 641.820381][T15913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.958626][T16131] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2355'. [ 642.051068][T16135] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.2354'. [ 642.114138][T16135] netlink: zone id is out of range [ 642.120085][T16135] netlink: del zone limit has 8 unknown bytes [ 642.280095][ T5965] hsr_slave_0: left promiscuous mode [ 642.296372][ T5965] hsr_slave_1: left promiscuous mode [ 642.306298][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.314125][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.344901][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.352555][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.430104][ T5965] veth1_macvtap: left promiscuous mode [ 642.435942][ T5965] veth1_vlan: left allmulticast mode [ 642.454181][ T5965] veth1_vlan: left promiscuous mode [ 642.814171][T16154] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 643.201798][ T5965] macvlan0 (unregistering): left promiscuous mode [ 643.213891][ T5965] team0 (unregistering): Port device macvlan0 removed [ 643.609957][ T5965] team_slave_1 (unregistering): left promiscuous mode [ 643.618590][ T5965] team0 (unregistering): Port device team_slave_1 removed [ 643.668478][ T5965] C (unregistering): left promiscuous mode [ 643.677256][ T5965] team0 (unregistering): Port device C removed [ 643.729976][ T5965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.086735][ T5965] bond0 (unregistering): Released all slaves [ 644.141040][T16154] netlink: 'syz.4.2359': attribute type 29 has an invalid length. [ 644.171004][T16162] netlink: 'syz.5.2361': attribute type 10 has an invalid length. [ 644.180811][T16162] __nla_validate_parse: 1 callbacks suppressed [ 644.180827][T16162] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2361'. [ 644.203408][T16162] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 644.226540][T16163] netlink: 'syz.5.2361': attribute type 21 has an invalid length. [ 644.420740][T15913] veth0_vlan: entered promiscuous mode [ 644.492242][T15913] veth1_vlan: entered promiscuous mode [ 644.632224][T15913] veth0_macvtap: entered promiscuous mode [ 644.673234][T15913] veth1_macvtap: entered promiscuous mode [ 644.693389][T16168] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2362'. [ 644.742254][T15913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.766464][T15913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.816845][T16168] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 644.990384][T15913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.008922][T15913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.018783][T15913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.028607][T15913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.205998][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.228430][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.278882][T16197] netlink: 'syz.7.2371': attribute type 29 has an invalid length. [ 645.321156][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.321482][T16197] netlink: 'syz.7.2371': attribute type 29 has an invalid length. [ 645.346859][T16198] netlink: 'syz.7.2371': attribute type 29 has an invalid length. [ 645.354853][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.837546][T16216] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2376'. [ 646.045294][T16217] netlink: 'syz.7.2376': attribute type 10 has an invalid length. [ 646.073284][T16217] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2376'. [ 646.256780][ T5936] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.461383][ T5936] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.655740][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.665978][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.676246][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.688219][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.696849][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 646.704794][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.720010][T16233] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2380'. [ 646.782839][ T5936] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.900953][T16237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.938783][T16233] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2380'. [ 646.961747][T16242] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2378'. [ 647.093072][ T5936] team0: Port device netdevsim0 removed [ 647.106702][ T5936] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.175619][T16242] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 647.175714][T16248] netlink: 'syz.6.2383': attribute type 29 has an invalid length. [ 647.183655][T16242] CPU: 0 PID: 16242 Comm: syz.4.2378 Not tainted syzkaller #0 [ 647.183736][T16242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 647.183750][T16242] Call Trace: [ 647.183760][T16242] [ 647.183771][T16242] dump_stack_lvl+0x18c/0x250 [ 647.183813][T16242] ? show_regs_print_info+0x20/0x20 [ 647.226590][T16242] ? load_image+0x420/0x420 [ 647.231247][T16242] sysfs_warn_dup+0x8e/0xa0 [ 647.235966][T16242] sysfs_do_create_link_sd+0xc0/0x110 [ 647.241574][T16242] device_add_class_symlinks+0x1cf/0x240 [ 647.247245][T16242] device_add+0x507/0xc20 [ 647.251617][T16242] wiphy_register+0x1dad/0x2ae0 [ 647.256575][T16242] ? cfg80211_event_work+0x40/0x40 [ 647.261715][T16242] ? minstrel_ht_alloc+0x88a/0x990 [ 647.266966][T16242] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 647.273320][T16242] ieee80211_register_hw+0x3464/0x4250 [ 647.279190][T16242] ? ieee80211_tasklet_handler+0x20/0x20 [ 647.285060][T16242] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 647.291085][T16242] ? __debug_object_init+0xec/0x450 [ 647.296349][T16242] ? __asan_memset+0x22/0x40 [ 647.300986][T16242] ? __hrtimer_init+0x186/0x270 [ 647.305877][T16242] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 647.311653][T16242] ? mac80211_hwsim_free+0x220/0x220 [ 647.317141][T16242] ? rcu_is_watching+0x15/0xb0 [ 647.321943][T16242] ? kstrndup+0xbd/0x140 [ 647.326230][T16242] hwsim_new_radio_nl+0xdc9/0x1a90 [ 647.331728][T16242] ? __nla_validate+0x50/0x50 [ 647.336562][T16242] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 647.343025][T16242] ? __nla_parse+0x40/0x50 [ 647.347479][T16242] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 647.353871][T16242] genl_family_rcv_msg_doit+0x211/0x310 [ 647.359629][T16242] ? end_current_label_crit_section+0x170/0x170 [ 647.366086][T16242] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 647.372111][T16242] ? bpf_lsm_capable+0x9/0x10 [ 647.376932][T16242] ? security_capable+0x89/0xb0 [ 647.381934][T16242] genl_rcv_msg+0x619/0x7a0 [ 647.386487][T16242] ? genl_bind+0x360/0x360 [ 647.391129][T16242] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 647.397588][T16242] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 647.404343][T16242] ? ref_tracker_free+0x690/0x840 [ 647.409595][T16242] netlink_rcv_skb+0x241/0x4d0 [ 647.414400][T16242] ? genl_bind+0x360/0x360 [ 647.418861][T16242] ? netlink_ack+0x1180/0x1180 [ 647.423676][T16242] ? __lock_acquire+0x7d40/0x7d40 [ 647.428742][T16242] ? down_read+0x1ac/0x2e0 [ 647.433193][T16242] genl_rcv+0x28/0x40 [ 647.437323][T16242] netlink_unicast+0x751/0x8d0 [ 647.442147][T16242] netlink_sendmsg+0x8d0/0xbf0 [ 647.447055][T16242] ? netlink_getsockopt+0x590/0x590 [ 647.452419][T16242] ? aa_sock_msg_perm+0x94/0x150 [ 647.457483][T16242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 647.462807][T16242] ? security_socket_sendmsg+0x80/0xa0 [ 647.468497][T16242] ? netlink_getsockopt+0x590/0x590 [ 647.473762][T16242] ____sys_sendmsg+0x5ba/0x960 [ 647.478591][T16242] ? __asan_memset+0x22/0x40 [ 647.483277][T16242] ? __sys_sendmsg_sock+0x30/0x30 [ 647.488352][T16242] ? __import_iovec+0x5f2/0x850 [ 647.493388][T16242] ? import_iovec+0x73/0xa0 [ 647.498014][T16242] ___sys_sendmsg+0x2a6/0x360 [ 647.502759][T16242] ? __sys_sendmsg+0x2a0/0x2a0 [ 647.507584][T16242] ? trace_call_bpf+0xc3/0x6c0 [ 647.512510][T16242] __se_sys_sendmsg+0x1c2/0x2b0 [ 647.517410][T16242] ? __x64_sys_sendmsg+0x80/0x80 [ 647.522485][T16242] ? lockdep_hardirqs_on+0x98/0x150 [ 647.527893][T16242] do_syscall_64+0x55/0xa0 [ 647.532338][T16242] ? clear_bhb_loop+0x40/0x90 [ 647.537148][T16242] ? clear_bhb_loop+0x40/0x90 [ 647.542139][T16242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.548639][T16242] RIP: 0033:0x7f535339c819 [ 647.553084][T16242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.573245][T16242] RSP: 002b:00007f535428a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.581807][T16242] RAX: ffffffffffffffda RBX: 00007f5353616180 RCX: 00007f535339c819 [ 647.590330][T16242] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 647.598331][T16242] RBP: 00007f5353432c91 R08: 0000000000000000 R09: 0000000000000000 [ 647.606337][T16242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.614348][T16242] R13: 00007f5353616218 R14: 00007f5353616180 R15: 00007ffeeb228418 [ 647.622547][T16242] [ 647.683722][T16248] netlink: 'syz.6.2383': attribute type 29 has an invalid length. [ 647.904727][T16250] netlink: 'syz.6.2383': attribute type 29 has an invalid length. [ 648.507714][T16269] netlink: 'syz.7.2386': attribute type 4 has an invalid length. [ 648.641790][T16276] netlink: 'syz.6.2388': attribute type 5 has an invalid length. [ 648.698218][T16234] chnl_net:caif_netlink_parms(): no params data found [ 648.785066][ T5779] Bluetooth: hci2: command tx timeout [ 648.853667][T16281] netlink: 'syz.7.2389': attribute type 10 has an invalid length. [ 648.871058][T16281] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2389'. [ 649.500373][T16234] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.549261][T16234] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.562740][T16234] bridge_slave_0: entered allmulticast mode [ 649.573681][T16234] bridge_slave_0: entered promiscuous mode [ 649.588104][T16234] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.595718][T16234] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.602980][T16234] bridge_slave_1: entered allmulticast mode [ 649.610668][T16234] bridge_slave_1: entered promiscuous mode [ 649.724377][T16314] netlink: 'syz.4.2395': attribute type 29 has an invalid length. [ 649.933162][T16314] netlink: 'syz.4.2395': attribute type 29 has an invalid length. [ 649.954169][T16317] Â: renamed from pim6reg1 [ 649.984308][T16234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.999287][T16234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.009361][T16316] netlink: 'syz.4.2395': attribute type 29 has an invalid length. [ 650.256511][T16234] team0: Port device team_slave_0 added [ 650.278173][T16234] team0: Port device team_slave_1 added [ 650.362569][T16234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.374474][T16234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.552172][T16234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.640935][T16234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.882803][ T5779] Bluetooth: hci2: command tx timeout [ 650.920372][T16234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.998108][T16234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.199694][T16234] hsr_slave_0: entered promiscuous mode [ 651.221730][T16234] hsr_slave_1: entered promiscuous mode [ 651.237224][T16234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.254851][T16234] Cannot create hsr debugfs directory [ 651.420045][T16346] netlink: 'syz.7.2402': attribute type 15 has an invalid length. [ 651.437991][T16346] netlink: 'syz.7.2402': attribute type 7 has an invalid length. [ 651.491678][T16347] netlink: 'syz.7.2402': attribute type 10 has an invalid length. [ 651.502836][T16347] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2402'. [ 651.514496][T16347] caif0: entered promiscuous mode [ 651.523184][T16347] caif0: entered allmulticast mode [ 651.537526][T16347] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 652.331649][T16355] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2403'. [ 652.934848][ T5779] Bluetooth: hci2: command tx timeout [ 653.257757][T16385] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2408'. [ 653.292355][T16388] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2409'. [ 653.774854][T16234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 653.870264][ T5936] veth1_macvtap: left promiscuous mode [ 653.882858][ T5936] veth1_vlan: left allmulticast mode [ 653.893707][ T5936] veth1_vlan: left promiscuous mode [ 654.170737][T16394] validate_nla: 3 callbacks suppressed [ 654.170779][T16394] netlink: 'syz.4.2411': attribute type 8 has an invalid length. [ 654.201707][T16394] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2411'. [ 654.343872][ T5936] team0 (unregistering): Port device geneve1 removed [ 654.696494][ T5936] team0 (unregistering): Port device hsr_slave_0 removed [ 654.838145][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 654.890747][ T5936] team0 (unregistering): Port device C removed [ 654.938580][ T5936] .` (unregistering): (slave 0.&nr): Releasing backup interface [ 654.994064][ T5936] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.026275][ T5779] Bluetooth: hci2: command tx timeout [ 655.297486][ T5936] .` (unregistering): Released all slaves [ 655.353982][T16234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 655.369647][T16234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 655.426195][T16234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 655.833167][T16234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.885991][T16234] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.916263][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.923614][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.977705][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.985211][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.229379][T16422] netlink: 'syz.7.2415': attribute type 29 has an invalid length. [ 656.281213][T16422] netlink: 'syz.7.2415': attribute type 29 has an invalid length. [ 656.328884][T16427] netlink: 'syz.7.2415': attribute type 29 has an invalid length. [ 656.330573][T16426] netlink: 'syz.4.2416': attribute type 49 has an invalid length. [ 656.396292][T16426] netlink: 'syz.4.2416': attribute type 49 has an invalid length. [ 656.735837][T16234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.997948][T16443] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2417'. [ 657.842912][T16234] veth0_vlan: entered promiscuous mode [ 657.917755][T16234] veth1_vlan: entered promiscuous mode [ 658.218738][T16234] veth0_macvtap: entered promiscuous mode [ 658.328371][T16234] veth1_macvtap: entered promiscuous mode [ 658.452254][T16234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.463370][T16234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.487128][T16234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.508278][T16234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.536349][T16234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.556581][T16234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.589880][T16234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.614855][T16234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.644392][T16234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.662052][T16234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.685468][T16487] netlink: 'syz.7.2424': attribute type 10 has an invalid length. [ 658.928158][T16491] netlink: 'syz.6.2425': attribute type 29 has an invalid length. [ 658.974354][T16493] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.2426'. [ 658.984517][T16491] netlink: 'syz.6.2425': attribute type 29 has an invalid length. [ 659.074665][T16493] netlink: del zone limit has 8 unknown bytes [ 659.191813][T16494] netlink: 'syz.6.2425': attribute type 29 has an invalid length. [ 659.483387][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.513204][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.848584][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.865169][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.468159][T16523] netlink: 'syz.5.2375': attribute type 10 has an invalid length. [ 661.503308][T16523] batman_adv: batadv0: Adding interface: netdevsim0 [ 661.531288][T16523] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.563072][T16523] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 663.816607][T16590] netlink: 'syz.5.2444': attribute type 28 has an invalid length. [ 663.845998][T16590] netlink: 'syz.5.2444': attribute type 29 has an invalid length. [ 663.853902][T16590] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2444'. [ 663.945211][ T5970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 664.321185][T16604] netlink: 'syz.5.2447': attribute type 21 has an invalid length. [ 664.349956][T16604] IPv6: NLM_F_CREATE should be specified when creating new route [ 664.376546][T16604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 664.383851][T16604] IPv6: NLM_F_CREATE should be set when creating new route [ 664.391417][T16604] IPv6: NLM_F_CREATE should be set when creating new route [ 664.398830][T16604] IPv6: NLM_F_CREATE should be set when creating new route [ 664.460673][T16606] netlink: 'syz.5.2447': attribute type 21 has an invalid length. [ 664.485341][T16606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 664.518034][T16608] netlink: 'syz.5.2447': attribute type 21 has an invalid length. [ 664.555804][T16608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 664.647063][T14923] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 664.687963][T14923] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 664.697430][T14923] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 664.718012][T14923] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 664.735764][T14923] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 664.744079][T14923] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 664.828064][T16613] netlink: 'syz.6.2449': attribute type 28 has an invalid length. [ 664.878017][T16613] netlink: 'syz.6.2449': attribute type 29 has an invalid length. [ 664.912915][T16613] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2449'. [ 665.780381][T16618] chnl_net:caif_netlink_parms(): no params data found [ 665.987026][T16633] netlink: 'syz.5.2450': attribute type 2 has an invalid length. [ 666.028194][T16633] netlink: 'syz.5.2450': attribute type 8 has an invalid length. [ 666.070376][T16633] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2450'. [ 666.150787][T16624] netlink: 'syz.5.2450': attribute type 11 has an invalid length. [ 666.339538][T16640] netlink: 'syz.7.2452': attribute type 29 has an invalid length. [ 666.409052][T16640] netlink: 'syz.7.2452': attribute type 29 has an invalid length. [ 666.440306][T16643] netlink: 209820 bytes leftover after parsing attributes in process `syz.6.2453'. [ 666.445264][T16618] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.485713][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.494260][T16618] bridge_slave_0: entered allmulticast mode [ 666.507515][T16618] bridge_slave_0: entered promiscuous mode [ 666.528297][T16618] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.536064][T16618] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.543328][T16618] bridge_slave_1: entered allmulticast mode [ 666.556501][T16618] bridge_slave_1: entered promiscuous mode [ 666.642326][T16618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.670308][T16618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.740770][T16618] team0: Port device team_slave_0 added [ 666.758452][T16618] team0: Port device team_slave_1 added [ 666.774992][T14923] Bluetooth: hci0: command tx timeout [ 666.834145][T16618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.870461][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.903199][T16618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.923917][T16618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.931158][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.976689][T16618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.034014][T16618] hsr_slave_0: entered promiscuous mode [ 667.056159][T16618] hsr_slave_1: entered promiscuous mode [ 667.066696][T16618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 667.074452][T16618] Cannot create hsr debugfs directory [ 667.294747][T16618] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.429918][T16618] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.555992][T16618] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.570891][T16672] netlink: 21 bytes leftover after parsing attributes in process `syz.5.2460'. [ 667.584036][T16672] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 667.642050][T16618] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.909372][T16618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 667.966285][T16618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 668.052741][T16618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 668.076176][T16618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 668.857087][T14923] Bluetooth: hci0: command tx timeout [ 668.914117][T16618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.952022][T16618] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.979808][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.987240][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.021921][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.029245][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.492163][T16714] validate_nla: 4 callbacks suppressed [ 669.492200][T16714] netlink: 'syz.5.2472': attribute type 4 has an invalid length. [ 669.637227][T16618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.895311][T16725] netlink: 'syz.6.2474': attribute type 29 has an invalid length. [ 669.904177][T16725] netlink: 'syz.6.2474': attribute type 29 has an invalid length. [ 669.937078][T16727] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2475'. [ 669.951147][T16728] netlink: 'syz.6.2474': attribute type 29 has an invalid length. [ 669.959358][T16727] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 670.358988][T16618] veth0_vlan: entered promiscuous mode [ 670.389827][T16618] veth1_vlan: entered promiscuous mode [ 670.443510][T16618] veth0_macvtap: entered promiscuous mode [ 670.467099][T16618] veth1_macvtap: entered promiscuous mode [ 670.496168][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.507522][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.521263][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.534084][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.550454][T16618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.573637][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.588026][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.599511][T16618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.610954][T16618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.703443][T16618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.737311][T16618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.749098][T16618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.759501][T16618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.770753][T16618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.936089][T14923] Bluetooth: hci0: command tx timeout [ 670.961061][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.981899][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.052093][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.074232][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.210190][T16745] netlink: 'syz.7.2480': attribute type 11 has an invalid length. [ 671.244841][T16745] netlink: 184116 bytes leftover after parsing attributes in process `syz.7.2480'. [ 671.365781][T16752] IPv6: NLM_F_CREATE should be specified when creating new route [ 671.379071][T16752] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2482'. [ 671.407292][T16745] netlink: 'syz.7.2480': attribute type 21 has an invalid length. [ 671.445305][T16745] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2480'. [ 671.547983][T16762] netlink: 'syz.5.2483': attribute type 6 has an invalid length. [ 673.015139][T14923] Bluetooth: hci0: command tx timeout [ 673.615576][T16776] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2487'. [ 673.632765][T16776] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2487'. [ 673.643695][T16776] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2487'. [ 673.667421][T16776] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2487'. [ 673.927831][T16782] netlink: 201392 bytes leftover after parsing attributes in process `syz.6.2490'. [ 674.625190][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.633489][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.655665][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.673091][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.692839][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 674.702124][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.764458][T16806] netlink: 144316 bytes leftover after parsing attributes in process `syz.6.2496'. [ 674.895697][T16810] syz.5.2497[16810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 674.896026][T16810] syz.5.2497[16810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 675.152602][T16799] chnl_net:caif_netlink_parms(): no params data found [ 675.348517][T16823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.357128][T16823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.366783][T16823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.375300][T16823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.392963][T16823] batman_adv: batadv0: Removing interface: netdevsim0 [ 675.569124][T16799] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.578934][T16799] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.591485][T16799] bridge_slave_0: entered allmulticast mode [ 675.601030][T16799] bridge_slave_0: entered promiscuous mode [ 675.613398][T16799] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.621231][T16799] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.636524][T16799] bridge_slave_1: entered allmulticast mode [ 675.658226][T16799] bridge_slave_1: entered promiscuous mode [ 675.764294][T16799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.782706][T16799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.870732][T16799] team0: Port device team_slave_0 added [ 675.912890][T16799] team0: Port device team_slave_1 added [ 676.082963][T16799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.099732][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.129573][T16799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.145501][T16799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.152510][T16799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.179418][T16799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.192911][T16843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 676.207682][T16844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2504'. [ 676.281308][T16843] netlink: 'syz.5.2504': attribute type 10 has an invalid length. [ 676.360049][T16848] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2505'. [ 676.449940][T16799] hsr_slave_0: entered promiscuous mode [ 676.460601][T16799] hsr_slave_1: entered promiscuous mode [ 676.467105][T16799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.482616][T16799] Cannot create hsr debugfs directory [ 676.489528][T16844] netlink: 'syz.5.2504': attribute type 2 has an invalid length. [ 676.497867][T16844] netlink: 'syz.5.2504': attribute type 8 has an invalid length. [ 676.506368][T16844] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2504'. [ 676.520953][T16848] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2505'. [ 676.533204][T16849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2505'. [ 676.768281][T16799] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.785743][T14923] Bluetooth: hci3: command tx timeout [ 677.031718][T16799] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.147070][T16799] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.189545][T16859] netlink: 'syz.6.2507': attribute type 10 has an invalid length. [ 677.308969][T16859] team0: Port device geneve1 added [ 677.339131][T16799] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.509911][T16799] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 677.525464][T16799] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 677.562668][T16799] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 677.574270][T16799] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 677.603448][T16865] netlink: 'syz.5.2510': attribute type 5 has an invalid length. [ 677.717108][T16870] netlink: 'syz.4.2511': attribute type 8 has an invalid length. [ 677.727432][T16870] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2511'. [ 677.852538][T16799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.903528][T16799] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.923199][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.930440][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.974369][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.981748][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.497033][T16882] netlink: 'syz.6.2514': attribute type 17 has an invalid length. [ 678.522078][T16882] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2514'. [ 678.855174][T14923] Bluetooth: hci3: command tx timeout [ 679.011993][T16799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.417143][T16891] Dead loop on virtual device ip6_vti0, fix it urgently! [ 680.369105][T16799] veth0_vlan: entered promiscuous mode [ 680.485069][T16799] veth1_vlan: entered promiscuous mode [ 680.602747][T16904] netlink: 'syz.5.2512': attribute type 11 has an invalid length. [ 680.671461][T16799] veth0_macvtap: entered promiscuous mode [ 680.682887][T16799] veth1_macvtap: entered promiscuous mode [ 680.725962][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.768738][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.814700][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.844830][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.867623][T16799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.934036][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.945580][T14923] Bluetooth: hci3: command tx timeout [ 680.951175][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.963234][T16799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.974284][T16799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.997191][T16799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.100440][T16799] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.112267][T16799] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.122218][T16799] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.133086][T16799] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.824038][ T5936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.833527][ T5936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.930440][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.940156][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.519450][T16936] netlink: 'syz.7.2486': attribute type 29 has an invalid length. [ 682.797848][T16936] netlink: 'syz.7.2486': attribute type 29 has an invalid length. [ 682.819246][T16931] netlink: 'syz.7.2486': attribute type 29 has an invalid length. [ 683.145016][T14923] Bluetooth: hci3: command tx timeout [ 683.590057][T16951] netlink: 4083 bytes leftover after parsing attributes in process `syz.6.2527'. [ 683.801464][T16961] netlink: 'syz.7.2531': attribute type 21 has an invalid length. [ 683.816737][T16961] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2531'. [ 686.736912][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.743397][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.173202][T16970] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2533'. [ 688.220420][T16970] netlink: del zone limit has 4 unknown bytes [ 688.696671][T16973] netlink: 'syz.5.2534': attribute type 29 has an invalid length. [ 688.883648][T16973] netlink: 'syz.5.2534': attribute type 29 has an invalid length. [ 689.058127][T16986] netlink: 'syz.6.2537': attribute type 3 has an invalid length. [ 689.066445][T16986] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2537'. [ 689.386512][T16994] netlink: 'syz.4.2542': attribute type 12 has an invalid length. [ 689.396365][T16994] netlink: 'syz.4.2542': attribute type 11 has an invalid length. [ 689.409987][T16994] netlink: 188816 bytes leftover after parsing attributes in process `syz.4.2542'. [ 695.216225][ T5936] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 697.556306][T17025] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.2548'. [ 697.757685][T17031] netlink: 'syz.7.2549': attribute type 29 has an invalid length. [ 698.210196][T17035] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2551'. [ 698.581787][T17031] netlink: 'syz.7.2549': attribute type 29 has an invalid length. [ 698.968290][T17055] netlink: 'syz.7.2557': attribute type 11 has an invalid length. [ 699.040773][T17055] netlink: 184116 bytes leftover after parsing attributes in process `syz.7.2557'. [ 699.232024][T17065] netlink: 192440 bytes leftover after parsing attributes in process `syz.4.2556'. [ 699.245147][T17065] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 699.340682][T17061] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2556'. [ 700.460866][T17100] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2566'. [ 701.802457][T17119] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2569'. [ 701.884913][T17119] netlink: del zone limit has 4 unknown bytes [ 701.989993][T17108] delete_channel: no stack [ 702.284402][T17114] syzkaller0: entered promiscuous mode [ 702.307462][T17114] syzkaller0: entered allmulticast mode [ 705.093826][T17131] netlink: 65051 bytes leftover after parsing attributes in process `syz.7.2574'. [ 705.103986][T17134] netlink: 'syz.5.2573': attribute type 25 has an invalid length. [ 705.115048][T17134] netlink: 'syz.5.2573': attribute type 28 has an invalid length. [ 705.170452][ T5963] bridge_slave_1: left allmulticast mode [ 705.196512][ T5963] bridge_slave_1: left promiscuous mode [ 705.212603][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.245177][ T5963] bridge_slave_0: left allmulticast mode [ 705.250908][ T5963] bridge_slave_0: left promiscuous mode [ 705.278825][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.561293][T17148] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2577'. [ 706.464035][T17144] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.2577'. [ 706.473589][T17144] bridge_slave_1: default FDB implementation only supports local addresses [ 709.603230][T17220] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 709.610359][T17220] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 711.387962][T17255] netlink: 'syz.7.2608': attribute type 21 has an invalid length. [ 711.900838][T17257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 712.045274][T17275] netlink: 'syz.7.2612': attribute type 10 has an invalid length. [ 712.793434][T17287] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2616'. [ 712.904508][T17294] netlink: 'syz.4.2616': attribute type 10 has an invalid length. [ 713.886259][T17294] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.2616'. [ 713.901121][T17299] netlink: 'syz.5.2620': attribute type 19 has an invalid length. [ 713.925872][T17299] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2620'. [ 713.941856][T17300] netlink: 'syz.6.2621': attribute type 2 has an invalid length. [ 714.004369][T17300] netlink: 'syz.6.2621': attribute type 8 has an invalid length. [ 714.017070][T17300] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2621'. [ 714.030552][T17287] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2616'. [ 715.515284][T17317] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2623'. [ 715.576921][T17321] netlink: 'syz.6.2624': attribute type 9 has an invalid length. [ 715.594449][T17321] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.2624'. [ 715.696922][T17324] netlink: 'syz.6.2624': attribute type 9 has an invalid length. [ 715.734181][T17324] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.2624'. [ 715.771348][T17327] netlink: 'syz.4.2627': attribute type 29 has an invalid length. [ 715.786536][T17327] netlink: 'syz.4.2627': attribute type 29 has an invalid length. [ 715.972191][T17325] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2626'. [ 716.014669][T17325] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2626'. [ 717.904333][T17376] validate_nla: 2 callbacks suppressed [ 717.904350][T17376] netlink: 'syz.4.2641': attribute type 29 has an invalid length. [ 717.908766][T17375] netlink: 'syz.4.2641': attribute type 29 has an invalid length. [ 718.592970][T17396] netlink: 'syz.5.2646': attribute type 10 has an invalid length. [ 718.634348][T17396] geneve0: entered promiscuous mode [ 718.691190][T17396] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 719.045590][T17405] netlink: 'syz.5.2650': attribute type 4 has an invalid length. [ 719.084545][T17405] __nla_validate_parse: 6 callbacks suppressed [ 719.131766][T17405] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2650'. [ 720.419940][T17431] netlink: 'syz.6.2656': attribute type 29 has an invalid length. [ 720.485498][T17431] netlink: 'syz.6.2656': attribute type 29 has an invalid length. [ 720.602511][T17434] netlink: 'syz.6.2656': attribute type 29 has an invalid length. [ 721.188771][T17460] netlink: 105120 bytes leftover after parsing attributes in process `syz.7.2665'. [ 721.206253][T17460] netlink: 16126 bytes leftover after parsing attributes in process `syz.7.2665'. [ 721.331333][T17462] netlink: 'syz.5.2666': attribute type 2 has an invalid length. [ 721.339806][T17462] netlink: 'syz.5.2666': attribute type 8 has an invalid length. [ 721.351819][T17462] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2666'. [ 721.985443][T17480] netlink: 'syz.5.2671': attribute type 29 has an invalid length. [ 722.039153][T17486] netlink: 16054 bytes leftover after parsing attributes in process `syz.6.2673'. [ 726.047068][T17522] validate_nla: 2 callbacks suppressed [ 726.047086][T17522] netlink: 'syz.4.2681': attribute type 3 has an invalid length. [ 726.066717][T17522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2681'. [ 730.539076][T17543] netlink: 'syz.5.2687': attribute type 29 has an invalid length. [ 730.762637][T17543] netlink: 'syz.5.2687': attribute type 29 has an invalid length. [ 730.828239][T17544] netlink: 'syz.5.2687': attribute type 29 has an invalid length. [ 731.592038][ T5949] tipc: Subscription rejected, illegal request [ 732.119167][T17581] netlink: 'syz.5.2696': attribute type 29 has an invalid length. [ 732.349185][T17581] netlink: 'syz.5.2696': attribute type 29 has an invalid length. [ 732.669267][T17584] netlink: 'syz.5.2696': attribute type 29 has an invalid length. [ 732.684903][T17594] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2697'. [ 732.701497][T17594] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2697'. [ 732.735237][T17593] netlink: 'syz.4.2697': attribute type 46 has an invalid length. [ 732.743193][T17593] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2697'. [ 732.843176][T17596] netlink: 'syz.6.2698': attribute type 8 has an invalid length. [ 732.876644][T17596] netlink: 161700 bytes leftover after parsing attributes in process `syz.6.2698'. [ 733.112020][T17593] netlink: 'syz.4.2697': attribute type 2 has an invalid length. [ 733.123775][T17596] pim6reg1: entered allmulticast mode [ 733.213687][T17593] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2697'. [ 733.928095][T17610] netlink: 'syz.4.2702': attribute type 23 has an invalid length. [ 734.918526][T17622] netlink: 'syz.6.2707': attribute type 29 has an invalid length. [ 735.051829][T17632] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.2709'. [ 735.835564][T17622] netlink: 'syz.6.2707': attribute type 29 has an invalid length. [ 735.952624][T17626] netlink: 'syz.6.2707': attribute type 29 has an invalid length. [ 736.258503][T17649] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2715'. [ 736.284762][T17649] hsr0: entered promiscuous mode [ 736.290191][T17649] bridge0: port 3(hsr0) entered blocking state [ 736.375185][T17649] bridge0: port 3(hsr0) entered disabled state [ 736.407891][T17649] hsr0: entered allmulticast mode [ 736.432893][T17649] hsr_slave_0: entered allmulticast mode [ 736.451444][T17649] hsr_slave_1: entered allmulticast mode [ 736.486819][T17649] bridge0: port 3(hsr0) entered blocking state [ 736.493249][T17649] bridge0: port 3(hsr0) entered forwarding state [ 737.524081][T17656] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2716'. [ 737.532333][T17658] netlink: 199824 bytes leftover after parsing attributes in process `syz.6.2718'. [ 737.619797][T17656] bridge_slave_1: default FDB implementation only supports local addresses [ 737.687876][T17655] validate_nla: 1 callbacks suppressed [ 737.687898][T17655] netlink: 'syz.7.2717': attribute type 11 has an invalid length. [ 737.780273][T17655] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2717'. [ 738.918875][T17675] delete_channel: no stack [ 738.930983][T17662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.941565][T17680] netlink: 'syz.5.2723': attribute type 29 has an invalid length. [ 740.089825][T17685] netlink: 'syz.4.2724': attribute type 28 has an invalid length. [ 740.124857][T17685] netlink: 'syz.4.2724': attribute type 29 has an invalid length. [ 740.152725][T17685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2724'. [ 740.248102][T17690] delete_channel: no stack [ 740.469733][T17680] netlink: 'syz.5.2723': attribute type 29 has an invalid length. [ 740.514018][T17688] delete_channel: no stack [ 740.537251][T17688] delete_channel: no stack [ 740.878978][T17683] netlink: 'syz.5.2723': attribute type 29 has an invalid length. [ 741.397605][T17706] veth0_vlan: entered allmulticast mode [ 741.735288][T17711] syzkaller0: entered promiscuous mode [ 741.751226][T17711] syzkaller0: entered allmulticast mode [ 741.985890][T17716] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2733'. [ 745.490751][T17719] netlink: 'syz.6.2733': attribute type 10 has an invalid length. [ 745.560629][T17718] veth1_to_bond: entered allmulticast mode [ 745.716306][T17734] syzkaller0: entered promiscuous mode [ 745.717281][T17736] netlink: 208064 bytes leftover after parsing attributes in process `syz.7.2738'. [ 745.739911][T17734] syzkaller0: entered allmulticast mode [ 745.825155][T17736] netlink: 208064 bytes leftover after parsing attributes in process `syz.7.2738'. [ 745.855911][T17736] openvswitch: netlink: Message has 4 unknown bytes. [ 745.953878][T17747] netlink: 'syz.4.2739': attribute type 29 has an invalid length. [ 746.183207][T17747] netlink: 'syz.4.2739': attribute type 29 has an invalid length. [ 746.192051][T17751] netlink: 'syz.4.2739': attribute type 29 has an invalid length. [ 746.452018][T17753] sctp: [Deprecated]: syz.7.2740 (pid 17753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 746.452018][T17753] Use struct sctp_sack_info instead [ 746.477215][T17756] netlink: 13951 bytes leftover after parsing attributes in process `syz.6.2741'. [ 747.544011][ T5963] hsr_slave_0: left promiscuous mode [ 747.558520][ T5963] hsr_slave_1: left promiscuous mode [ 747.608105][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.614708][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.624520][ T5963] veth1_macvtap: left promiscuous mode [ 747.639377][ T5963] veth1_vlan: left promiscuous mode [ 747.650655][ T5963] veth0_vlan: left promiscuous mode [ 747.779610][T17784] netlink: 'syz.6.2750': attribute type 29 has an invalid length. [ 749.500481][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 749.674628][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 750.637681][ T5963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.647317][ T5963] bond_slave_1 (unregistering): left promiscuous mode [ 750.655103][ T5963] bond_slave_1 (unregistering): left allmulticast mode [ 750.709879][ T5963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.721179][ T5963] bond_slave_0 (unregistering): left promiscuous mode [ 750.729718][ T5963] bond_slave_0 (unregistering): left allmulticast mode [ 750.979217][ T5963] bond0 (unregistering): Released all slaves [ 751.037047][T17784] netlink: 'syz.6.2750': attribute type 29 has an invalid length. [ 751.201020][T17797] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2753'. [ 751.233914][T17798] netlink: 'syz.7.2752': attribute type 39 has an invalid length. [ 752.010852][T17824] netlink: 'syz.4.2762': attribute type 29 has an invalid length. [ 752.052974][T17824] netlink: 'syz.4.2762': attribute type 29 has an invalid length. [ 752.093447][T17827] netlink: 'syz.4.2762': attribute type 29 has an invalid length. [ 754.886290][T17848] netlink: 'syz.7.2769': attribute type 10 has an invalid length. [ 754.894270][T17848] netlink: 3819 bytes leftover after parsing attributes in process `syz.7.2769'. [ 755.972138][T17868] netlink: 'syz.7.2774': attribute type 29 has an invalid length. [ 755.995172][T17868] netlink: 'syz.7.2774': attribute type 29 has an invalid length. [ 756.008405][T17868] netlink: 'syz.7.2774': attribute type 29 has an invalid length. [ 758.917798][T17917] netlink: 'syz.7.2787': attribute type 2 has an invalid length. [ 758.941041][T17906] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 758.951282][T17917] netlink: 'syz.7.2787': attribute type 1 has an invalid length. [ 758.951308][T17917] netlink: 152 bytes leftover after parsing attributes in process `syz.7.2787'. [ 759.092093][T17919] netlink: 'syz.5.2786': attribute type 29 has an invalid length. [ 759.141616][T17919] netlink: 'syz.5.2786': attribute type 29 has an invalid length. [ 759.365277][T17921] netlink: 'syz.5.2786': attribute type 29 has an invalid length. [ 764.065052][T17950] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2795'. [ 764.122918][T17950] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2795'. [ 764.671643][T17970] netlink: 'syz.4.2801': attribute type 29 has an invalid length. [ 764.693862][T17970] netlink: 'syz.4.2801': attribute type 29 has an invalid length. [ 764.714452][T17970] netlink: 'syz.4.2801': attribute type 29 has an invalid length. [ 765.430418][T17991] netlink: 'syz.7.2810': attribute type 10 has an invalid length. [ 765.467839][T17991] hsr_slave_0: left promiscuous mode [ 765.523334][T17991] hsr_slave_1: left promiscuous mode [ 765.917805][T17997] netlink: 'syz.4.2807': attribute type 10 has an invalid length. [ 765.972144][T17985] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 767.561763][T18017] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2814'. [ 769.382509][T18051] netlink: 'syz.6.2824': attribute type 29 has an invalid length. [ 769.908713][T18051] netlink: 'syz.6.2824': attribute type 29 has an invalid length. [ 769.939952][T18052] netlink: 'syz.6.2824': attribute type 29 has an invalid length. [ 770.135196][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 770.780342][T18056] delete_channel: no stack [ 772.270843][T18098] netlink: 'syz.6.2836': attribute type 29 has an invalid length. [ 772.391079][T18100] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2838'. [ 772.409380][T18098] netlink: 'syz.6.2836': attribute type 29 has an invalid length. [ 772.479754][T18105] netlink: 'syz.6.2836': attribute type 29 has an invalid length. [ 772.870280][T18124] netlink: 'syz.4.2844': attribute type 3 has an invalid length. [ 772.892697][T18124] netlink: 'syz.4.2844': attribute type 1 has an invalid length. [ 772.903081][T18124] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2844'. [ 773.047292][T18132] netlink: 'syz.5.2847': attribute type 10 has an invalid length. [ 773.057844][T18132] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2847'. [ 773.078539][T18132] ipvlan1: entered promiscuous mode [ 773.105794][T18132] ipvlan1: entered allmulticast mode [ 773.111178][T18132] veth0_vlan: entered allmulticast mode [ 773.149078][T18132] bridge0: port 3(ipvlan1) entered blocking state [ 773.167975][T18132] bridge0: port 3(ipvlan1) entered disabled state [ 773.204454][T18132] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 773.507585][T18140] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2848'. [ 774.151931][T18166] netlink: 'syz.7.2853': attribute type 29 has an invalid length. [ 774.162087][T18165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 774.209317][T18165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 774.247002][T18166] netlink: 'syz.7.2853': attribute type 29 has an invalid length. [ 774.274366][T18165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 774.346568][T18165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 774.485800][T18165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 774.506345][T18165] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2854'. [ 775.273575][T18182] validate_nla: 1 callbacks suppressed [ 775.273591][T18182] netlink: 'syz.7.2857': attribute type 1 has an invalid length. [ 775.314520][T18182] netlink: 'syz.7.2857': attribute type 4 has an invalid length. [ 775.922161][ C1] icmp: detected local route for 172.20.20.22 during ICMP sending, src 0.0.0.32 [ 776.043631][T18176] delete_channel: no stack [ 776.524144][T18202] netlink: 'syz.5.2865': attribute type 29 has an invalid length. [ 776.563383][T18202] netlink: 'syz.5.2865': attribute type 29 has an invalid length. [ 776.603732][T18211] netlink: 'syz.5.2865': attribute type 29 has an invalid length. [ 776.746950][T18218] netlink: 'syz.4.2868': attribute type 4 has an invalid length. [ 776.747960][T18217] netlink: 'syz.4.2868': attribute type 4 has an invalid length. [ 776.936479][T18228] netlink: 'syz.4.2871': attribute type 2 has an invalid length. [ 777.087241][T18239] netlink: 'syz.7.2874': attribute type 29 has an invalid length. [ 777.105287][T18239] netlink: 'syz.7.2874': attribute type 29 has an invalid length. [ 778.516502][T18271] __nla_validate_parse: 52 callbacks suppressed [ 778.516552][T18271] netlink: 181400 bytes leftover after parsing attributes in process `syz.5.2883'. [ 778.721329][T18285] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.2888'. [ 779.332297][T18308] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2893'. [ 779.523801][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 10.1.1.1 [ 780.733311][T18353] validate_nla: 11 callbacks suppressed [ 780.733332][T18353] netlink: 'syz.5.2906': attribute type 39 has an invalid length. [ 780.779493][T18354] netlink: 'syz.6.2904': attribute type 3 has an invalid length. [ 780.827700][T18354] netlink: 'syz.6.2904': attribute type 1 has an invalid length. [ 780.864738][T18354] netlink: 130160 bytes leftover after parsing attributes in process `syz.6.2904'. [ 781.152298][T18356] netlink: 'syz.7.2907': attribute type 19 has an invalid length. [ 781.202298][T18356] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2907'. [ 782.235693][T18390] netlink: 'syz.4.2914': attribute type 29 has an invalid length. [ 782.244178][T18390] netlink: 'syz.4.2914': attribute type 29 has an invalid length. [ 782.261875][T18388] netlink: 'syz.4.2914': attribute type 29 has an invalid length. [ 782.854804][ C1] icmp: detected local route for 172.20.20.10 during ICMP sending, src 114.111.117.112 [ 783.181819][T18399] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2917'. [ 783.209267][T18395] netlink: 'syz.5.2916': attribute type 5 has an invalid length. [ 783.255543][T18395] netlink: 'syz.5.2916': attribute type 1 has an invalid length. [ 783.274611][T18395] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.2916'. [ 783.435954][T18410] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2920'. [ 783.758630][T18427] netlink: 'syz.4.2926': attribute type 29 has an invalid length. [ 783.770245][T18422] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2924'. [ 783.798093][T14923] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 783.907393][T18422] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 783.925438][T18422] CPU: 0 PID: 18422 Comm: syz.6.2924 Not tainted syzkaller #0 [ 783.932979][T18422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 783.943234][T18422] Call Trace: [ 783.946542][T18422] [ 783.949485][T18422] dump_stack_lvl+0x18c/0x250 [ 783.954194][T18422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 783.960393][T18422] ? show_regs_print_info+0x20/0x20 [ 783.965643][T18422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 783.971875][T18422] sysfs_warn_dup+0x8e/0xa0 [ 783.976405][T18422] sysfs_do_create_link_sd+0xc0/0x110 [ 783.981803][T18422] device_add_class_symlinks+0x1cf/0x240 [ 783.987827][T18422] device_add+0x507/0xc20 [ 783.992191][T18422] wiphy_register+0x1dad/0x2ae0 [ 783.997074][T18422] ? cfg80211_event_work+0x40/0x40 [ 784.002211][T18422] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 784.008314][T18422] ieee80211_register_hw+0x3464/0x4250 [ 784.013991][T18422] ? ieee80211_tasklet_handler+0x20/0x20 [ 784.019650][T18422] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 784.025841][T18422] ? __debug_object_init+0xec/0x450 [ 784.031070][T18422] ? __asan_memset+0x22/0x40 [ 784.035685][T18422] ? __hrtimer_init+0x186/0x270 [ 784.040566][T18422] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 784.046359][T18422] ? mac80211_hwsim_free+0x220/0x220 [ 784.051662][T18422] ? rcu_is_watching+0x15/0xb0 [ 784.056566][T18422] ? kstrndup+0xbd/0x140 [ 784.060838][T18422] hwsim_new_radio_nl+0xdc9/0x1a90 [ 784.065964][T18422] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 784.071936][T18422] ? mark_lock+0x94/0x320 [ 784.076300][T18422] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 784.082741][T18422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 784.088924][T18422] ? lockdep_hardirqs_on+0x98/0x150 [ 784.094292][T18422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 784.100659][T18422] genl_family_rcv_msg_doit+0x211/0x310 [ 784.106323][T18422] ? end_current_label_crit_section+0x170/0x170 [ 784.113298][T18422] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 784.119312][T18422] ? bpf_lsm_capable+0x9/0x10 [ 784.124021][T18422] ? security_capable+0x89/0xb0 [ 784.128987][T18422] genl_rcv_msg+0x619/0x7a0 [ 784.133604][T18422] ? genl_bind+0x360/0x360 [ 784.138033][T18422] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 784.144402][T18422] netlink_rcv_skb+0x241/0x4d0 [ 784.149292][T18422] ? genl_bind+0x360/0x360 [ 784.153913][T18422] ? netlink_ack+0x1180/0x1180 [ 784.158801][T18422] ? __lock_acquire+0x7d40/0x7d40 [ 784.163849][T18422] ? down_read+0x1ac/0x2e0 [ 784.168291][T18422] genl_rcv+0x28/0x40 [ 784.172465][T18422] netlink_unicast+0x751/0x8d0 [ 784.177360][T18422] netlink_sendmsg+0x8d0/0xbf0 [ 784.182157][T18422] ? lockdep_hardirqs_on+0x98/0x150 [ 784.187550][T18422] ? netlink_getsockopt+0x590/0x590 [ 784.192773][T18422] ? netlink_getsockopt+0x590/0x590 [ 784.197998][T18422] ? netlink_getsockopt+0x590/0x590 [ 784.203393][T18422] ____sys_sendmsg+0x5ba/0x960 [ 784.208179][T18422] ? __asan_memset+0x22/0x40 [ 784.213154][T18422] ? __sys_sendmsg_sock+0x30/0x30 [ 784.218197][T18422] ? __import_iovec+0x5f2/0x850 [ 784.223079][T18422] ? import_iovec+0x73/0xa0 [ 784.227690][T18422] ___sys_sendmsg+0x2a6/0x360 [ 784.232390][T18422] ? __sys_sendmsg+0x2a0/0x2a0 [ 784.237287][T18422] ? debug_mutex_init+0x38/0x70 [ 784.242181][T18422] __se_sys_sendmsg+0x1c2/0x2b0 [ 784.247054][T18422] ? __x64_sys_sendmsg+0x80/0x80 [ 784.252022][T18422] ? lockdep_hardirqs_on+0x98/0x150 [ 784.257239][T18422] do_syscall_64+0x55/0xa0 [ 784.261775][T18422] ? clear_bhb_loop+0x40/0x90 [ 784.266470][T18422] ? clear_bhb_loop+0x40/0x90 [ 784.271166][T18422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 784.277081][T18422] RIP: 0033:0x7fe22f79c819 [ 784.281516][T18422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.301143][T18422] RSP: 002b:00007fe2306c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 784.309939][T18422] RAX: ffffffffffffffda RBX: 00007fe22fa15fa0 RCX: 00007fe22f79c819 [ 784.318101][T18422] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 784.326093][T18422] RBP: 00007fe22f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 784.334081][T18422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.342073][T18422] R13: 00007fe22fa16038 R14: 00007fe22fa15fa0 R15: 00007ffcd13a0ce8 [ 784.350078][T18422] [ 784.830561][T18441] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2930'. [ 784.840655][T18441] openvswitch: netlink: Key type 29 is not supported [ 785.050217][T18445] netlink: 12226 bytes leftover after parsing attributes in process `syz.6.2932'. [ 785.815131][T14923] Bluetooth: hci1: command 0x0406 tx timeout [ 786.315119][T18467] validate_nla: 12 callbacks suppressed [ 786.315141][T18467] netlink: 'syz.4.2938': attribute type 10 has an invalid length. [ 786.382954][T18467] team0: Device hsr_slave_0 failed to register rx_handler [ 786.673272][T18471] netlink: 'syz.7.2939': attribute type 29 has an invalid length. [ 786.711633][T18471] netlink: 'syz.7.2939': attribute type 29 has an invalid length. [ 786.729837][T18474] netlink: 'syz.7.2939': attribute type 29 has an invalid length. [ 787.095062][T18480] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2943'. [ 787.735543][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 172.30.0.8 [ 787.814982][ C0] icmp: detected local route for 172.20.20.10 during ICMP sending, src 100.1.1.1 [ 787.948045][T18500] sctp: [Deprecated]: syz.6.2949 (pid 18500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 787.948045][T18500] Use struct sctp_sack_info instead [ 789.268253][T18515] netlink: 'syz.5.2952': attribute type 29 has an invalid length. [ 789.322808][T18515] netlink: 'syz.5.2952': attribute type 29 has an invalid length. [ 789.355141][T18516] netlink: 'syz.5.2952': attribute type 29 has an invalid length. [ 790.423563][T18519] netlink: 10 bytes leftover after parsing attributes in process `syz.6.2953'. [ 790.565284][ T5951] tipc: Subscription rejected, illegal request [ 790.591932][T18529] netlink: 'syz.6.2953': attribute type 1 has an invalid length. [ 790.617204][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 790.635926][T18521] netlink: 'syz.7.2954': attribute type 21 has an invalid length. [ 790.644251][T18521] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2954'. [ 790.686670][T18529] netlink: 'syz.6.2953': attribute type 2 has an invalid length. [ 790.695684][T18529] netlink: 126304 bytes leftover after parsing attributes in process `syz.6.2953'. [ 790.798934][T18520] delete_channel: no stack [ 790.803612][T18520] delete_channel: no stack [ 790.830092][T18536] delete_channel: no stack [ 790.855945][T18536] delete_channel: no stack [ 791.131015][T18542] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.2959'. [ 791.346069][T18552] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2962'. [ 791.585703][T18544] validate_nla: 11 callbacks suppressed [ 791.585727][T18544] netlink: 'syz.4.2961': attribute type 1 has an invalid length. [ 791.599874][T18544] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2961'. [ 791.644098][T18544] netlink: 'syz.4.2961': attribute type 4 has an invalid length. [ 791.726656][T18544] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2961'. [ 792.005417][T18544] .`: renamed from bond0 (while UP) [ 792.291478][T18569] hsr0: entered promiscuous mode [ 792.296907][T18569] hsr0: entered allmulticast mode [ 792.302009][T18569] hsr_slave_0: entered allmulticast mode [ 792.308899][T18569] hsr_slave_1: entered allmulticast mode [ 792.399478][T18578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2970'. [ 792.424719][T18578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2970'. [ 792.456966][T18578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2970'. [ 792.870698][T14923] Bluetooth: hci3: unexpected event 0x3b length: 15 > 10 [ 793.067514][T18589] netlink: 'syz.7.2973': attribute type 17 has an invalid length. [ 793.544103][T18599] netlink: 'syz.7.2976': attribute type 27 has an invalid length. [ 793.553226][T18599] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 794.140567][T18608] netlink: 'syz.6.2979': attribute type 29 has an invalid length. [ 794.306236][T14923] Bluetooth: hci2: ISO packet for unknown connection handle 33 [ 794.613956][T18608] netlink: 'syz.6.2979': attribute type 29 has an invalid length. [ 794.689229][T18610] netlink: 'syz.6.2979': attribute type 29 has an invalid length. [ 795.181875][T18639] netlink: 'syz.7.2983': attribute type 1 has an invalid length. [ 795.199051][T18639] netlink: 'syz.7.2983': attribute type 4 has an invalid length. [ 795.383560][T18644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 795.662352][T18657] __nla_validate_parse: 5 callbacks suppressed [ 795.662373][T18657] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2990'. [ 795.957496][T18659] syzkaller0: entered promiscuous mode [ 795.991285][T18659] syzkaller0: entered allmulticast mode [ 796.632688][T18676] syzkaller0: entered promiscuous mode [ 796.652444][T18676] syzkaller0: entered allmulticast mode [ 797.048361][T18689] netlink: 'syz.6.2997': attribute type 9 has an invalid length. [ 797.484477][T18713] netlink: 'syz.7.3004': attribute type 29 has an invalid length. [ 797.699820][T18713] netlink: 'syz.7.3004': attribute type 29 has an invalid length. [ 797.867560][T18715] netlink: 'syz.7.3004': attribute type 29 has an invalid length. [ 798.181960][T18737] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3007'. [ 798.228928][T18736] netlink: 'syz.7.3009': attribute type 1 has an invalid length. [ 798.244904][T18736] netlink: 15743 bytes leftover after parsing attributes in process `syz.7.3009'. [ 798.246055][T18732] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3007'. [ 798.330468][T18740] netlink: 'syz.5.3010': attribute type 2 has an invalid length. [ 799.644277][T18778] netlink: 'syz.4.3022': attribute type 10 has an invalid length. [ 800.265665][T18778] wlan1: mtu less than device minimum [ 800.274267][T18778] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 800.312403][T18779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3021'. [ 800.502991][T18792] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.3025'. [ 800.942493][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 801.817082][T18829] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.3034'. [ 802.207828][T18837] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3037'. [ 803.648777][T18847] netlink: 192440 bytes leftover after parsing attributes in process `syz.7.3039'. [ 803.684883][T18847] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 803.949785][T18860] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3044'. [ 804.196777][T18871] netlink: 'syz.6.3047': attribute type 13 has an invalid length. [ 804.220085][T18871] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3047'. [ 804.255511][T18871] syz_tun: refused to change device tx_queue_len [ 804.318922][T18871] syzkaller0: entered allmulticast mode [ 804.929316][T18891] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3052'. [ 805.099743][T18891] team0: Port device team_slave_0 removed [ 805.118101][T18891] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 806.397360][T18919] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3059'. [ 806.410609][T18920] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3059'. [ 806.876919][T18932] netlink: 'syz.6.3056': attribute type 10 has an invalid length. [ 807.032196][T18940] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3063'. [ 808.288854][T18940] netlink: 4083 bytes leftover after parsing attributes in process `syz.7.3063'. [ 809.030390][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.038468][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.939486][T19019] bridge_slave_1: left allmulticast mode [ 812.971464][T19019] bridge_slave_1: left promiscuous mode [ 812.985786][T19019] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.082068][T19019] bridge_slave_0: left allmulticast mode [ 813.124412][T19019] bridge_slave_0: left promiscuous mode [ 813.147050][T19019] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.614167][T19034] netlink: 61211 bytes leftover after parsing attributes in process `syz.6.3090'. [ 817.782421][T19053] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.3092'. [ 817.822761][T19053] netlink: zone id is out of range [ 818.136801][T19057] netlink: 209844 bytes leftover after parsing attributes in process `syz.7.3094'. [ 820.092129][T19083] netlink: 'syz.6.3101': attribute type 64 has an invalid length. [ 820.837874][T19092] netlink: 'syz.6.3106': attribute type 10 has an invalid length. [ 820.994301][T19092] team0: Device vxcan1 is of different type [ 821.357647][T19099] netlink: 16358 bytes leftover after parsing attributes in process `syz.5.3107'. [ 821.911054][T18153] tipc: Subscription rejected, illegal request [ 822.386968][T19117] netlink: 'syz.5.3111': attribute type 21 has an invalid length. [ 822.438041][T19117] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3111'. [ 822.467066][T19117] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3111'. [ 822.636942][T19122] netlink: 'syz.4.3112': attribute type 2 has an invalid length. [ 822.675952][T19122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3112'. [ 823.841132][T19151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3118'. [ 823.859757][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3118'. [ 823.880084][T19152] netlink: 'syz.4.3119': attribute type 3 has an invalid length. [ 823.890838][T19151] netlink: 33 bytes leftover after parsing attributes in process `syz.6.3118'. [ 823.905763][T19138] netlink: 150456 bytes leftover after parsing attributes in process `syz.7.3116'. [ 823.905895][T19138] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 823.939576][T19152] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.3119'. [ 823.965038][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3118'. [ 824.147611][T19158] netlink: 'syz.6.3122': attribute type 2 has an invalid length. [ 824.164675][T19158] netlink: 'syz.6.3122': attribute type 4 has an invalid length. [ 824.198494][T19158] netlink: 'syz.6.3122': attribute type 11 has an invalid length. [ 824.274623][T19164] netlink: 'syz.5.3120': attribute type 10 has an invalid length. [ 824.631867][T19164] team0: Device veth1_macvtap failed to register rx_handler [ 824.941137][T19176] netlink: 'syz.6.3125': attribute type 8 has an invalid length. [ 825.624701][T19188] netlink: 'syz.6.3129': attribute type 25 has an invalid length. [ 825.632609][T19188] netlink: 'syz.6.3129': attribute type 28 has an invalid length. [ 825.862725][T19196] netlink: 'syz.5.3128': attribute type 27 has an invalid length. [ 825.872461][T19196] netlink: 'syz.5.3128': attribute type 4 has an invalid length. [ 825.886147][T19201] netlink: 'syz.5.3128': attribute type 27 has an invalid length. [ 825.914612][T19201] netlink: 'syz.5.3128': attribute type 4 has an invalid length. [ 826.693457][T19221] netlink: 'syz.4.3137': attribute type 10 has an invalid length. [ 826.777837][T19221] .`: (slave bond_slave_0): Releasing backup interface [ 827.090992][T19220] __nla_validate_parse: 8 callbacks suppressed [ 827.091038][T19220] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3136'. [ 827.520027][T19217] delete_channel: no stack [ 827.587922][T19220] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 830.360641][T19262] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3148'. [ 830.419905][T19262] netlink: 6324 bytes leftover after parsing attributes in process `syz.6.3148'. [ 830.464711][T19262] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3148'. [ 831.191710][T19285] netlink: 'syz.6.3154': attribute type 1 has an invalid length. [ 831.199788][T19285] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.3154'. [ 831.225780][T19285] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3154'. [ 832.044664][T19301] netlink: 142556 bytes leftover after parsing attributes in process `syz.7.3159'. [ 832.433491][T19301] netlink: 'syz.7.3159': attribute type 1 has an invalid length. [ 832.451888][T19301] netlink: 'syz.7.3159': attribute type 2 has an invalid length. [ 832.497849][T19301] netlink: 'syz.7.3159': attribute type 3 has an invalid length. [ 832.517135][T19301] netlink: 'syz.7.3159': attribute type 4 has an invalid length. [ 832.547207][T19302] netlink: 'syz.6.3157': attribute type 28 has an invalid length. [ 832.644487][T19302] netlink: 'syz.6.3157': attribute type 29 has an invalid length. [ 832.955134][T19302] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3157'. [ 833.142644][T19323] netlink: 'syz.7.3163': attribute type 10 has an invalid length. [ 833.191808][T19323] team0: Device xfrm0 is of different type [ 834.262033][T19345] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3168'. [ 834.560957][ C0] [ 834.560967][ C0] ================================ [ 834.560973][ C0] WARNING: inconsistent lock state [ 834.560978][ C0] syzkaller #0 Not tainted [ 834.560988][ C0] -------------------------------- [ 834.560993][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 834.561000][ C0] syz.6.3172/19356 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 834.561019][ C0] ffff8880197026a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 834.561068][ C0] {INITIAL USE} state was registered at: [ 834.561074][ C0] lock_acquire+0x19e/0x420 [ 834.561093][ C0] _raw_spin_lock+0x2e/0x40 [ 834.561110][ C0] htab_lock_bucket+0x17d/0x300 [ 834.561126][ C0] htab_lru_map_update_elem+0x2c6/0x990 [ 834.561142][ C0] bpf_map_update_value+0x660/0x720 [ 834.561156][ C0] map_update_elem+0x57b/0x700 [ 834.561172][ C0] __sys_bpf+0x6b5/0x890 [ 834.561187][ C0] __x64_sys_bpf+0x7c/0x90 [ 834.561201][ C0] do_syscall_64+0x55/0xa0 [ 834.561215][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.561234][ C0] irq event stamp: 3446 [ 834.561240][ C0] hardirqs last enabled at (3445): [] pcpu_memcg_post_alloc_hook+0x282/0x3f0 [ 834.561266][ C0] hardirqs last disabled at (3446): [] exc_debug+0x73/0x140 [ 834.561284][ C0] softirqs last enabled at (2646): [] __dev_queue_xmit+0x265/0x3660 [ 834.561309][ C0] softirqs last disabled at (2640): [] __dev_queue_xmit+0x265/0x3660 [ 834.561333][ C0] [ 834.561333][ C0] other info that might help us debug this: [ 834.561338][ C0] Possible unsafe locking scenario: [ 834.561338][ C0] [ 834.561343][ C0] CPU0 [ 834.561346][ C0] ---- [ 834.561349][ C0] lock(&htab->lockdep_key); [ 834.561359][ C0] [ 834.561363][ C0] lock(&htab->lockdep_key); [ 834.561373][ C0] [ 834.561373][ C0] *** DEADLOCK *** [ 834.561373][ C0] [ 834.561377][ C0] no locks held by syz.6.3172/19356. [ 834.561384][ C0] [ 834.561384][ C0] stack backtrace: [ 834.561389][ C0] CPU: 0 PID: 19356 Comm: syz.6.3172 Not tainted syzkaller #0 [ 834.561405][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 834.561415][ C0] Call Trace: [ 834.561422][ C0] <#DB> [ 834.561430][ C0] dump_stack_lvl+0x18c/0x250 [ 834.561461][ C0] ? show_regs_print_info+0x20/0x20 [ 834.561497][ C0] ? print_usage_bug+0x475/0x690 [ 834.561518][ C0] ? verify_lock_unused+0x18/0x140 [ 834.561545][ C0] lock_acquire+0x2c2/0x420 [ 834.561562][ C0] ? internal_get_user_pages_fast+0xaa8/0x2760 [ 834.561602][ C0] ? htab_lock_bucket+0x17d/0x300 [ 834.561625][ C0] ? read_lock_is_recursive+0x20/0x20 [ 834.561666][ C0] _raw_spin_lock+0x2e/0x40 [ 834.561685][ C0] ? htab_lock_bucket+0x17d/0x300 [ 834.561703][ C0] htab_lock_bucket+0x17d/0x300 [ 834.561732][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 834.561752][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 834.561782][ C0] ? jhash+0x34e/0x740 [ 834.561804][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 834.561831][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 834.561855][ C0] ? __cant_sleep+0x220/0x220 [ 834.561884][ C0] bpf_prog_84fd943993e0b400+0x46/0x4a [ 834.561913][ C0] ? bpf_overflow_handler+0xde/0x510 [ 834.561937][ C0] bpf_overflow_handler+0x1fc/0x510 [ 834.561966][ C0] ? bpf_overflow_handler+0xde/0x510 [ 834.561989][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 834.562009][ C0] ? lock_release+0xb5/0x8c0 [ 834.562037][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 834.562061][ C0] __perf_event_overflow+0x447/0x630 [ 834.562092][ C0] perf_swevent_event+0x319/0x570 [ 834.562116][ C0] ? perf_tp_event+0x1520/0x1520 [ 834.562154][ C0] perf_bp_event+0x319/0x430 [ 834.562181][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 834.562246][ C0] ? lock_acquire+0x2c2/0x420 [ 834.562276][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 834.562307][ C0] notifier_call_chain+0x197/0x380 [ 834.562333][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 834.562358][ C0] atomic_notifier_call_chain+0xda/0x180 [ 834.562383][ C0] notify_die+0x145/0x1a0 [ 834.562409][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 834.562443][ C0] ? rcu_is_watching+0x15/0xb0 [ 834.562470][ C0] notify_debug+0x2e/0x50 [ 834.562487][ C0] exc_debug+0xde/0x140 [ 834.562510][ C0] asm_exc_debug+0x1e/0x40 [ 834.562530][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 834.562549][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 834.562564][ C0] RSP: 0018:ffffc90004257b48 EFLAGS: 00050206 [ 834.562586][ C0] RAX: ffffffff842a2101 RBX: 00000000000000a0 RCX: 000000000000001f [ 834.562597][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc900042810c9 [ 834.562609][ C0] RBP: 0000000000000000 R08: ffffc900042810e7 R09: 1ffff9200085021c [ 834.562620][ C0] R10: dffffc0000000000 R11: fffff5200085021d R12: 0000200000000320 [ 834.562633][ C0] R13: 0000000000000000 R14: ffffc90004281048 R15: 0000200000000280 [ 834.562655][ C0] ? _copy_from_user+0x31/0xe0 [ 834.562686][ C0] [ 834.562691][ C0] [ 834.562696][ C0] _copy_from_user+0x8b/0xe0 [ 834.562720][ C0] copy_from_bpfptr+0x67/0x80 [ 834.562742][ C0] bpf_prog_load+0xa80/0x1670 [ 834.562778][ C0] ? map_freeze+0x420/0x420 [ 834.562819][ C0] ? __might_fault+0xaa/0x120 [ 834.562836][ C0] ? __might_fault+0xc6/0x120 [ 834.562851][ C0] ? __might_fault+0xaa/0x120 [ 834.562868][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 834.562889][ C0] ? security_bpf+0x7e/0xa0 [ 834.562915][ C0] __sys_bpf+0x5ba/0x890 [ 834.562938][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 834.562979][ C0] ? lock_chain_count+0x20/0x20 [ 834.563012][ C0] __x64_sys_bpf+0x7c/0x90 [ 834.563032][ C0] do_syscall_64+0x55/0xa0 [ 834.563047][ C0] ? clear_bhb_loop+0x40/0x90 [ 834.563068][ C0] ? clear_bhb_loop+0x40/0x90 [ 834.563091][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 834.563111][ C0] RIP: 0033:0x7fe22f79c819 [ 834.563126][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.563139][ C0] RSP: 002b:00007fe2306c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 834.563156][ C0] RAX: ffffffffffffffda RBX: 00007fe22fa15fa0 RCX: 00007fe22f79c819 [ 834.563168][ C0] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 834.563179][ C0] RBP: 00007fe22f832c91 R08: 0000000000000000 R09: 0000000000000000 [ 834.563190][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.563200][ C0] R13: 00007fe22fa16038 R14: 00007fe22fa15fa0 R15: 00007ffcd13a0ce8 [ 834.563234][ C0] [ 835.279901][T19356] netlink: 'syz.6.3172': attribute type 21 has an invalid length. [ 835.288785][T19356] netlink: 'syz.6.3172': attribute type 12 has an invalid length. [ 835.297408][T19356] netlink: 12918 bytes leftover after parsing attributes in process `syz.6.3172'.