last executing test programs: 4m53.764126124s ago: executing program 3 (id=4170): perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xc8, 0x1fffe, 0x9, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000700), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000740)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000780)=ANY=[@ANYBLOB='b *'], 0x9) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24040014) (async) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/143, 0x8f}, {&(0x7f0000000500)=""/197, 0xc5}], 0x3, &(0x7f0000000640)=""/39, 0x27}, 0x10000) (async) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a"], 0xfdef) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002d80)={0xe, 0xe, &(0x7f0000002e40)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0afefe0000000c850000002f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000003940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000003980), 0x200000, 0x10, &(0x7f00000039c0), 0x143}, 0x48) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r6) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x71, &(0x7f0000000700), 0x8) sendmsg$inet(r7, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)="3111", 0x2}], 0x1}, 0x4040) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0xe0c, '\x00', 0x0, r6, 0x5, 0x1, 0x2}, 0x50) 4m52.07505089s ago: executing program 3 (id=4174): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x15818, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xae58, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'dummy0\x00', 0x1}) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000780), 0x4) sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000013c0)='tasks\x00', 0x2, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001400), 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x800, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="0e000000040000000400000010"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001940)={0x6, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="6110140000000000150003000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000050002000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000b7030000000000008500000033000000b70000000200000095"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x3, 0x0, 0x0, &(0x7f0000001500)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000001540)=""/143, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x80, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000001680)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000001700), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000001740)) socket$kcm(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001780)}, 0x0) sendmsg$kcm(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001840)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/239, 0xef}], 0x3}, 0x100) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x18, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4m50.872177155s ago: executing program 3 (id=4179): socket$kcm(0xa, 0x2, 0x73) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xc, 0x13, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff188500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000001b00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x4, 0x19, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open$cgroup(&(0x7f0000001b80)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100130, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000001c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_lsm={0xd, 0x5, &(0x7f0000001d40)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000001d80)='GPL\x00'}, 0x80) socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001dc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000001e00)='cpuset.cpus\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001e40)) bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x1d, 0x0, 0x0, &(0x7f0000001f40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001f80)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000002000)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x372, 0xb4}, 0x100e64, 0x80c78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0x67, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000e000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000240), 0x1003, r2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000002000020000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x101ea8, 0x2f, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104212, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x2b, 0x1, 0x0) 4m49.754310891s ago: executing program 3 (id=4184): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa2, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000020000008500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0xffffff2d, &(0x7f00000003c0)=[{&(0x7f0000000400)="c00e020031000b02d25a806f8c6394f90824fc60640004002b000100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4m49.301131638s ago: executing program 3 (id=4186): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2df33577dcf7ea9f, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000040)='./file0\x00', 0x181) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r3, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r0}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='blkio.bfq.io_service_time\x00', 0x0, 0x0) recvmsg(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/194, 0xc2}, {&(0x7f0000001400)=""/218, 0xda}, {&(0x7f0000001500)=""/206, 0xce}, {&(0x7f0000001600)=""/145, 0x91}], 0x6, &(0x7f0000001740)=""/247, 0xf7}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001880)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r6, &(0x7f00000018c0)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001900)={r2}) recvmsg$unix(r7, &(0x7f0000001b40)={&(0x7f0000001940)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f00000019c0)=""/215, 0xd7}], 0x1, &(0x7f0000001b00)=[@cred={{0x1c}}], 0x20}, 0x40010060) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001c80)={@ifindex=r4, 0x26, 0x1, 0x1, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001c00)=[0x0], &(0x7f0000001c40)=[0x0], 0x0}, 0x40) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001d00)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001cc0)={@cgroup=r5, r5, 0x2f, 0x2000, 0x0, @value=r9, @void, @void, @void, r8}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000001d40)='}\x00') r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001f80)=@bpf_lsm={0x1d, 0x1a, &(0x7f0000001d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3bb4}, [@ldst={0x3, 0x3, 0x6, 0x5, 0x6, 0x2, 0xffffffffffffffff}, @cb_func={0x18, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0xb5}]}, &(0x7f0000001e80)='GPL\x00', 0xffffffff, 0x76, &(0x7f0000001ec0)=""/118, 0x41100, 0x4, '\x00', r4, 0x1b, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001f40)=[{0x5, 0x1, 0x7, 0x6}, {0x3, 0x2, 0xd, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002080)={0xffffffff, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002040)={@cgroup=r6, r10, 0x36, 0x20, 0x0, @void, @void, @void, @value=r11, r8}, 0x20) recvmsg$unix(r1, &(0x7f0000002300)={&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002140)=""/202, 0xca}], 0x1, &(0x7f0000002280)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x2000) recvmsg$kcm(r7, &(0x7f0000002600)={&(0x7f0000002340)=@qipcrtr, 0x80, &(0x7f0000002580)=[{&(0x7f00000023c0)=""/30, 0x1e}, {&(0x7f0000002400)=""/74, 0x4a}, {&(0x7f0000002480)=""/184, 0xb8}, {&(0x7f0000002540)=""/34, 0x22}], 0x4, &(0x7f00000025c0)=""/3, 0x3}, 0x879c3cbb8bc2a459) bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x20, 0x1a, &(0x7f0000002640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2c47}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000002740)='syzkaller\x00', 0x7, 0x81, &(0x7f0000002780)=""/129, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000002840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000002880)={0x5, 0x3, 0x4, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000028c0)=[{0x4, 0x1, 0x2, 0x2}, {0x2, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x8, 0xa}], 0x10, 0xe}, 0x94) r14 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000029c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002a80)={{r14}, &(0x7f0000002a00), &(0x7f0000002a40)=r10}, 0x20) r15 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r15, &(0x7f0000002ec0)={&(0x7f0000002ac0)=@pppoe={0x18, 0x0, {0x4, @random="a8032b9d02eb", 'veth0_vlan\x00'}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002b40)="ad2f1c802062ffd85f3ae61663e6c1307e856de2296bfae3b055a451eedbe5202213f0f7df7c27daac25ed2c4e9721a66a5786fad9dcf49579686f354fe9e1cfee437439a0ff450cb91eb4239cb1cdff705aa1d869a80471a0a5171d3a7782dc4948835ed71f1b318571b36a8e2fa76b3e80e6c2f3b995d5", 0x78}], 0x1, &(0x7f0000002c00)=[{0x68, 0x10e, 0x8, "72af4760c2d0f8f1ff6d1c56d5842ba638a40706864e6e9404b54b03af3dba8d0d6a611f6bf97d22658c26e67f8c63f88e8e153f386d9eae0494ecc02773f9b8f85eab69f9dd00a2fe634afe8f8336035e545bd9edf0f590"}, {0x68, 0x114, 0x8, "0f5d3aa51e83eb910ee602e155924d16e9263121e83e2b504f9df882a849590b7c29d31e4682edef013bce963a5294ad994417b4c938c8692f33c6414ae0666fa32b777b842010fb222f4ab4e250a16d915b5b0f"}, {0x98, 0x107, 0x8, "64fffbec8303a12df72d0992439bda775896350464aad6c75a2f27255ea91ef410abc4750f1589dd357c03e310fadadd7f3d12f4a2f6d45b7092498621580e0a2b0aeaaef63e1236d0c02fc27ecec5d52c2b10b72f20ce7acd47285083be459275fb7f13cf1aa5141ad0978e8d9de9756ded056b9dae17b159a67618abd5a85eee4f"}, {0xe0, 0x29, 0x784a, "f813e0b95a25b2856ae5ce8a362706af85de6fd43701e6a797c8342df3c2bb449b0da4ea381eb51d5f66ad2650ac9172b540a3e2c50d8393af22ef27cdb98e7d259d6b93519152189521eb708b36a0e07fea72a1bf0392a227102aee33b3701125875b8ed52de2f1d1d8b07e1ae26c904cfed52340e1a8f37ea716e277a45240ae0202e7c103545d3670db39aec3bc3d7730f670eb7a0ebd898aaead9240d289eef45c191a610465c2569e17d407d9560459e937e2cf446b7c17fda00c1c31ebfec083531e2c8efc179f"}, {0x40, 0x10c, 0x9, "6b52bc8047ccb782f15c27ee97e79c242aec541c96f61adf11eb7509909f73771f073c4659c4e5f7fe6dc861f4c4c6"}], 0x288}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002f00)=@bloom_filter={0x1e, 0x0, 0x4, 0x9, 0x28008, r12, 0x92, '\x00', 0x0, r13, 0x3, 0x0, 0x2, 0x0, @value=r1}, 0x50) r16 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r16, &(0x7f0000003440)={&(0x7f0000002f80)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000003000)=""/31, 0x1f}, {&(0x7f0000003040)=""/159, 0x9f}, {&(0x7f0000003100)=""/96, 0x60}, {&(0x7f0000003180)=""/233, 0xe9}, {&(0x7f0000003280)=""/88, 0x58}], 0x5, &(0x7f0000003380)=""/180, 0xb4}, 0x40012102) 4m48.22819313s ago: executing program 3 (id=4196): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x10, 0x3, 0xe, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x1, 0x6, 0x9, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x9, 0x8}, 0xb001, 0x40000, 0x0, 0x2, 0x0, 0x0, 0x91}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x86e46, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x200000ff}, 0x0, 0x10, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980), 0xffffffff, r5}, 0x38) 4m32.838819299s ago: executing program 32 (id=4196): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x10, 0x3, 0xe, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x1, 0x6, 0x9, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x9, 0x8}, 0xb001, 0x40000, 0x0, 0x2, 0x0, 0x0, 0x91}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8014) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x8c001000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2d, 0xd, &(0x7f0000002080)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xfff, 0x100000001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2e) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x86e46, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x200000ff}, 0x0, 0x10, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000980), 0xffffffff, r5}, 0x38) 3m23.112303688s ago: executing program 1 (id=4530): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x3, [@restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @var={0xc, 0x0, 0x0, 0xe, 0x5, 0x1}, @const={0x3, 0x0, 0x0, 0xa, 0x1}, @enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x7}, {0x0, 0x3}, {0x9}]}, @typedef={0xf}, @struct={0x1, 0x2, 0x0, 0x4, 0x1, 0x9, [{0x2, 0x5, 0x6b}, {0xa, 0x3, 0x1}]}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000240)=""/4096, 0xa3, 0x1000, 0x1, 0x3}, 0x28) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0x7, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@arena={0x21, 0x0, 0x0, 0x7, 0x20000, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@arena={0x21, 0x0, 0x0, 0x3f, 0x20000, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)=@o_path={&(0x7f0000001500)='./file0\x00', 0x0, 0x6000}, 0x18) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0x0, 0x6, 0x9, 0xffffffffffffffc0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000040)='GPL\x00', 0xf, 0x38, &(0x7f0000000080)=""/56, 0x40f00, 0x6c, '\x00', r0, 0x1b, r1, 0x8, &(0x7f0000001280)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0x3, 0x7ff, 0x101}, 0x10, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001580)=[r2, 0x1, r3, r4, r5, r6], &(0x7f00000015c0)=[{0x1, 0x5, 0x7, 0x2}, {0x0, 0x4, 0xb, 0x6}, {0x1, 0x4, 0xd, 0x7}, {0x2, 0x4, 0xd}, {0x1, 0x5, 0x1, 0x1}, {0x3, 0x2, 0xa, 0x1}, {0x0, 0x4, 0x5, 0x7}, {0x3, 0x3, 0xa, 0x8}], 0x10, 0x7}, 0x94) r8 = syz_clone(0x100000, &(0x7f0000001700)="8943d8b8a5b134fb021dd66431b469a03e863250018923aacd8bee93f67a790a323f04a5aa2cbe99381f5f740ee27ed75456e3b9d20192d4f99edb06bab34c0d047755f58d9febf75c6c59854cd62404eda7554a60063c82a6ebe14909e21c536fa5947964e45fa7aa7fd5239fbd6d358ead209a7e84e4c085e8adf73063f1e5c15e918ee4aea1d419b89205327c696663f2dd02b79664149d2431dacc259ba24af6c812cfe57a4b9c7734ff856f0b3bdf6faae1358e87389e6cf3213fd9888b42101cf216850a80723293b7e9184644b11ee6788f9d45251c7d28375211b17da81a1f57fcb78252a0de479b00474d1aa009978c", 0xf4, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)="8ed52570a4341583802c8e7ad6bd4f6010d665c4f370e56f0cc9ad379b2114f8693142e59b3bb5bdb15f7e27a1d83817a0adba096e0a44438004e9a0def8e0e4b9dfaa3bec6df10a7ff3e496d020c659b4608656f8f39a36b2c233646db89894ade5daa4738601b685ef3c1d48723c09cda932dc05b92a86a0dd572f89ccec355f5c38bdba2859c927e8029b75774076f79db85c6d40b55625c5") r9 = perf_event_open$cgroup(&(0x7f0000001980)={0x3, 0x80, 0x2, 0x3, 0x2, 0x92, 0x0, 0x9, 0x1010, 0xe, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5e, 0x2, @perf_bp={&(0x7f0000001940), 0x1}, 0x200, 0x40, 0xb0be34e1, 0x6, 0x1, 0x3, 0x64fc, 0x0, 0x6, 0x0, 0xb59}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a40)={r8, r9, 0x0, 0x1, &(0x7f0000001a00)='\x00'}, 0x30) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d40)={r7, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001a80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x45, &(0x7f0000001b40)=[{}, {}], 0x10, 0x10, &(0x7f0000001b80), &(0x7f0000001bc0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000001c00)}}, 0x10) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d80)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x1, '\x00', r10, r1, 0x5, 0x5, 0x3}, 0x50) close(r12) r13 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ec0)={{r2, 0xffffffffffffffff}, &(0x7f0000001e40), &(0x7f0000001e80)='%pK \x00'}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x4, 0x10, &(0x7f0000001f00)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x2, 0x6, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}], &(0x7f0000001f80)='GPL\x00', 0x8, 0xb8, &(0x7f0000001fc0)=""/184, 0x40f00, 0x5c, '\x00', r10, @fallback=0x17, r1, 0x8, &(0x7f0000002080)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000020c0)={0x4, 0x9, 0x6, 0x5}, 0x10, r11, 0xffffffffffffffff, 0x1, &(0x7f0000002100)=[r4, r12, r6, r5, r3, r4], &(0x7f0000002140)=[{0x3, 0x5, 0xc}], 0x10, 0x2}, 0x94) r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002240)={0x3, 0x4, 0x4, 0xa, 0x0, r12, 0x9, '\x00', 0x0, r1, 0x5, 0x3, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002580)={0x18, 0x26, &(0x7f00000022c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x24}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0xbe}, @map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x100}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x9, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000002400)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', r10, 0x0, r1, 0x8, &(0x7f0000002440)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000002480)={0x2, 0x3, 0x2, 0xf0f}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000024c0)=[r17, r4, r5, r6, r3, r2, r15, r4], &(0x7f0000002500)=[{0x5, 0x3, 0x4, 0xa}, {0x4, 0x3}, {0x5, 0x4, 0x10, 0xb}, {0x0, 0x2, 0xc, 0x2}, {0x3, 0x1, 0xd, 0xc}, {0x0, 0x1, 0xd, 0x5}, {0x3, 0x4, 0x9, 0x9}]}, 0x94) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002880)=@bpf_lsm={0x1d, 0x13, &(0x7f0000002640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0xe, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002700)='GPL\x00', 0x2, 0x71, &(0x7f0000002740)=""/113, 0x41100, 0xd, '\x00', r10, 0x1b, r1, 0x8, &(0x7f00000027c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000002800)={0x5, 0xd, 0x40, 0x6}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002840)=[{0x0, 0x1, 0xb, 0x8}, {0x1, 0x5, 0x4, 0x8}, {0x4, 0x3, 0x2, 0x8}], 0x10, 0x3}, 0x94) close(r18) bpf$TOKEN_CREATE(0x24, &(0x7f0000002940)={0x0, r3}, 0x8) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000002980)=r18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000029c0)={r4, 0xffffffffffffffff}, 0x4) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x16, 0x1d, &(0x7f0000002a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x8f7c}, [@generic={0x0, 0x6, 0x1, 0x9, 0xffffffff}, @generic={0x81, 0x0, 0x0, 0x5, 0x81}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x88}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0x9, 0x6, 0xa, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000002b00)='syzkaller\x00', 0x3, 0x8e, &(0x7f0000002b40)=""/142, 0x41100, 0x61, '\x00', r0, @flow_dissector, r1, 0x8, &(0x7f0000002c00)={0x8, 0xffffff3b}, 0x8, 0x10, &(0x7f0000002c40)={0x0, 0x9, 0x6, 0x1}, 0x10, 0x0, r16, 0x7, &(0x7f0000002c80)=[r13], &(0x7f0000002cc0)=[{0x4, 0x1}, {0x4, 0x3, 0x4, 0x1}, {0x1, 0x4, 0x8, 0xa}, {0x5, 0x3, 0x7}, {0x5, 0x1, 0xb, 0x8}, {0x0, 0x5, 0xa, 0x6}, {0x2, 0x4, 0x0, 0xa}]}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000002e00)=r20, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002ec0)={{r4, 0xffffffffffffffff}, &(0x7f0000002e40), &(0x7f0000002e80)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x16, 0x12, &(0x7f0000002f00)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @exit, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x31}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r21}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}], &(0x7f0000002fc0)='syzkaller\x00', 0x4, 0xc1, &(0x7f0000003000)=""/193, 0x100, 0x1, '\x00', r0, @fallback=0x18, r1, 0x8, &(0x7f0000003100)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, r11, r16, 0x2, &(0x7f0000003140)=[r3, r4, r17], &(0x7f0000003180)=[{0x5, 0x3, 0xc, 0x9}, {0x1, 0x4, 0xe, 0xb}], 0x10, 0x6}, 0x94) 3m22.764056535s ago: executing program 1 (id=4533): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x8, 0x0, 0x0, 0x280e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_config_ext, 0x2005, 0x89, 0x0, 0x7, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x0, 0x9, 0x0, 0x0, 0xffff, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000540), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200000000000000008800"/20, @ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB='\x00'/28], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000740)={'veth1_to_bond\x00'}) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f00000007c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000df09b6", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000001c000000000000000000000007000000440c09ff9708ea6e1900000000000000"], 0x40}, 0x20002880) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000880)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000008c0)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x44) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000940)) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x0, 0x0, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYRES32=r2, @ANYBLOB="e50000000000101772bf778806007f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600002731ff14f45fd45f2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0300008500000006000000950000000000000008c3ace72f0bf670819a84c9a3bb7a96a7b3f730716709d46b1aeed26cd7be7860325d556b0283ec58178a1e1188d1b4486b4a3b451bdf0a5d109b3aec"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c00)={0xffffffffffffffff, r2}, 0xc) sendmsg$inet(r5, 0x0, 0x200048cc) socket$kcm(0x10, 0x2, 0x0) 3m22.095544594s ago: executing program 1 (id=4538): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/157, 0xf}, {&(0x7f0000000280)=""/230, 0xe6}, {&(0x7f0000000f40)=""/4090, 0xc34}, {&(0x7f0000001f40)=""/174, 0xae}, {&(0x7f0000002000)=""/108, 0x3d}, {&(0x7f0000002080)=""/102, 0x66}, {&(0x7f0000002100)=""/122, 0x71}], 0x7}, 0x100) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x21, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 3m21.46353211s ago: executing program 1 (id=4540): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000004c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000140), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000001c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000240)=@tipc, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000680)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000840)={&(0x7f0000000880)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="80005b02", 0x4}, {&(0x7f0000000980)}], 0x2, 0x0, 0x0, 0x900}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00), &(0x7f0000000a40), 0xfffffffb, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0), &(0x7f0000000b00), 0x1000, r4, 0x0, 0x11000000}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m19.180798917s ago: executing program 1 (id=4549): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x14001, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x0, 0x3c, 0xfffffffffffffea6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000540)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x5, 0xf8, &(0x7f0000000740)=""/248, 0x0, 0x2c}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000dc0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x440000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x7, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r4, 0x0, 0xe, 0x0, &(0x7f0000000a80)="c9f7b98600"/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@arena={0x21, 0x0, 0x0, 0x40, 0x40000, r3, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{}, 0x0, &(0x7f0000000b00)='%+9llu \x00'}, 0x20) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x6}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000003, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="120000003300000004000000ea"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{r6, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d80)={r7, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x5, 0x0, 0x0, &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)) 3m18.704201357s ago: executing program 1 (id=4553): socket$kcm(0x21, 0x7, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000005c0)={0x5, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x4000000000005, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x115, 0x0, 0x0, 0x8, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) write$cgroup_pid(r0, &(0x7f0000000780), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000800)) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r2, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x2, 0xffffffffffffffff, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000002e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003740)='GPL\x00', 0x5, 0x252, &(0x7f0000003780)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0xa, 0x3, 0x3a) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4102, 0x1006}, {&(0x7f0000000940)=""/4113, 0x1011}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f00000001c0)=""/75, 0x4b}, {0x0}], 0x5}, 0x10020) sendmsg$kcm(r6, 0x0, 0x20004050) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) socketpair(0x25, 0x1, 0x2, &(0x7f0000000200)) 3m3.594614177s ago: executing program 33 (id=4553): socket$kcm(0x21, 0x7, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000005c0)={0x5, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x4000000000005, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x115, 0x0, 0x0, 0x8, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) write$cgroup_pid(r0, &(0x7f0000000780), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000800)) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r2, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x2, 0xffffffffffffffff, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000002e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003740)='GPL\x00', 0x5, 0x252, &(0x7f0000003780)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = socket$kcm(0xa, 0x3, 0x3a) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4102, 0x1006}, {&(0x7f0000000940)=""/4113, 0x1011}, {&(0x7f0000000340)=""/61, 0x3d}, {&(0x7f00000001c0)=""/75, 0x4b}, {0x0}], 0x5}, 0x10020) sendmsg$kcm(r6, 0x0, 0x20004050) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) socketpair(0x25, 0x1, 0x2, &(0x7f0000000200)) 9.141207704s ago: executing program 0 (id=5221): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000140060404000a0400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c23003f) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000180)) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18c700000000000000000000ff0f00008520030000000300171467e995000000"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x59c4}, 0x94) 8.831717986s ago: executing program 0 (id=5225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x5, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) recvmsg$unix(r3, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000c40)=ANY=[@ANYRES8=r4, @ANYRES8=r5], 0x12) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x4, 0x10001, 0x49, 0x1, r6, 0x0, '\x00', 0x0, r6}, 0x50) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000180), &(0x7f0000000300)=""/166}, 0x20) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x6568, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x6, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000001d00000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000840)={0x0, 0x746f2f51, &(0x7f0000000880)=[{&(0x7f00000008c0)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r10 = perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000001900)='GPL\x00', 0x5, 0x252, &(0x7f0000001940)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r12, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x100) (async) perf_event_open(&(0x7f0000001a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={&(0x7f0000001b40)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.379695022s ago: executing program 0 (id=5232): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000005000000080000001300000000000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000000000000003a9563bf050fdb3401ba5ae027d46a3ecb5e49c6fae5cfe450db9eced08317f63485cf91e8197481cf89ebf997ac678d6450d97a2ec303d607e4e3eb2f87f27caa0e54932d0f5828faeb7b0adaf736ab0716ce9e1988aef3acbc1197cf568e8dd1f7a8e98969b64175d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2, r0}, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x7, 0xa, &(0x7f0000000d40)=ANY=[@ANYBLOB="18010000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x4, 0xee, &(0x7f0000000e00)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r3, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) 6.545337094s ago: executing program 0 (id=5235): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x41, 0x7, 0x0, 0x0, 0x4000, 0x0, 0xad}, 0x0, 0xa, 0xffffffffffffffff, 0x23b7af9ae4eefa2) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x4, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x14, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000300), 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0xffffff0a, &(0x7f0000000380)=[{&(0x7f00000003c0)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002e2f0120053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.197522148s ago: executing program 4 (id=5242): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x154d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x2e, 0x0, 0x1}, 0x28) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, 0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)='{', 0x1}], 0x1}, 0x80d1) close(r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) 5.196836848s ago: executing program 6 (id=5243): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400e9ffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003600)={0x1b, 0x0, 0x0, &(0x7f00000036c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) sendmsg$inet(r3, 0x0, 0x48080) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000b40)=r2, 0x4) r4 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xa}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0xe, &(0x7f0000001a00)=ANY=[], &(0x7f0000002b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000002b40), 0x8, 0x10, &(0x7f0000002b80), 0x10}, 0x94) sendmsg$inet(r4, &(0x7f0000001900)={&(0x7f0000001940)={0x2, 0x4, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000019c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @loopback}}}], 0x20}, 0x0) 5.196153698s ago: executing program 2 (id=5244): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xb, 0x1f, 0x402, 0x1003ff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x401, r0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x401, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f00000002c0), 0x0}, 0x20) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000001240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x20000000) (async) sendmsg$tipc(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x20000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfa, 0x1, 0x0, 0x4, 0x0, 0x4, 0x20001, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x107494, 0x401, 0x56, 0x6, 0x4, 0x4, 0x200, 0x0, 0x35, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) recvmsg(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001700)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) 4.906952456s ago: executing program 4 (id=5245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000580)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(r1) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x15160000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xa, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xc}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x5, 0x3, 0xe, 0x6}, {0x2, 0x4, 0x7, 0x8}, {0xace6, 0x3, 0x6, 0x2}, {0x1, 0x2, 0x7, 0x6}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.849769892s ago: executing program 6 (id=5246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x321001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x10e, 0xb, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="6000000055007f089e", 0x9}, {&(0x7f00000001c0)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)}, 0x0) recvmsg$unix(r3, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10062) write$cgroup_subtree(r5, &(0x7f0000000800), 0x15) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x20501, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x3, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x5f]}}, &(0x7f0000000300)=""/151, 0x27, 0x97, 0x1, 0xd10c}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x6, '\x00', 0x0, r9, 0x1, 0x4, 0x3}, 0x50) 4.739189932s ago: executing program 2 (id=5248): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xe4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x14000, 0x4, 0x2000c2ba, 0x0, 0x4000001, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xd) 4.736180493s ago: executing program 0 (id=5249): close(0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000002880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002900)={0x5, 0x3, &(0x7f00000029c0)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000002a00)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x8000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002a40)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000002ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x9, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b40)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002b80), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000002bc0)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r3, 0x0, 0x0) r4 = socket$kcm(0x29, 0x8, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x90c4dfffc1e2a2dc, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)='GPL\x00', 0x5, 0x252, &(0x7f0000000980)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TUNGETFILTER(r8, 0xc0189436, &(0x7f0000001880)=""/4080) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x891e, &(0x7f0000000b00)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0), 0x0, 0x1f, 0x0, 0x0, 0x10, &(0x7f0000000c40), 0x0, 0x0, 0x78, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) r5 = perf_event_open$cgroup(&(0x7f0000000cc0)={0x2, 0x80, 0x4, 0xf4, 0x8, 0x4, 0x0, 0x8000000000000001, 0x8000, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000d40), 0x3}, 0x2000, 0x1, 0xc0, 0x8, 0xfffffffffffffff9, 0x1, 0x1000, 0x0, 0x101, 0x0, 0x9}, 0xffffffffffffffff, 0x8, r2, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d80)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @tracing=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{r8}, &(0x7f0000001040), &(0x7f0000001080)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000010c0)={r8, &(0x7f0000001100)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8948, &(0x7f0000001180)={'vlan1\x00', @random="00009e0c1100"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.215234573s ago: executing program 5 (id=5253): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0900080000000001000000000000684d9e91d3fa", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x12, &(0x7f0000000780)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0x80ffffff}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000840)='GPL\x00', 0x2, 0xde, &(0x7f0000000880)=""/222}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000640)=r5, 0x4) (async) sendmsg$unix(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080)="0ad70b69df73410b9bebf1e4c25465eb5f50b84495913617b0f43f1b4c5b767442d7779810aae04645e53ce6dd22f3739f29ddea9da4a23a1dd7701ad72173582aa3588aeee13f40383c0067fc67f59e49906dd87bad5d233246cbd9ed8c5840a3f88f"}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) (async) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r6, 0x0, 0x23, 0x23, &(0x7f0000000280)="1e54efba21bc620594b0305e0676bf7c50487507d77c466563701fb5bb17fe8485dc8b", &(0x7f0000000300)=""/35, 0x80000001, 0x0, 0x6f, 0x30, &(0x7f0000000340)="02d6082b99f82a6b2529471128e9311accb710d4a58b992eb1fe321178c9f2f90516e5207c640adb8419fafa9810a10021e14d198919d897e22def6b81c4b20764669ab730fc6d3f9c1ab82a81d12609011716b1352b4eda018735fd89075e5dfbc29fce389d0836ab4d8246283509", &(0x7f00000003c0)="cdb169e2d98d6d35c14cb67de48a3853a84d77e9627a69d1d1a99eb3826b49f09c0d680a86e82e03ce14972cf3c13db0", 0x2, 0x0, 0x7}, 0x50) 3.214639933s ago: executing program 4 (id=5254): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x2, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10043) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000300000dd950000000000c93a"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000003c0)="5cdd3086ddffff6633c9bbac88a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r9) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r11) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r10) 3.095038805s ago: executing program 2 (id=5255): socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x8a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x7) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x43fa7600c739ed1f, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280), 0xc) r0 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000009e000000620a00ff000000006109c81900000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000", @ANYRES16=r0], &(0x7f0000000500)='GPL\x00', 0x2, 0x9a, &(0x7f0000000340)=""/154, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xe, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000007c0), 0x8, 0x10, &(0x7f0000000080)={0x4000}, 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x1400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000880)={'pim6reg1\x00', 0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1a, 0x2000000000000216, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @tracing=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfd55}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xc, &(0x7f0000000ec0)=ANY=[], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000f40)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000001000)={&(0x7f0000001040)=@hci, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001100)=""/248, 0x200105d0}], 0x1}, 0x1f00) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x8d, 0x28, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x1, 0xff7ffffc, 0x3, 0x7fffffffffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r5, &(0x7f0000001280)={0x0, 0xfffffff5, &(0x7f00000012c0)=[{&(0x7f0000001300)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000001340)={'ip6_vti0\x00', @random="02000400"}) close(0xffffffffffffffff) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8955, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[], 0x48) 2.857163869s ago: executing program 5 (id=5256): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x1, 0x0, 0x0, 0xfffffe00, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000001000)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x1, 0xc, &(0x7f0000001700)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000018c0)={r1, &(0x7f0000001780)="82142f29553a3df692aeda12c02c262e1ce2121aa9dd07c17bff1fe5053ff43762bc48fafad818e906b04037df9d79c2328292e9e8b6a7d6d5698a10ebb3c80f0585fa65d4e6f2590b72c8e75c38ba378a857d845a7257d25216bb6d490523a66d7d155f0c7acee58dab62305869ad3076bf11dfbbfa33f1ed8be5c1c75b136930ffde0ffe63442d147b331c6ebcf087793e62417c571d33f720fb00f53029a007aba9c3", &(0x7f0000001840)=""/105}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000011c0)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x5452, 0x8230794d6280073) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001900)) r4 = perf_event_open(&(0x7f0000001940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0xb, 0x2000000000000216, &(0x7f0000001a80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x7, 0xc, &(0x7f0000001bc0)=ANY=[], &(0x7f0000001c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c40)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001c80)='cgroup\x00'}, 0x30) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)=[{0x0}], 0x1}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001d40), 0x200002, 0x0) mkdir(0x0, 0x47660708ddf4f68a) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e00)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e40)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f0000001e80), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000001ec0), 0x9) r9 = openat$cgroup_procs(r7, &(0x7f0000001f00)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f40), 0x200002, 0x0) write$cgroup_pid(r9, &(0x7f0000001f80), 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) 2.700124134s ago: executing program 6 (id=5257): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1, @ANYRES8=r1, @ANYRES16=r2], 0xfe33) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0x12, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x1, 0x4, 0x2, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0xc3, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r4 = socket$kcm(0x18, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100006b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r5, 0x0, 0x0, 0xfe}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000110000000000000000040000000000000000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0x1, 0x58, &(0x7f0000000780)}, 0x10) sendmsg$kcm(r4, &(0x7f0000000800)={&(0x7f0000000400)=@isdn={0x22, 0x2, 0x2, 0x7, 0x6}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000900)="adf0b0a90ebc283f996037a8494b9f5953eb738cfc61738bc94400248554688e970fdd62348e68db0373bfe88cff3286ed8f0603e9483cdbdd6187bf84a7bef8f5fadc68f7e218", 0x47}, {&(0x7f0000000980)="f9c5522ccc93e186ae547da5a15a0b87bdec998080e2c32a7c192c3febf7d60028bb6abd9b88f71f75bff94438b170c3f132a6d09c67c34bcec3cbeca4bd123bfa89c644bd0324f57234b88cae4715a933bf111c4d720564dec4c5b981326118ba806d89447521135678c7a96760574437d4f1162eb46a6adeb0ea3fca65f7798d3e62c763c07606d87fe1", 0x8b}, {&(0x7f0000000a40)="ffc84af3a1e03f56ca34fb70dd621ebcbac5494c7af3ff1b7ed97ce7b071349eb9dac01d86f955a3bb9a64573d6fa07a841d4269c46f473733ae3c7159ab96ab482819228cff0abcdebb95bd1d16f95c5afc71843199e4f4628b418010f72eb42b845c39dba1687cf750275e4b92ce02b3f2720df7b1a9b5a1474cbb91ca8ab82f6311bc01437730ce6bfa71e6cbf466e81ffbdfc0", 0x95}, {&(0x7f0000000380)="4b15e1ba025e4ef25526cdbc39d48edeba876d696e18d0d4970ae9d3f0ce894edb1a5bc104403de7c05298b3d15e1e362bb88971bf05c0f45db90378b482fb175e875f1479edafa79102b677323999568e900a9cab03493767d8c1fe56e476c97ca579f5d5958d1b0f099eb7336439", 0x6f}], 0x4}, 0x4004000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=0xffffffffffffffff, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000c40)) write$cgroup_type(r6, &(0x7f0000000c80), 0x11ffffce1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000dc0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000e00)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)='`\x00', 0x2}], 0x1}, 0x0) perf_event_open(&(0x7f0000000f40)={0x0, 0x80, 0x5, 0xf1, 0x5, 0x3, 0x0, 0x8, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x400}, 0x4400, 0xd, 0x6, 0x8, 0x1, 0xff, 0x8, 0x0, 0x5003, 0x0, 0x4}, 0xffffffffffffffff, 0xb, r0, 0x9) socket$kcm(0x2, 0x1, 0x84) 2.593273755s ago: executing program 4 (id=5258): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b80), 0x40100, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x7fff, 0x9, 0x5}, {0x3, 0x4, 0x1, 0xfffffff9}, {0x1, 0x8, 0x4, 0xafc}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xffffffffffffff17, 0x7}, 0x0, 0x2, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x13, 0x7, &(0x7f0000000c80)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000000cc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) socket$kcm(0x29, 0x5, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000e40)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a800ffff1f0008400304000803600cfab94dcf5c0461c17ed67f6f94007134cf6ee08000a0e408e898ef075c0100000000000000cb090000001fb791643a5ee40021146218f17056b3d5b2380524c16c59a07445d6", 0xffcf}], 0x1, 0x0, 0x0, 0x7400}, 0x40) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f0000000b00), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0x7, &(0x7f00000009c0)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a800000000001501020000000000850000008c000000b70000000100000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000ac0)="0000e5ffffffffffffff00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000500)=@caif=@util={0x25, "a2a8a5222ff1140b1db69ccc6131b57f"}, 0x80, 0x0}, 0x448c0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'ip6gre0\x00', 0x400}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001400)={0x2, 0x6, &(0x7f00000014c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000850000002500000095f1ff0000000000"], &(0x7f0000001500)='syzkaller\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r3, 0xffffffffffffffff}, &(0x7f0000001540), &(0x7f0000001580)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xa, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000340300000000000001000080183200000300000000000000000000001836000003000000000000000000000085100000070000001837000004000000000000000000000095000000000000007bcdbf9ce27f47aab281e796992831fcdb43a2dca570045fc633c89f37baa9a9d4724e23a6b93212362c71159df9b8b1b1d0261c01dc9dc5f2c36bfa3cfbe567aa22612dd9d5217a9fd8977e0e18de2bf7534fb2049ea5824266682accb7672db857925b871dab260f6065e4200ae2d6016d965e703c"], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0xa, &(0x7f0000000f00)=""/10, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0xe, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, r7, r3, r7, r8, r3, r7, r8], &(0x7f0000001640)=[{0x4, 0x4, 0x7, 0xf}, {0x0, 0x5, 0x3, 0xb}, {0x1, 0x4, 0xf, 0x1}, {0x0, 0x4, 0x9, 0xb}, {0x4, 0x4, 0xfffffff8, 0xb}, {0x5, 0x4, 0xa, 0x9}, {0x0, 0x5, 0xe, 0x7}], 0x10, 0x2}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000885000000110000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b986c12a850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.225246391s ago: executing program 5 (id=5259): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'tunl0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'tunl0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 664.171545ms ago: executing program 6 (id=5260): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0xc, 0x2, 0x7, 0x10, 0x20}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1000, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff51, &(0x7f0000000280)=[{&(0x7f0000000400)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a80016002000014003000008035fecfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a50a5ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x301, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) 524.920588ms ago: executing program 5 (id=5261): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xe5d}, 0x10c002, 0xac5d, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000800)={'wlan1\x00', @random="000500000020"}) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, &(0x7f0000000ac0), 0x8) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x3, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x29, 0x8, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESDEC=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000ffff000000000000000000000000000000000000570000007b65753f8703c19bf9a6dfcd597c43189b8ce3990218e9ecd04be36599829d19a2b9db43a2bfc533be9a15b41849ca515350069b7d73591e65fc8afe6dd98dcf81c4473953399e9797b1016b4596a4d818e5daae35d2955076b087a70c9b4ac2121dd994d19c382f9bd2547f69c226f4479b5771342d12cf341fd42307c18c9a9532ac985ae565dc4a125a71edceb11367fa806bb858f238efb90a64242762304cfab282b65e5267a8536735a6d51decc6cc9a6af3b6e3cc494f54b8a90590d37d038bd960be3d521ffd49db90ff40f270e4194541ed75c4a0e160d53a87809b"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000980)='./file0\x00', r5, 0x4000, r5}, 0x18) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000780)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000840)='cpuset.cpu_exclusive\x00', 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000001100)={&(0x7f0000000b00)=@x25, 0x80, &(0x7f0000001080)=[{&(0x7f0000000b80)=""/203, 0xcb}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/10, 0xa}, {&(0x7f0000000dc0)=""/209, 0xd1}, {&(0x7f0000000ec0)=""/161, 0xa1}, {&(0x7f0000000f80)=""/113, 0x71}, {&(0x7f0000001000)=""/7, 0x7}, {&(0x7f0000001040)=""/64, 0x40}], 0x8}, 0x40000020) write$cgroup_int(r7, &(0x7f0000000880)=0x3, 0x12) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000940)="3c00000033000b1229ae3f7f03b261130124fc60100c034007410000002000189215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000040000000060000000800000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x48) r10 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x6, 0x4, 0xe, 0x3, 0x0, 0x6, 0x40300, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x84, 0x1, 0x8, 0x8, 0xf4a, 0x9, 0x1, 0x0, 0x9, 0x0, 0x1000}, 0xffffffffffffffff, 0xe, r3, 0x9) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r9, @ANYBLOB="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"/391, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 449.274955ms ago: executing program 4 (id=5262): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580), 0x4) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) (async) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x106080, 0x0, 0x4000000, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x1f, 0xd, &(0x7f0000001e40)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f0000001ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001f00)={r3}, 0xc) (async) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000700)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000000740)=[{&(0x7f00000008c0)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000018c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0xfffffe4f}], 0x2, &(0x7f0000001a00)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) (async) r5 = socket$kcm(0x2, 0x3, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r1, 0x0, 0x14, 0xe5, &(0x7f0000000780)="a9e39cc42a76d9119dab869ac92c87f99d37eb45", &(0x7f0000001a80)=""/229, 0x5, 0x0, 0xa3, 0xb3, &(0x7f0000001b80)="c7e8e9312749441f3aa6515881527e024331e16a170ad30598a5088b65e3e1e0730539e3a1d1b965df0d3e5715c838235aa6d00f15e8dafb69aa87c3d884486a8a344099d3b01702fd3931b229a29de002ff90599dd09021ea7580e1c27b3f91b2046757dc007380c6ded6a4dd0f700ef85a2e30a53459fd8203b87be5e206b970c82f40161e8a3293de37e07d9e4733edb2b39ee6d349fcd0762e5813bb27cd7f3cfc", &(0x7f0000001c40)="9e2f59b66b3ac11c8f6f37cdf05c546932db7b6311e605f3b43c4a3b6ccc26a1c6abf0cc6c621bbb14f55ef270ba321acaa281e1b43e9f4b915d90fa9e65f1fda1a47b74e895280e7dc48bd23d15e07b7ccbbf49a75d4f37f306c6fa330e617452e102c5bda0f0501b19cee10443a833df1edaf5366f7917a8b3a8b175e5a3d03908db51425c7cf56e5d30617a807283d88d58ccc3a5f3627a02c6610ea3c599d4c6e462aa4159e8cb65819b8a720fedfc4b94", 0x0, 0x0, 0x6}, 0x50) (async) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)="fbd2b9ed29d8974a6ce75f08916a", 0xfe48}, {&(0x7f00000001c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x0) (async) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5749b89fd2df406f81b0a194f8e0d32cdc2ffa9f58f9", 0x16}], 0x1}, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9822, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xb}, 0x81, 0x3, 0x2, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0xffff, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) (async) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802faf730a3bb98bc080000000029783e9fb4f5ee9e0000009505fffd00000000000000000000006dbf7153109e25ffe74f7fbcd5e1753ee77f2d3439b1ea126710546e2497de7e82633bd7cd8547de6230a233f11b893a12fec9f8403ab0fa26d5b46ef146eeb92c3c4a1dc9fd6707fc217ca8e062845dc71c693bccaed1399921167b33e90af72df8e4634047dc0bc983902ebf82e130e80d5f34df59029abfd5fa72e61fdc7c446c61f0313366807ef01493a0a90a6147a3f97fb80be21281"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r6, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 424.781968ms ago: executing program 0 (id=5263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000000), 0x4) (async, rerun: 32) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)}, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={r1, 0x0, 0x1000, 0x20, &(0x7f0000000880)="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", &(0x7f0000001880)=""/32, 0x3, 0x0, 0x6b, 0x0, &(0x7f00000018c0)="6734a0a2ae8898da214a9a9f16988c2b9694f7cab6882d07eb8ef4223c13ee8ea926b2d4a43094a6ee27d01eb697677843435175125e67ee491e6a15a14506854bb2684b05f7b51102b4bcc10b1083944c1dede8ae943ca1646f2d704ea5c97bc2bd5745cc7bc6dfb79409", &(0x7f0000001940), 0x5, 0x0, 0x2}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0xf, &(0x7f0000000700)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000007c0)={&(0x7f0000000800)=@hci={0x1f, 0x200, 0x31}, 0x80, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) socket$kcm(0x11, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) 292.244741ms ago: executing program 2 (id=5264): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r1, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000001480)="f573252c8af5b72201d0847b8a21ce56", 0x0, 0x23b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 104.44487ms ago: executing program 6 (id=5265): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd21, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r1, 0x0, 0x33, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000400)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f00000006c0)="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", 0x407}], 0x2}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0x11, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r8 = getpid() perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0x0, 0x7, 0x8, 0x2, 0x0, 0x7, 0x8, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x3, 0xa}, 0x1b80, 0x1ff, 0x5, 0x1, 0x2, 0xa, 0x9, 0x0, 0x1, 0x0, 0x5}, r8, 0x0, r4, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 103.38998ms ago: executing program 5 (id=5266): socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffeffffffffffffc, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffeffffffffffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8805) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8805) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32, @ANYBLOB="ff0f3037647b000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32, @ANYBLOB="ff0f3037647b000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x11, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000780)={0x3, 0x80, 0xfd, 0x5, 0x3, 0xf, 0x0, 0xa, 0x11, 0x24b3d999bbf8f8ec, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x5df, 0x3c}, 0x10, 0x1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x0, 0x9}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000780)={0x3, 0x80, 0xfd, 0x5, 0x3, 0xf, 0x0, 0xa, 0x11, 0x24b3d999bbf8f8ec, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x5df, 0x3c}, 0x10, 0x1, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x0, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000010000000080", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x1c, &(0x7f00000008c0)=ANY=[@ANYBLOB="18080000010000000080", @ANYRES32=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608000000000000"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 96.609161ms ago: executing program 4 (id=5267): socket$kcm(0x1e, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001100)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000014c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001540)={0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x8a080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x2}, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000012c0)={r0, 0xe0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2b, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x3, &(0x7f00000017c0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0055000000000000000000000000da0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000001400)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 0s ago: executing program 2 (id=5268): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x4, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) (async) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) perf_event_open(&(0x7f0000003840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000003840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000038c0)={0x7, 0x4, &(0x7f0000003980)=ANY=[@ANYBLOB="850000009e000000620a00ff000000007100082400000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f00000039c0)='GPL\x00', 0x2, 0xffa0, &(0x7f0000003a00)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000640)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x6, 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f345e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c469953a63baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be250000000000000000000000000000dd4a009b2ba0d648a6975bcb66956a963912e26eb226af29c9f9f6261884db2d6b172b240dae6c7af327a27c533ab69811ca700d51724999cb8c0a8cace25602c3ecb9f0bcbe9ca6c9a444feb4cd9abbf2db2d583d5279de7f4130"], &(0x7f00000025c0)='GPL\x00', 0x4, 0x1076, &(0x7f0000002600)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70) setsockopt$sock_attach_bpf(r2, 0x29, 0x39, &(0x7f0000003600)=r3, 0x120) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ac0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003ac0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003b40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x11, 0x2, 0x0) (async) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000003b80)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000003b80)=r7, 0x4) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000003bc0)=r6, 0x4) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003c00)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6da}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x101}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x25, &(0x7f0000000200)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x2, 0x4f, 0x5}, 0x10, 0x1718d, 0xffffffffffffffff, 0x6, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, r6, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x5, 0x3, 0xc, 0x8}, {0x4, 0x4, 0x2, 0x5}, {0x4, 0x1, 0x8, 0x9}, {0x3, 0x3, 0x3, 0xc}, {0x5, 0x4, 0x7, 0x1}, {0x2, 0x4, 0xa, 0x2}], 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000440)={r0, r8}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x11, 0xb, &(0x7f0000003700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000084850000000400000095"], &(0x7f0000003780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000037c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xf}, 0x5) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90824fc60", 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ][T21679] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4027'. [ 982.381458][T21694] netlink: 'syz.3.4028': attribute type 2 has an invalid length. [ 982.399683][T21694] netlink: 'syz.3.4028': attribute type 4 has an invalid length. [ 982.446786][T21694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4028'. [ 985.349027][T21750] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4045'. [ 985.436755][T21753] netlink: 'syz.1.4046': attribute type 2 has an invalid length. [ 985.448144][T21753] netlink: 'syz.1.4046': attribute type 4 has an invalid length. [ 985.493731][T21753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4046'. [ 986.405172][T21786] netlink: 'syz.2.4053': attribute type 29 has an invalid length. [ 986.434197][T21786] netlink: 'syz.2.4053': attribute type 29 has an invalid length. [ 986.460073][T21793] netlink: 'syz.2.4053': attribute type 29 has an invalid length. [ 986.478787][T21786] netlink: 'syz.2.4053': attribute type 29 has an invalid length. [ 986.507884][T21786] netlink: 'syz.2.4053': attribute type 29 has an invalid length. [ 986.521759][T21786] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4053'. [ 987.649587][T21821] netlink: 'syz.3.4064': attribute type 7 has an invalid length. [ 990.584179][T21857] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4071'. [ 991.469139][T21876] netlink: 'syz.3.4075': attribute type 2 has an invalid length. [ 991.593879][T21880] netlink: 88592 bytes leftover after parsing attributes in process `syz.2.4077'. [ 992.593252][T21907] netlink: 'syz.4.4080': attribute type 10 has an invalid length. [ 992.623285][T21907] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4080'. [ 992.767969][T21910] rxe_eth0 speed is unknown, defaulting to 1000 [ 993.052708][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.059232][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.495112][T21932] sctp: [Deprecated]: syz.4.4085 (pid 21932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 993.495112][T21932] Use struct sctp_sack_info instead [ 993.807882][T21948] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.4088'. [ 993.829446][T21948] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4088'. [ 993.975872][T21950] netlink: 'syz.3.4089': attribute type 21 has an invalid length. [ 994.016197][T21950] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4089'. [ 994.445600][T21964] netlink: 'syz.4.4093': attribute type 8 has an invalid length. [ 994.474150][T21964] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.4093'. [ 994.706348][T21974] sctp: [Deprecated]: syz.1.4096 (pid 21974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 994.706348][T21974] Use struct sctp_sack_info instead [ 994.863552][T21974] netlink: 'syz.1.4096': attribute type 39 has an invalid length. [ 994.906984][T21981] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4097'. [ 995.152198][T21987] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4097'. [ 995.259262][T21981] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4097'. [ 995.355570][T21993] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 995.377362][T21993] netlink: 'syz.3.4099': attribute type 2 has an invalid length. [ 995.550508][T22008] netlink: 'syz.1.4102': attribute type 29 has an invalid length. [ 995.558788][T22008] netlink: 'syz.1.4102': attribute type 29 has an invalid length. [ 995.687823][T22013] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 995.722060][T22009] netlink: 'syz.1.4102': attribute type 29 has an invalid length. [ 995.763444][ T956] syzkaller0: tun_net_xmit 76 [ 996.034384][T22035] netlink: 'syz.2.4106': attribute type 21 has an invalid length. [ 996.060445][T22035] __nla_validate_parse: 2 callbacks suppressed [ 996.060464][T22035] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4106'. [ 996.713094][T22041] netlink: 'syz.4.4108': attribute type 3 has an invalid length. [ 996.742602][T22041] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4108'. [ 996.815236][T22053] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4107'. [ 997.288432][T22061] netlink: 'syz.4.4112': attribute type 3 has an invalid length. [ 997.377265][T22061] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4112'. [ 997.616926][T22056] rxe_eth0 speed is unknown, defaulting to 1000 [ 1000.404393][T22104] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4123'. [ 1000.444615][T22105] netlink: 'syz.2.4123': attribute type 21 has an invalid length. [ 1000.495206][T22105] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4123'. [ 1000.531372][T22107] netlink: 'syz.2.4123': attribute type 1 has an invalid length. [ 1000.605708][T22107] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.4123'. [ 1000.723751][T22114] netlink: 'syz.0.4122': attribute type 21 has an invalid length. [ 1000.791423][T22114] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1001.968201][T22134] tun0: tun_chr_ioctl cmd 2148553947 [ 1001.989487][T22138] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4130'. [ 1002.186295][T22147] netlink: 'syz.4.4133': attribute type 3 has an invalid length. [ 1002.236697][T22150] netlink: 'syz.4.4133': attribute type 3 has an invalid length. [ 1002.244833][T22147] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1002.283075][T22150] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4133'. [ 1003.282869][T22173] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4140'. [ 1003.328605][T22173] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4140'. [ 1003.713217][T22195] netlink: 'syz.2.4144': attribute type 10 has an invalid length. [ 1003.957766][T22203] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4147'. [ 1004.014241][T22203] netlink: 'syz.1.4147': attribute type 2 has an invalid length. [ 1004.023613][T22195] netlink: 'syz.2.4144': attribute type 21 has an invalid length. [ 1004.329689][T22215] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4150'. [ 1007.799535][T22247] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4159'. [ 1007.837639][T22241] rxe_eth0 speed is unknown, defaulting to 1000 [ 1008.044988][T22256] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4160'. [ 1008.189995][T22262] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4161'. [ 1009.172345][T22249] rxe_eth0 speed is unknown, defaulting to 1000 [ 1009.551233][T22283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1009.559277][T22283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.624140][T22283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1009.650456][T22283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.718496][T22298] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.4168'. [ 1010.760592][T22291] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.4167'. [ 1010.779905][T22298] openvswitch: netlink: Flow actions attr not present in new flow. [ 1010.803862][T22291] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1012.244268][T22310] netlink: 'syz.1.4172': attribute type 8 has an invalid length. [ 1012.260803][T22310] netlink: 'syz.1.4172': attribute type 7 has an invalid length. [ 1012.289237][T22310] netlink: 126196 bytes leftover after parsing attributes in process `syz.1.4172'. [ 1013.483184][T22333] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4176'. [ 1014.038380][T22343] netlink: 'syz.1.4181': attribute type 3 has an invalid length. [ 1014.047413][T22343] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4181'. [ 1014.402814][T22349] netlink: 'syz.2.4182': attribute type 2 has an invalid length. [ 1014.521083][T22349] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4182'. [ 1014.662484][T22358] netlink: 'syz.3.4184': attribute type 4 has an invalid length. [ 1014.705861][T22358] netlink: 134728 bytes leftover after parsing attributes in process `syz.3.4184'. [ 1015.496481][T22379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4190'. [ 1015.516200][T22375] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4189'. [ 1015.532196][T22380] netlink: 'syz.2.4190': attribute type 29 has an invalid length. [ 1015.586426][T22382] netlink: 'syz.2.4190': attribute type 29 has an invalid length. [ 1015.602821][T22380] netlink: 'syz.2.4190': attribute type 29 has an invalid length. [ 1015.684606][T22385] netlink: 'syz.2.4190': attribute type 29 has an invalid length. [ 1015.932867][T22392] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1015.977989][T22392] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1016.133776][T22392] device team_slave_0 left promiscuous mode [ 1016.156421][T22392] team0: Port device team_slave_0 removed [ 1016.246170][T22398] netlink: 'syz.1.4194': attribute type 10 has an invalid length. [ 1016.257939][T22398] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4194'. [ 1016.279565][T22398] team0: Device macvlan1 failed to change mtu [ 1016.290765][T22400] device netdevsim0 left promiscuous mode [ 1016.442862][T22415] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4197'. [ 1017.828701][T22435] rxe_eth0 speed is unknown, defaulting to 1000 [ 1017.908586][T22453] bridge_slave_1: default FDB implementation only supports local addresses [ 1020.897014][T22485] validate_nla: 8 callbacks suppressed [ 1020.897033][T22485] netlink: 'syz.0.4215': attribute type 25 has an invalid length. [ 1020.930366][T22485] netlink: 'syz.0.4215': attribute type 25 has an invalid length. [ 1024.493679][T22507] : port 1(ip6gretap0) entered blocking state [ 1024.505747][T22507] : port 1(ip6gretap0) entered disabled state [ 1024.562220][T22507] device ip6gretap0 entered promiscuous mode [ 1024.671627][T22517] device ip6gretap0 left promiscuous mode [ 1024.677643][T22517] : port 1(ip6gretap0) entered disabled state [ 1024.886888][T22522] netlink: 'syz.2.4226': attribute type 3 has an invalid length. [ 1024.897969][T22522] __nla_validate_parse: 4 callbacks suppressed [ 1024.907065][T22522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4226'. [ 1026.590313][T21990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.617441][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1026.635682][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1026.646533][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1026.655257][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1026.664696][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1026.672905][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1026.797091][T21990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.938615][T22558] rxe_eth0 speed is unknown, defaulting to 1000 [ 1027.039714][T21990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.274401][T21990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.797435][T21990] device .*! left promiscuous mode [ 1027.919952][T22558] chnl_net:caif_netlink_parms(): no params data found [ 1028.025601][T21990] device 0 left promiscuous mode [ 1028.256111][T22601] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.4241'. [ 1028.386438][T21990] tipc: Left network mode [ 1028.588294][T22558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.606939][T22558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.627857][T22558] device bridge_slave_0 entered promiscuous mode [ 1028.665330][T22558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.681828][T22558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.691500][T22558] device bridge_slave_1 entered promiscuous mode [ 1028.720661][ T50] Bluetooth: hci0: command 0x0409 tx timeout [ 1028.801352][T22558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.855288][T22558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.985888][T22558] team0: Port device team_slave_0 added [ 1028.996615][T22558] team0: Port device team_slave_1 added [ 1029.071744][T22558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.078792][T22558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1029.150232][T22558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.800573][ T50] Bluetooth: hci0: command 0x041b tx timeout [ 1030.984418][T22558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.003706][T22558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.082184][T22558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.558143][T22558] device hsr_slave_0 entered promiscuous mode [ 1031.623845][T22558] device hsr_slave_1 entered promiscuous mode [ 1031.660743][T22558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1031.668418][T22558] Cannot create hsr debugfs directory [ 1032.290621][T16578] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1032.310022][T16578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1032.327347][T16578] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1032.337811][T16578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1032.349549][T16578] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1032.357283][T16578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1032.693858][T22638] rxe_eth0 speed is unknown, defaulting to 1000 [ 1032.880252][ T50] Bluetooth: hci0: command 0x040f tx timeout [ 1033.230344][T22654] delete_channel: no stack [ 1033.824744][T22663] netlink: 'syz.2.4251': attribute type 21 has an invalid length. [ 1034.350978][T22678] netlink: 'syz.2.4254': attribute type 10 has an invalid length. [ 1034.410537][ T50] Bluetooth: hci3: command 0x0409 tx timeout [ 1034.967319][ T50] Bluetooth: hci0: command 0x0419 tx timeout [ 1035.144314][T22678] team0: Device vxcan1 is of different type [ 1035.364677][T22558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1035.513022][T22558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1035.606934][T22558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1035.704992][T22558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1035.776150][T22638] chnl_net:caif_netlink_parms(): no params data found [ 1035.812347][T22697] netlink: 'syz.4.4257': attribute type 27 has an invalid length. [ 1035.987883][T22697] bond0: (slave bond_slave_0): Releasing backup interface [ 1036.251365][T22706] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4260'. [ 1036.480292][T16578] Bluetooth: hci3: command 0x041b tx timeout [ 1036.643135][T22638] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.651590][T22638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.679419][T22638] device bridge_slave_0 entered promiscuous mode [ 1036.709325][T22638] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.769074][T22638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.843054][T22638] device bridge_slave_1 entered promiscuous mode [ 1037.019867][T22638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1037.072855][T22558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1037.082534][T22638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1037.558164][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1037.598048][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1037.625669][T22638] team0: Port device team_slave_0 added [ 1038.353183][T22558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.373909][T22714] netlink: 'syz.4.4261': attribute type 3 has an invalid length. [ 1038.399173][T22714] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.4261'. [ 1038.525392][T22638] team0: Port device team_slave_1 added [ 1038.560738][T16578] Bluetooth: hci3: command 0x040f tx timeout [ 1038.604915][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1038.657273][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1038.696865][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.704158][T10030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.849120][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1038.867862][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1038.914780][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1038.956319][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.963572][T10030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.982108][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1038.999834][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1039.155459][T22638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.175008][T22638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.240227][T22638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1039.301430][T21990] nr0: port 1(hsr0) entered disabled state [ 1039.319702][T21990] device team0 left promiscuous mode [ 1039.332662][T21990] device team_slave_1 left promiscuous mode [ 1039.349987][T21990] device geneve1 left promiscuous mode [ 1039.357656][T22758] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4269'. [ 1039.378722][T21990] ¥: port 1(team0) entered disabled state [ 1039.429686][T21990] device hsr_slave_0 left promiscuous mode [ 1039.465797][T21990] device hsr_slave_1 left promiscuous mode [ 1039.486066][T21990] device bridge_slave_0 left promiscuous mode [ 1039.494881][T21990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.049643][T21990] team0 (unregistering): Port device geneve1 removed [ 1040.391023][T21990] team0 (unregistering): Port device vlan0 removed [ 1040.650377][T16578] Bluetooth: hci3: command 0x0419 tx timeout [ 1041.136610][T21990] team0 (unregistering): Port device team_slave_1 removed [ 1041.785701][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1041.801661][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1041.812936][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1041.855139][T22638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.863239][T22638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.891650][T22638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.019907][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1042.029996][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1042.052882][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1042.092225][ T5441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1042.118446][T22638] device hsr_slave_0 entered promiscuous mode [ 1042.145009][T22638] device hsr_slave_1 entered promiscuous mode [ 1042.168472][T22638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1042.193383][T22638] Cannot create hsr debugfs directory [ 1042.210895][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1042.219564][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1042.257234][T22558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1043.062455][T22638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1043.120826][T22638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1043.143348][T22638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1043.208148][T22638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1044.026559][T21990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1044.040436][T21990] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1044.108983][T22558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.198330][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1044.221535][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1044.318460][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1044.342725][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1044.368741][T22638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.387106][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1044.407696][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1044.428211][T22558] device veth0_vlan entered promiscuous mode [ 1044.438101][T22840] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1044.492379][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1044.513992][T22831] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4279'. [ 1044.515169][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1044.545948][T22558] device veth1_vlan entered promiscuous mode [ 1044.574904][T22638] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.614149][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1044.634434][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1044.678430][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1044.728142][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1044.766989][ T5480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.774241][ T5480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.839375][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1044.859006][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1044.889166][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1044.905110][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.912398][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.987137][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1045.028631][T22558] device veth0_macvtap entered promiscuous mode [ 1045.055618][T22828] rxe_eth0 speed is unknown, defaulting to 1000 [ 1045.087367][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1045.101479][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1045.121532][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1045.163732][T22558] device veth1_macvtap entered promiscuous mode [ 1045.188626][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1045.224561][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1045.259447][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1045.281217][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1045.323439][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1045.366408][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1045.389485][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1045.406461][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1045.415607][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1045.425405][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1045.449973][T22638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1045.472685][T22558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.498822][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1045.511635][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1045.527342][T22558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1045.549315][T22558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1045.596325][T22558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.639884][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1045.658733][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1045.702211][T22558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.720654][T22558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.729549][T22558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.742553][T22558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.820927][T22867] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4286'. [ 1046.954808][T10036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.981943][T10036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.089498][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1047.184188][T10030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.198387][T10030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.226012][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1047.312321][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1047.320010][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1047.370600][T22638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.935233][T22889] netlink: 'syz.0.4289': attribute type 10 has an invalid length. [ 1050.132826][T22889] team0: Port device wlan1 added [ 1050.486007][T22907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1050.495866][T22907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1050.516373][T22908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4294'. [ 1050.665451][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1050.676703][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1050.745530][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1050.763689][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1050.782623][T22638] device veth0_vlan entered promiscuous mode [ 1050.794606][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1050.807461][T10030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1050.844997][T22638] device veth1_vlan entered promiscuous mode [ 1050.979243][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1051.004710][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1051.023616][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1051.039983][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1051.054943][T22638] device veth0_macvtap entered promiscuous mode [ 1051.108310][T22638] device veth1_macvtap entered promiscuous mode [ 1051.148241][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1051.177046][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1051.214422][T22638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.225150][T22638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.264328][T22638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.283290][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1051.297060][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1051.342187][T22638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.354544][T22638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.365748][T22638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1051.376890][T22638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.407265][T22638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.415974][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1051.427641][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1051.440018][T22638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.450240][T22638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.459121][T22638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.474334][T22638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1051.866481][ T6546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.889775][ T6546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.938345][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1052.035979][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.054081][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.085981][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1052.108248][T22943] netlink: 'syz.0.4301': attribute type 1 has an invalid length. [ 1052.143932][T22922] delete_channel: no stack [ 1052.178332][T22943] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4301'. [ 1052.295856][T22945] netlink: 'syz.1.4303': attribute type 10 has an invalid length. [ 1052.337249][T22945] device wlan1 left promiscuous mode [ 1052.438011][T22945] device wlan1 entered promiscuous mode [ 1052.457472][T22945] team0: Port device wlan1 added [ 1052.595867][T22957] netlink: 'syz.2.4304': attribute type 27 has an invalid length. [ 1052.650276][T22957] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1052.669956][T22964] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4302'. [ 1052.722478][T22953] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4304'. [ 1052.793185][T22953] netlink: 'syz.2.4304': attribute type 1 has an invalid length. [ 1054.483308][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.489813][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.341958][T23005] netlink: 'syz.0.4315': attribute type 21 has an invalid length. [ 1056.410042][T23005] netlink: 'syz.0.4315': attribute type 3 has an invalid length. [ 1056.483613][T23005] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1056.498011][T23000] netlink: 'syz.1.4313': attribute type 2 has an invalid length. [ 1056.534708][T23001] netlink: 'syz.4.4312': attribute type 2 has an invalid length. [ 1056.682019][T23000] device 0 entered promiscuous mode [ 1056.736524][T23012] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.4315'. [ 1056.923707][T23026] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4317'. [ 1057.955636][T23042] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1058.187951][T23040] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.4319'. [ 1058.243952][T23042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1058.291697][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1058.339590][T23042] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1058.367244][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1058.401915][T23042] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1058.538384][T23062] netlink: 'syz.0.4325': attribute type 29 has an invalid length. [ 1058.554921][T23062] netlink: 'syz.0.4325': attribute type 29 has an invalid length. [ 1058.951921][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1058.970628][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1058.977711][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.060705][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.084062][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.107229][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.121543][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.162613][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.184358][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.238911][T23069] openvswitch: netlink: Message has 6 unknown bytes. [ 1059.794797][T23107] netlink: 'syz.1.4335': attribute type 1 has an invalid length. [ 1060.506289][T23129] netlink: 'syz.0.4340': attribute type 2 has an invalid length. [ 1060.786935][T23135] netlink: 'syz.2.4343': attribute type 10 has an invalid length. [ 1060.884728][T23135] team0: Port device veth0_to_bond added [ 1060.922477][T23142] netlink: 'syz.0.4346': attribute type 2 has an invalid length. [ 1061.493404][T23169] bridge0: port 3(ip6gretap0) entered blocking state [ 1061.551782][T23169] bridge0: port 3(ip6gretap0) entered disabled state [ 1061.619204][T23169] device ip6gretap0 entered promiscuous mode [ 1061.666219][T23169] bridge0: port 3(ip6gretap0) entered blocking state [ 1061.673155][T23169] bridge0: port 3(ip6gretap0) entered forwarding state [ 1062.200478][T23188] __nla_validate_parse: 38 callbacks suppressed [ 1062.200501][T23188] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4353'. [ 1063.019096][T23198] tap0: tun_chr_ioctl cmd 2147767511 [ 1063.153744][T23202] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4358'. [ 1063.524605][T23208] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.4359'. [ 1063.550207][T23213] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4360'. [ 1063.566200][T23213] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1063.616570][T23208] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1063.782090][T23218] rxe_eth0 speed is unknown, defaulting to 1000 [ 1063.813330][T23228] device wlan1 entered promiscuous mode [ 1063.849408][T23228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4363'. [ 1063.986159][T23235] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.4364'. [ 1064.353343][T23238] netlink: 'syz.2.4366': attribute type 2 has an invalid length. [ 1067.627687][T23238] device 0 entered promiscuous mode [ 1067.676859][T23255] netlink: 'syz.4.4369': attribute type 21 has an invalid length. [ 1067.687585][T23255] netlink: 'syz.4.4369': attribute type 5 has an invalid length. [ 1067.717226][T23259] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1067.743936][T23259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1067.770475][T23259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1067.888773][T23262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1067.928937][T23262] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1067.964878][T23262] net_ratelimit: 24 callbacks suppressed [ 1067.964948][T23262] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1068.163934][T23274] netlink: 12542 bytes leftover after parsing attributes in process `syz.5.4374'. [ 1068.933562][T23292] netlink: 'syz.4.4378': attribute type 29 has an invalid length. [ 1069.028985][T23292] netlink: 'syz.4.4378': attribute type 29 has an invalid length. [ 1069.363218][T23298] device syzkaller0 entered promiscuous mode [ 1069.736607][T23303] netlink: 71 bytes leftover after parsing attributes in process `syz.4.4381'. [ 1069.952135][T23306] netlink: 'syz.0.4382': attribute type 2 has an invalid length. [ 1070.082097][T23306] device 0 entered promiscuous mode [ 1070.257818][T23323] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4385'. [ 1070.381043][T23323] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1070.622732][T23337] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4389'. [ 1070.655913][T23341] netlink: 'syz.2.4388': attribute type 22 has an invalid length. [ 1070.780585][T23341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4388'. [ 1070.919371][T23354] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4390'. [ 1071.108020][T23356] netlink: 172 bytes leftover after parsing attributes in process `syz.5.4390'. [ 1076.144828][T23390] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4399'. [ 1076.154392][T23390] device hsr_slave_0 left promiscuous mode [ 1076.163222][T23390] device hsr_slave_1 left promiscuous mode [ 1076.706830][T23409] netlink: 'syz.0.4404': attribute type 3 has an invalid length. [ 1076.762671][T23413] netlink: 'syz.0.4404': attribute type 10 has an invalid length. [ 1076.810573][T23409] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4404'. [ 1076.950004][T23413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.025564][T23413] team0: Port device bond0 added [ 1077.091089][T23416] netlink: 'syz.2.4406': attribute type 10 has an invalid length. [ 1077.132931][T23416] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4406'. [ 1077.721363][T23446] netlink: 'syz.5.4413': attribute type 3 has an invalid length. [ 1077.751971][T23446] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4413'. [ 1077.894497][T23451] netlink: 'syz.1.4412': attribute type 2 has an invalid length. [ 1078.074709][T23451] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4412'. [ 1078.493093][T23453] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4415'. [ 1079.159128][T23450] rxe_eth0 speed is unknown, defaulting to 1000 [ 1079.273732][T23459] netlink: 'syz.2.4417': attribute type 21 has an invalid length. [ 1079.282764][T23459] netlink: 'syz.2.4417': attribute type 6 has an invalid length. [ 1079.291534][T23459] netlink: 'syz.2.4417': attribute type 10 has an invalid length. [ 1079.306577][T23459] netlink: 'syz.2.4417': attribute type 11 has an invalid length. [ 1079.321867][T23459] netlink: 'syz.2.4417': attribute type 12 has an invalid length. [ 1079.339091][T23459] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.4417'. [ 1079.668409][T23474] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4421'. [ 1079.965547][T23482] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4423'. [ 1080.030772][T23482] device bridge_slave_1 entered promiscuous mode [ 1080.440141][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4429'. [ 1081.056980][T23500] rxe_eth0 speed is unknown, defaulting to 1000 [ 1083.072295][T23573] netlink: 'syz.4.4445': attribute type 11 has an invalid length. [ 1083.172032][T23573] __nla_validate_parse: 1 callbacks suppressed [ 1083.172053][T23573] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4445'. [ 1083.342198][T23573] netlink: 'syz.4.4445': attribute type 11 has an invalid length. [ 1083.387406][T23573] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4445'. [ 1083.425769][T23579] validate_nla: 11 callbacks suppressed [ 1083.425794][T23579] netlink: 'syz.5.4444': attribute type 6 has an invalid length. [ 1083.439960][T23579] netlink: 1034 bytes leftover after parsing attributes in process `syz.5.4444'. [ 1083.742852][T23573] netlink: 'syz.4.4445': attribute type 11 has an invalid length. [ 1083.770293][T23573] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4445'. [ 1084.272308][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.338211][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.404552][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.482311][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.546736][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.702684][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.792626][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.854111][T23602] netlink: 'syz.2.4452': attribute type 29 has an invalid length. [ 1084.877445][T23614] netlink: 146340 bytes leftover after parsing attributes in process `syz.5.4453'. [ 1084.911246][T23614] openvswitch: netlink: Key type 386 is out of range max 32 [ 1085.183609][T23625] netlink: 'syz.2.4459': attribute type 10 has an invalid length. [ 1085.229015][T23625] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1085.337646][T23625] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4459'. [ 1086.496279][T23664] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.4467'. [ 1086.793379][T23676] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4470'. [ 1087.030468][T23684] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4472'. [ 1087.163100][T23680] rxe_eth0 speed is unknown, defaulting to 1000 [ 1088.585389][T23722] __nla_validate_parse: 64 callbacks suppressed [ 1088.585432][T23722] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4482'. [ 1088.853608][T23726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4483'. [ 1089.066324][T23728] validate_nla: 67 callbacks suppressed [ 1089.066345][T23728] netlink: 'syz.4.4484': attribute type 21 has an invalid length. [ 1089.183828][T23728] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1089.248275][T23728] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4484'. [ 1090.422939][T23762] netlink: 'syz.0.4492': attribute type 3 has an invalid length. [ 1090.444829][T23762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1090.689684][T23771] netlink: 'syz.1.4495': attribute type 16 has an invalid length. [ 1090.734063][T23771] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4495'. [ 1091.379912][T23793] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1091.477508][T23788] rxe_eth0 speed is unknown, defaulting to 1000 [ 1091.541738][T23796] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1091.943107][T23802] tap0: tun_chr_ioctl cmd 1074025677 [ 1091.976027][T23802] tap0: linktype set to 6 [ 1094.123419][T23835] netlink: 134776 bytes leftover after parsing attributes in process `syz.0.4512'. [ 1094.250328][T23834] netlink: 134776 bytes leftover after parsing attributes in process `syz.0.4512'. [ 1094.304922][T23837] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4513'. [ 1094.401194][T23837] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1094.546648][T23838] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4512'. [ 1096.536115][T23862] netlink: 'syz.1.4517': attribute type 15 has an invalid length. [ 1096.619511][T23862] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4517'. [ 1097.213829][T23875] netlink: 'syz.0.4519': attribute type 29 has an invalid length. [ 1097.243605][T23876] netlink: 'syz.0.4519': attribute type 29 has an invalid length. [ 1097.311748][T23875] netlink: 'syz.0.4519': attribute type 29 has an invalid length. [ 1097.349920][T23869] netlink: 'syz.0.4519': attribute type 29 has an invalid length. [ 1097.510796][T23875] netlink: 'syz.0.4519': attribute type 29 has an invalid length. [ 1097.813412][T23883] netlink: 'syz.2.4521': attribute type 11 has an invalid length. [ 1097.846110][T23883] netlink: 130876 bytes leftover after parsing attributes in process `syz.2.4521'. [ 1098.028802][T23883] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1098.139278][T23891] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1098.202127][T23891] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1102.135861][T23944] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1102.296454][T23946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1102.359620][T23946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1102.411039][T23948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4538'. [ 1102.454796][T23949] netlink: 'syz.1.4538': attribute type 10 has an invalid length. [ 1102.610101][T23949] device macvlan0 entered promiscuous mode [ 1102.637988][T23949] team0: Port device macvlan0 added [ 1104.292153][T23975] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4542'. [ 1104.732349][ T5441] tipc: Subscription rejected, illegal request [ 1105.178278][T23980] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1105.235788][T23980] netlink: 'syz.2.4546': attribute type 39 has an invalid length. [ 1105.570405][T23996] tap0: tun_chr_ioctl cmd 35108 [ 1105.577552][T23994] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4550'. [ 1105.689239][T23996] netlink: 'syz.5.4551': attribute type 29 has an invalid length. [ 1105.713589][T23996] netlink: 'syz.5.4551': attribute type 29 has an invalid length. [ 1106.339952][T24005] netlink: 'syz.0.4554': attribute type 10 has an invalid length. [ 1106.939262][T24005] team0: Device nlmon0 is of different type [ 1107.928747][T24024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4553'. [ 1108.079555][T24024] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4553'. [ 1108.210847][T24027] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4553'. [ 1108.868381][T24043] netlink: 125260 bytes leftover after parsing attributes in process `syz.5.4558'. [ 1109.134388][T24043] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1109.538499][T24051] netlink: 'syz.0.4562': attribute type 2 has an invalid length. [ 1109.585514][T24051] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4562'. [ 1109.973186][T23999] rxe_eth0 speed is unknown, defaulting to 1000 [ 1111.774658][T24072] netlink: 'syz.5.4569': attribute type 13 has an invalid length. [ 1114.568670][T24090] netlink: 'syz.4.4574': attribute type 2 has an invalid length. [ 1114.651635][T24090] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1115.354090][T24095] netlink: 'syz.5.4576': attribute type 1 has an invalid length. [ 1115.583386][T24095] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4576'. [ 1115.610944][T24097] netlink: 'syz.5.4576': attribute type 1 has an invalid length. [ 1115.726439][T24097] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4576'. [ 1115.999686][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.006428][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.692194][T24106] netlink: 'syz.4.4578': attribute type 2 has an invalid length. [ 1116.730613][T24106] netlink: 'syz.4.4578': attribute type 1 has an invalid length. [ 1116.775277][T24106] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4578'. [ 1119.844336][T16578] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30 [ 1119.903203][T16578] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30 [ 1119.911169][T16578] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1120.015068][T24135] device syzkaller0 entered promiscuous mode [ 1122.565718][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1122.576603][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1122.586339][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1122.595527][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1122.622860][ T50] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1122.635691][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1124.730524][ T50] Bluetooth: hci6: command 0x0409 tx timeout [ 1126.800257][ T50] Bluetooth: hci6: command 0x041b tx timeout [ 1126.873080][T24158] netlink: 'syz.4.4591': attribute type 275 has an invalid length. [ 1127.293163][T24159] rxe_eth0 speed is unknown, defaulting to 1000 [ 1128.676380][T24183] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.4597'. [ 1128.692576][T24183] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1128.882761][ T50] Bluetooth: hci6: command 0x040f tx timeout [ 1130.900291][T24193] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4600'. [ 1130.970388][ T50] Bluetooth: hci6: command 0x0419 tx timeout [ 1131.148051][T24204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4603'. [ 1133.599249][T24159] chnl_net:caif_netlink_parms(): no params data found [ 1134.411823][T24231] netlink: 'syz.4.4607': attribute type 1 has an invalid length. [ 1134.420221][T24231] netlink: 'syz.4.4607': attribute type 3 has an invalid length. [ 1134.428215][T24231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4607'. [ 1134.812659][T24159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.894805][T24159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.010256][T24159] device bridge_slave_0 entered promiscuous mode [ 1135.083133][T24159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.121603][T24159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1135.185860][T24159] device bridge_slave_1 entered promiscuous mode [ 1135.636051][T24242] netlink: 'syz.0.4609': attribute type 10 has an invalid length. [ 1135.664829][T24242] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4609'. [ 1135.684915][T24159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1135.731657][T24159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1135.899686][T24159] team0: Port device team_slave_0 added [ 1135.931063][T24159] team0: Port device team_slave_1 added [ 1136.058052][T24159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.081473][T24159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.138762][T24159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.180349][T24159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.193852][T24159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1136.270415][T24159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.058462][T24159] device hsr_slave_0 entered promiscuous mode [ 1138.235582][T24159] device hsr_slave_1 entered promiscuous mode [ 1138.478048][T24159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1138.510644][T24159] Cannot create hsr debugfs directory [ 1140.994243][T24159] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1141.095723][T24159] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1141.213971][T24159] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1141.310380][T24159] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1141.979865][T24159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1142.026121][T24287] netlink: 'syz.0.4622': attribute type 21 has an invalid length. [ 1142.106602][T24289] netlink: 'syz.4.4623': attribute type 4 has an invalid length. [ 1142.124331][T24287] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4622'. [ 1142.243113][T24289] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4623'. [ 1142.288722][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1142.309098][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1142.388545][T24159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1142.435998][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1142.457443][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1142.497232][T10036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.504564][T10036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1142.567847][T10036] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1142.603760][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1142.632976][ T5480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1142.660777][ T5480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.668068][ T5480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1142.706377][T24294] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1142.734208][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1142.770343][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1142.785259][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1142.833076][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1142.870860][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1143.066739][T24294] netlink: 'syz.0.4625': attribute type 10 has an invalid length. [ 1143.079050][T24294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4625'. [ 1143.116221][T24294] device batadv_slave_0 entered promiscuous mode [ 1143.168127][T24294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.221723][T24294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.316547][T24294] bridge0: port 3(batadv_slave_0) entered blocking state [ 1143.343627][T24294] bridge0: port 3(batadv_slave_0) entered disabled state [ 1143.464315][T24294] bridge0: port 3(batadv_slave_0) entered blocking state [ 1143.474239][T24294] bridge0: port 3(batadv_slave_0) entered forwarding state [ 1143.979258][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1144.029309][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1144.065112][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1144.079866][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1144.109400][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1144.138581][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1144.171910][T24159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1144.200874][T24299] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4626'. [ 1148.952640][T24300] netlink: 'syz.4.4626': attribute type 10 has an invalid length. [ 1149.181592][ T5441] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.360627][T24340] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1149.369787][T24340] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1149.595980][ T5441] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.948503][T24345] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.4632'. [ 1150.148506][ T5441] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.279765][T24370] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4634'. [ 1150.303585][ T5441] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.373065][T24378] netlink: 'syz.2.4635': attribute type 10 has an invalid length. [ 1150.388272][T24378] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4635'. [ 1150.424774][T24368] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4635'. [ 1150.452519][T24378] device  entered promiscuous mode [ 1150.471735][T24378] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1150.529014][T24368] netlink: 'syz.2.4635': attribute type 11 has an invalid length. [ 1150.595821][T24377] netlink: 'syz.5.4637': attribute type 21 has an invalid length. [ 1150.615636][T24377] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4637'. [ 1150.673872][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1150.695362][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1150.716794][T24159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1150.846933][T24384] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1150.976735][T24384] netlink: 'syz.4.4638': attribute type 10 has an invalid length. [ 1150.996735][T24384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4638'. [ 1151.025885][T24396] delete_channel: no stack [ 1151.050288][T24384] device batadv_slave_0 entered promiscuous mode [ 1151.071959][T24384] bridge0: port 4(batadv_slave_0) entered blocking state [ 1151.121601][ T50] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 1151.137226][T24384] bridge0: port 4(batadv_slave_0) entered disabled state [ 1151.224703][T24384] bridge0: port 4(batadv_slave_0) entered blocking state [ 1151.231997][T24384] bridge0: port 4(batadv_slave_0) entered forwarding state [ 1151.365887][ T5441] device .*! left promiscuous mode [ 1151.416239][ T5441] device 0 left promiscuous mode [ 1151.577544][T24412] netlink: 'syz.0.4651': attribute type 3 has an invalid length. [ 1151.601567][ T5441] tipc: Left network mode [ 1151.666569][T24412] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1151.924501][T24419] netlink: 'syz.5.4642': attribute type 10 has an invalid length. [ 1151.945666][T24419] netlink: 55 bytes leftover after parsing attributes in process `syz.5.4642'. [ 1153.212557][T24436] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1153.481903][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1153.507650][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1153.848605][T16578] Bluetooth: hci0: command 0x0406 tx timeout [ 1154.133031][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1154.144135][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1154.162794][T24159] device veth0_vlan entered promiscuous mode [ 1154.172890][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1154.192959][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1154.352536][T24159] device veth1_vlan entered promiscuous mode [ 1154.616131][T24471] IPv6: …: Disabled Multicast RS [ 1154.754396][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1154.777127][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1154.844757][T24159] device veth0_macvtap entered promiscuous mode [ 1154.884722][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1154.930166][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1155.264798][T24159] device veth1_macvtap entered promiscuous mode [ 1155.631860][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1155.655011][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1155.732532][T24489] __nla_validate_parse: 4 callbacks suppressed [ 1155.732550][T24489] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4658'. [ 1155.767593][T24492] netlink: 'syz.5.4657': attribute type 9 has an invalid length. [ 1155.780627][T24492] netlink: 134780 bytes leftover after parsing attributes in process `syz.5.4657'. [ 1156.078589][T24495] can: request_module (can-proto-0) failed. [ 1156.339098][ T5441] device wlan1 left promiscuous mode [ 1156.367747][ T5441] team0: Port device wlan1 removed [ 1156.484555][T24509] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.4661'. [ 1158.970263][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1159.506494][T24507] netlink: 'syz.5.4661': attribute type 21 has an invalid length. [ 1159.524049][T24509] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1159.541478][T24509] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1159.568132][T24509] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1159.820295][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1159.859260][T24521] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.4665'. [ 1159.870110][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.886155][T24159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.004970][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1160.032431][ T6546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1160.079675][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.112395][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.137392][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.154238][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.166541][T24159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1160.183514][T24159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.197388][T24159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.230924][T10424] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1160.252199][T10424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1160.329433][T24159] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.370206][T24159] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.379049][T24159] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.419349][T24159] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.542645][T24540] netlink: 'syz.5.4668': attribute type 2 has an invalid length. [ 1160.636081][T24545] netlink: 'syz.4.4670': attribute type 29 has an invalid length. [ 1160.719592][ T5441] device team0 left promiscuous mode [ 1160.761333][ T5441] device team_slave_1 left promiscuous mode [ 1160.791435][ T5441] device macvlan1 left promiscuous mode [ 1160.818477][ T5441] device geneve1 left promiscuous mode [ 1160.836743][ T5441] device macvlan0 left promiscuous mode [ 1160.872240][ T5441] ¥: port 1(team0) entered disabled state [ 1161.065505][ T5441] device hsr_slave_0 left promiscuous mode [ 1161.096659][ T5441] device hsr_slave_1 left promiscuous mode [ 1161.352324][ T5441] device veth1_macvtap left promiscuous mode [ 1161.402042][ T5441] device veth0_macvtap left promiscuous mode [ 1161.408318][ T5441] device veth1_vlan left promiscuous mode [ 1161.425782][ T5441] device veth0_vlan left promiscuous mode [ 1161.906394][ T5441] team0 (unregistering): Port device geneve1 removed [ 1162.195717][ T5441] team0 (unregistering): Port device macvlan1 removed [ 1162.265231][ T5441] team0 (unregistering): Port device macvlan0 removed [ 1162.745819][ T5441] team0 (unregistering): Port device team_slave_1 removed [ 1163.369482][T24545] netlink: 'syz.4.4670': attribute type 29 has an invalid length. [ 1163.398904][T24557] netlink: 'syz.5.4672': attribute type 10 has an invalid length. [ 1163.460938][T24557] team0: Device wg1 is of different type [ 1163.507856][T24558] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.4671'. [ 1163.572042][T10426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.605569][T10426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.705358][T10426] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1163.752902][T10426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1163.807049][T10426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1163.854797][T10401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1164.137132][T24593] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4677'. [ 1164.908117][T24624] netlink: 'syz.5.4681': attribute type 10 has an invalid length. [ 1165.167767][T24638] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1165.274054][T24639] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4684'. [ 1165.718140][T24649] netlink: 'syz.6.4685': attribute type 10 has an invalid length. [ 1166.026413][T24655] netlink: 'syz.5.4687': attribute type 1 has an invalid length. [ 1166.137692][T24655] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.4687'. [ 1166.771788][T24649] team0: Device wg1 is of different type [ 1166.790529][T24679] netlink: 'syz.0.4691': attribute type 1 has an invalid length. [ 1166.829567][T24679] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.4691'. [ 1166.845251][T24665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4689'. [ 1166.917838][T24681] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4690'. [ 1167.224676][T24686] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4692'. [ 1167.421690][T24686] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1167.476416][T24686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1167.595094][T24700] netlink: 'syz.4.4694': attribute type 49 has an invalid length. [ 1167.723115][T24700] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4694'. [ 1167.766961][T24701] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1167.793651][T24700] netlink: zone id is out of range [ 1167.799265][T24700] netlink: zone id is out of range [ 1167.867820][T24701] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1167.911044][T24700] netlink: zone id is out of range [ 1167.917418][T24700] netlink: zone id is out of range [ 1167.931853][T24700] netlink: zone id is out of range [ 1167.937538][T24700] netlink: zone id is out of range [ 1168.174618][T24717] netlink: 'syz.2.4696': attribute type 19 has an invalid length. [ 1173.038608][T24821] __nla_validate_parse: 3 callbacks suppressed [ 1173.038630][T24821] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1173.957842][T24824] rxe_eth0 speed is unknown, defaulting to 1000 [ 1174.082150][T24842] netlink: 'syz.0.4719': attribute type 4 has an invalid length. [ 1174.089981][T24842] netlink: 'syz.0.4719': attribute type 10 has an invalid length. [ 1174.170202][T24842] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1174.308646][T24846] netlink: 'syz.0.4719': attribute type 4 has an invalid length. [ 1174.354059][T24846] netlink: 'syz.0.4719': attribute type 10 has an invalid length. [ 1174.374473][T24846] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1177.374817][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.381315][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.772984][T24892] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4730'. [ 1178.451852][T24914] netlink: 'syz.0.4734': attribute type 21 has an invalid length. [ 1178.490894][T24914] netlink: 'syz.0.4734': attribute type 6 has an invalid length. [ 1178.535853][T24914] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4734'. [ 1178.584976][T24921] netlink: 194236 bytes leftover after parsing attributes in process `syz.6.4736'. [ 1178.630399][T24921] netlink: zone id is out of range [ 1178.635934][T24921] netlink: get zone limit has 8 unknown bytes [ 1179.100999][T24938] netlink: 'syz.6.4739': attribute type 10 has an invalid length. [ 1179.162015][T24938] team0: Device nlmon0 is of different type [ 1179.583704][T24954] netlink: 131088 bytes leftover after parsing attributes in process `syz.5.4744'. [ 1179.721186][T24954] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1179.744732][T24954] CPU: 0 PID: 24954 Comm: syz.5.4744 Not tainted syzkaller #0 [ 1179.752317][T24954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1179.762429][T24954] Call Trace: [ 1179.765759][T24954] [ 1179.768734][T24954] dump_stack_lvl+0x188/0x24e [ 1179.773483][T24954] ? show_regs_print_info+0x12/0x12 [ 1179.778747][T24954] ? load_image+0x410/0x410 [ 1179.783329][T24954] sysfs_warn_dup+0x8a/0xa0 [ 1179.787895][T24954] sysfs_do_create_link_sd+0xc0/0x110 [ 1179.793332][T24954] device_add+0x83b/0x1050 [ 1179.797822][T24954] wiphy_register+0x1f16/0x2c50 [ 1179.802770][T24954] ? cfg80211_event_work+0x40/0x40 [ 1179.807950][T24954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1179.814190][T24954] ? ieee80211_register_hw+0x2d94/0x3b00 [ 1179.820097][T24954] ieee80211_register_hw+0x2e33/0x3b00 [ 1179.825645][T24954] ? ieee80211_register_hw+0xec1/0x3b00 [ 1179.831259][T24954] ? ieee80211_register_hw+0xec1/0x3b00 [ 1179.836917][T24954] ? ieee80211_tasklet_handler+0x20/0x20 [ 1179.842628][T24954] ? __hrtimer_init+0x189/0x270 [ 1179.847568][T24954] ? __sanitizer_cov_trace_pc+0x50/0x60 [ 1179.853177][T24954] ? __hrtimer_init+0x189/0x270 [ 1179.858105][T24954] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1179.863906][T24954] ? memcpy+0x3c/0x60 [ 1179.867951][T24954] hwsim_new_radio_nl+0xab7/0xc90 [ 1179.873063][T24954] genl_family_rcv_msg_doit+0x22f/0x350 [ 1179.878726][T24954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1179.884960][T24954] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1179.890968][T24954] ? ns_capable+0x85/0xe0 [ 1179.895370][T24954] ? __sanitizer_cov_trace_pc+0x3e/0x60 [ 1179.900981][T24954] genl_rcv_msg+0x601/0x790 [ 1179.905560][T24954] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1179.911826][T24954] ? genl_bind+0x360/0x360 [ 1179.916306][T24954] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1179.922717][T24954] ? lock_acquire+0x226/0x4a0 [ 1179.927470][T24954] netlink_rcv_skb+0x1ef/0x440 [ 1179.932309][T24954] ? genl_bind+0x360/0x360 [ 1179.936799][T24954] ? netlink_ack+0x1160/0x1160 [ 1179.941679][T24954] ? down_read+0x1a8/0x2d0 [ 1179.946150][T24954] genl_rcv+0x24/0x40 [ 1179.950191][T24954] netlink_unicast+0x7ad/0x920 [ 1179.955025][T24954] netlink_sendmsg+0x8ad/0xbd0 [ 1179.959873][T24954] ? netlink_getsockopt+0x550/0x550 [ 1179.965139][T24954] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1179.970751][T24954] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1179.976099][T24954] ? security_socket_sendmsg+0x7c/0xa0 [ 1179.981613][T24954] ? netlink_getsockopt+0x550/0x550 [ 1179.986888][T24954] ____sys_sendmsg+0x5ed/0x9a0 [ 1179.991729][T24954] ? __sys_sendmsg_sock+0x30/0x30 [ 1179.996858][T24954] ? __import_iovec+0x306/0x510 [ 1180.001797][T24954] ? import_iovec+0x6f/0xa0 [ 1180.006375][T24954] ___sys_sendmsg+0x2a2/0x360 [ 1180.011133][T24954] ? __sys_sendmsg+0x2a0/0x2a0 [ 1180.016008][T24954] ? lockdep_hardirqs_on+0x94/0x140 [ 1180.021316][T24954] __se_sys_sendmsg+0x1c3/0x2b0 [ 1180.026228][T24954] ? perf_trace_preemptirq_template+0x268/0x320 [ 1180.032536][T24954] ? __x64_sys_sendmsg+0x80/0x80 [ 1180.037608][T24954] ? lockdep_hardirqs_on+0x94/0x140 [ 1180.042874][T24954] do_syscall_64+0x4c/0xa0 [ 1180.047361][T24954] ? clear_bhb_loop+0x60/0xb0 [ 1180.052116][T24954] ? clear_bhb_loop+0x60/0xb0 [ 1180.056870][T24954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1180.062863][T24954] RIP: 0033:0x7ffbcfb9fb19 [ 1180.067365][T24954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.087130][T24954] RSP: 002b:00007ffbd0a5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.095626][T24954] RAX: ffffffffffffffda RBX: 00007ffbcfe25fa0 RCX: 00007ffbcfb9fb19 [ 1180.103668][T24954] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000007 [ 1180.111702][T24954] RBP: 00007ffbcfc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1180.119736][T24954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.127766][T24954] R13: 00007ffbcfe26038 R14: 00007ffbcfe25fa0 R15: 00007ffef3b721a8 [ 1180.135830][T24954] [ 1180.214862][T24957] netlink: 'syz.6.4745': attribute type 10 has an invalid length. [ 1181.444148][T24984] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4753'. [ 1181.458885][T24984] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1181.499587][T24984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.116255][T25018] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4757'. [ 1182.413763][T25026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1182.442308][T25026] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4759'. [ 1182.577283][T25033] netlink: 'syz.2.4759': attribute type 29 has an invalid length. [ 1182.630573][T25033] netlink: 'syz.2.4759': attribute type 29 has an invalid length. [ 1182.746215][T25035] netlink: 'syz.2.4759': attribute type 29 has an invalid length. [ 1182.774844][T25033] netlink: 'syz.2.4759': attribute type 29 has an invalid length. [ 1182.827135][T25033] netlink: 'syz.2.4759': attribute type 29 has an invalid length. [ 1183.826819][T25066] netlink: 'syz.5.4769': attribute type 3 has an invalid length. [ 1183.859692][T25066] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4769'. [ 1185.494361][T25116] netlink: 'syz.5.4779': attribute type 21 has an invalid length. [ 1185.520296][T25116] netlink: 'syz.5.4779': attribute type 6 has an invalid length. [ 1185.558671][T25116] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4779'. [ 1185.729274][T25133] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.4781'. [ 1186.812150][T25163] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4786'. [ 1187.120883][T25168] netlink: 'syz.2.4787': attribute type 10 has an invalid length. [ 1188.454487][T25195] netlink: 'syz.5.4792': attribute type 10 has an invalid length. [ 1189.469138][T25195] team0: Port device geneve1 added [ 1189.515345][T25196] netlink: 'syz.2.4791': attribute type 21 has an invalid length. [ 1189.529592][T25196] netlink: 'syz.2.4791': attribute type 6 has an invalid length. [ 1189.547166][T25196] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4791'. [ 1189.568719][T25204] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4793'. [ 1189.666088][T25206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4793'. [ 1190.728140][T25232] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4797'. [ 1190.798493][T25236] netlink: 'syz.2.4798': attribute type 3 has an invalid length. [ 1190.902904][T25236] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1191.081757][T25244] netlink: 'syz.2.4798': attribute type 3 has an invalid length. [ 1191.155192][T25244] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4798'. [ 1191.587425][T25257] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1191.617937][T25257] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4803'. [ 1191.806425][T25267] netlink: 'syz.5.4805': attribute type 21 has an invalid length. [ 1191.829176][T25267] netlink: 'syz.5.4805': attribute type 6 has an invalid length. [ 1191.850277][T25267] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4805'. [ 1192.440781][T25286] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4810'. [ 1192.525614][T25286] openvswitch: netlink: Message has 6 unknown bytes. [ 1192.640584][T25281] rxe_eth0 speed is unknown, defaulting to 1000 [ 1195.288133][T25306] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1196.364089][T25332] rxe_eth0 speed is unknown, defaulting to 1000 [ 1196.657333][T25338] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4816'. [ 1196.702186][T25334] netlink: 'syz.2.4818': attribute type 9 has an invalid length. [ 1196.809026][T25334] netlink: 134424 bytes leftover after parsing attributes in process `syz.2.4818'. [ 1197.189095][T25327] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4816'. [ 1197.735910][T25349] netlink: 'syz.0.4821': attribute type 21 has an invalid length. [ 1197.764628][T25349] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4821'. [ 1197.934395][T10414] wlan1: Trigger new scan to find an IBSS to join [ 1198.529538][T25370] netlink: 'syz.5.4824': attribute type 3 has an invalid length. [ 1198.622639][T25370] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4824'. [ 1199.986139][T25405] netlink: 'syz.6.4831': attribute type 1 has an invalid length. [ 1200.011687][T25407] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.4832'. [ 1200.044901][T25405] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.4831'. [ 1200.142718][T25407] device syzkaller0 entered promiscuous mode [ 1200.551155][T25424] netlink: 134780 bytes leftover after parsing attributes in process `syz.4.4833'. [ 1200.604218][T25427] netlink: 'syz.5.4836': attribute type 10 has an invalid length. [ 1200.636133][T25427] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4836'. [ 1200.670492][T25427] netlink: 'syz.5.4836': attribute type 10 has an invalid length. [ 1200.714718][T25427] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4836'. [ 1200.750411][T25430] netlink: 'syz.0.4837': attribute type 2 has an invalid length. [ 1200.890994][T25435] netlink: 'syz.6.4839': attribute type 10 has an invalid length. [ 1201.071773][T25435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.116796][T25435] device bridge_slave_1 left promiscuous mode [ 1202.138654][T25435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.396381][T25465] netlink: 'syz.2.4845': attribute type 4 has an invalid length. [ 1202.410229][T25465] __nla_validate_parse: 1 callbacks suppressed [ 1202.410250][T25465] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4845'. [ 1202.714636][T25485] device syzkaller0 left promiscuous mode [ 1202.767609][T25489] netlink: 'syz.0.4849': attribute type 27 has an invalid length. [ 1203.674004][T25509] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4852'. [ 1204.295556][T25523] netlink: 'syz.4.4857': attribute type 19 has an invalid length. [ 1204.350084][T25530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1204.462006][T25530] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1204.548867][T25535] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4858'. [ 1204.848821][T25526] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.4854'. [ 1205.550422][T25561] netlink: 'syz.5.4861': attribute type 2 has an invalid length. [ 1205.663758][T25567] tipc: Started in network mode [ 1205.670096][T25567] tipc: Node identity 9215a268, cluster identity 4711 [ 1205.698063][T25567] tipc: Node number set to 2450891368 [ 1207.285245][T25609] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4871'. [ 1207.735006][T25607] IPv6: NLM_F_CREATE should be specified when creating new route [ 1207.860235][T25607] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4872'. [ 1208.820834][T25652] netlink: 'syz.6.4878': attribute type 2 has an invalid length. [ 1208.860139][T25652] netlink: 'syz.6.4878': attribute type 8 has an invalid length. [ 1208.903114][T25652] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4878'. [ 1208.937480][T25638] netlink: 134780 bytes leftover after parsing attributes in process `syz.5.4875'. [ 1209.509885][T25679] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4886'. [ 1209.568992][T25679] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1209.920448][T25690] netlink: 'syz.2.4887': attribute type 19 has an invalid length. [ 1209.966778][T25690] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4887'. [ 1210.499818][T25698] netlink: 'syz.0.4890': attribute type 1 has an invalid length. [ 1212.186682][T25732] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4896'. [ 1212.393004][T25738] netlink: 'syz.6.4897': attribute type 4 has an invalid length. [ 1212.496607][T25738] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.4897'. [ 1212.642437][T25743] netlink: 184 bytes leftover after parsing attributes in process `syz.2.4899'. [ 1213.804873][T25770] netlink: 'syz.4.4901': attribute type 23 has an invalid length. [ 1213.899773][T25773] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.4904'. [ 1214.051856][T25773] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1214.100574][T25773] CPU: 1 PID: 25773 Comm: syz.0.4904 Not tainted syzkaller #0 [ 1214.108138][T25773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1214.118288][T25773] Call Trace: [ 1214.121629][T25773] [ 1214.124604][T25773] dump_stack_lvl+0x188/0x24e [ 1214.129353][T25773] ? show_regs_print_info+0x12/0x12 [ 1214.134625][T25773] ? load_image+0x410/0x410 [ 1214.139214][T25773] sysfs_warn_dup+0x8a/0xa0 [ 1214.143805][T25773] sysfs_do_create_link_sd+0xc0/0x110 [ 1214.149290][T25773] device_add+0x83b/0x1050 [ 1214.153772][T25773] wiphy_register+0x1f16/0x2c50 [ 1214.158722][T25773] ? cfg80211_event_work+0x40/0x40 [ 1214.163907][T25773] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1214.170286][T25773] ieee80211_register_hw+0x2e33/0x3b00 [ 1214.175806][T25773] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1214.182027][T25773] ? ieee80211_register_hw+0xec1/0x3b00 [ 1214.187613][T25773] ? ieee80211_register_hw+0xec1/0x3b00 [ 1214.193208][T25773] ? ieee80211_tasklet_handler+0x20/0x20 [ 1214.198875][T25773] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1214.204850][T25773] ? __debug_object_init+0xed/0x440 [ 1214.210095][T25773] ? memset+0x1e/0x40 [ 1214.214202][T25773] ? __hrtimer_init+0x189/0x270 [ 1214.219103][T25773] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1214.224868][T25773] ? memcpy+0x3c/0x60 [ 1214.228895][T25773] hwsim_new_radio_nl+0xab7/0xc90 [ 1214.233976][T25773] genl_family_rcv_msg_doit+0x22f/0x350 [ 1214.239560][T25773] ? end_current_label_crit_section+0x170/0x170 [ 1214.245837][T25773] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1214.252031][T25773] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1214.257971][T25773] ? bpf_lsm_capable+0x5/0x10 [ 1214.262686][T25773] ? security_capable+0x85/0xb0 [ 1214.267584][T25773] genl_rcv_msg+0x601/0x790 [ 1214.272141][T25773] ? genl_bind+0x360/0x360 [ 1214.276586][T25773] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1214.282975][T25773] netlink_rcv_skb+0x1ef/0x440 [ 1214.287796][T25773] ? genl_bind+0x360/0x360 [ 1214.292259][T25773] ? netlink_ack+0x1160/0x1160 [ 1214.297069][T25773] ? down_read+0x1a8/0x2d0 [ 1214.301518][T25773] genl_rcv+0x24/0x40 [ 1214.305537][T25773] netlink_unicast+0x7ad/0x920 [ 1214.310353][T25773] netlink_sendmsg+0x8ad/0xbd0 [ 1214.315165][T25773] ? lockdep_hardirqs_on+0x94/0x140 [ 1214.320404][T25773] ? netlink_getsockopt+0x550/0x550 [ 1214.325647][T25773] ? netlink_getsockopt+0x550/0x550 [ 1214.330881][T25773] ? netlink_getsockopt+0x550/0x550 [ 1214.336127][T25773] ____sys_sendmsg+0x5ed/0x9a0 [ 1214.340943][T25773] ? __sys_sendmsg_sock+0x30/0x30 [ 1214.346003][T25773] ? __import_iovec+0x306/0x510 [ 1214.350899][T25773] ? import_iovec+0x6f/0xa0 [ 1214.355458][T25773] ___sys_sendmsg+0x2a2/0x360 [ 1214.360178][T25773] ? __sys_sendmsg+0x2a0/0x2a0 [ 1214.365183][T25773] __se_sys_sendmsg+0x1c3/0x2b0 [ 1214.370094][T25773] ? __x64_sys_sendmsg+0x80/0x80 [ 1214.375102][T25773] ? lockdep_hardirqs_on+0x94/0x140 [ 1214.380344][T25773] do_syscall_64+0x4c/0xa0 [ 1214.384806][T25773] ? clear_bhb_loop+0x60/0xb0 [ 1214.389537][T25773] ? clear_bhb_loop+0x60/0xb0 [ 1214.394276][T25773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1214.400572][T25773] RIP: 0033:0x7f8731b9fb19 [ 1214.405024][T25773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1214.424670][T25773] RSP: 002b:00007f87329cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1214.433123][T25773] RAX: ffffffffffffffda RBX: 00007f8731e25fa0 RCX: 00007f8731b9fb19 [ 1214.441133][T25773] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1214.449149][T25773] RBP: 00007f8731c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1214.457142][T25773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.465164][T25773] R13: 00007f8731e26038 R14: 00007f8731e25fa0 R15: 00007ffde642dc08 [ 1214.473184][T25773] [ 1214.601446][T25789] netlink: 16410 bytes leftover after parsing attributes in process `syz.6.4907'. [ 1215.323372][T25812] netlink: 'syz.6.4912': attribute type 4 has an invalid length. [ 1215.349620][T25812] netlink: 136304 bytes leftover after parsing attributes in process `syz.6.4912'. [ 1215.816134][T25820] netlink: 131088 bytes leftover after parsing attributes in process `syz.6.4914'. [ 1215.885483][T25820] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1216.288687][T25834] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4917'. [ 1216.357466][T25834] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1216.442717][T25834] CPU: 0 PID: 25834 Comm: syz.5.4917 Not tainted syzkaller #0 [ 1216.450327][T25834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1216.460431][T25834] Call Trace: [ 1216.463752][T25834] [ 1216.466724][T25834] dump_stack_lvl+0x188/0x24e [ 1216.471469][T25834] ? show_regs_print_info+0x12/0x12 [ 1216.476732][T25834] ? load_image+0x410/0x410 [ 1216.481309][T25834] sysfs_warn_dup+0x8a/0xa0 [ 1216.485885][T25834] sysfs_do_create_link_sd+0xc0/0x110 [ 1216.491334][T25834] device_add+0x83b/0x1050 [ 1216.495810][T25834] wiphy_register+0x1f16/0x2c50 [ 1216.500745][T25834] ? cfg80211_event_work+0x40/0x40 [ 1216.505907][T25834] ? minstrel_ht_alloc+0x894/0xa20 [ 1216.511074][T25834] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1216.517179][T25834] ieee80211_register_hw+0x2e33/0x3b00 [ 1216.522688][T25834] ? ieee80211_register_hw+0xec1/0x3b00 [ 1216.528271][T25834] ? ieee80211_register_hw+0xec1/0x3b00 [ 1216.533861][T25834] ? ieee80211_tasklet_handler+0x20/0x20 [ 1216.539595][T25834] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1216.545546][T25834] ? __debug_object_init+0xed/0x440 [ 1216.550796][T25834] ? memset+0x1e/0x40 [ 1216.554816][T25834] ? __hrtimer_init+0x189/0x270 [ 1216.559704][T25834] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1216.565470][T25834] ? memcpy+0x3c/0x60 [ 1216.569496][T25834] hwsim_new_radio_nl+0xab7/0xc90 [ 1216.574576][T25834] genl_family_rcv_msg_doit+0x22f/0x350 [ 1216.580170][T25834] ? end_current_label_crit_section+0x170/0x170 [ 1216.586461][T25834] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1216.592395][T25834] ? bpf_lsm_capable+0x5/0x10 [ 1216.597110][T25834] ? security_capable+0x85/0xb0 [ 1216.602003][T25834] genl_rcv_msg+0x601/0x790 [ 1216.606578][T25834] ? genl_bind+0x360/0x360 [ 1216.611034][T25834] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1216.617414][T25834] netlink_rcv_skb+0x1ef/0x440 [ 1216.622242][T25834] ? genl_bind+0x360/0x360 [ 1216.626693][T25834] ? netlink_ack+0x1160/0x1160 [ 1216.631504][T25834] ? down_read+0x1a8/0x2d0 [ 1216.635955][T25834] genl_rcv+0x24/0x40 [ 1216.639971][T25834] netlink_unicast+0x7ad/0x920 [ 1216.644784][T25834] netlink_sendmsg+0x8ad/0xbd0 [ 1216.649593][T25834] ? netlink_getsockopt+0x550/0x550 [ 1216.654836][T25834] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1216.660441][T25834] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1216.665759][T25834] ? security_socket_sendmsg+0x7c/0xa0 [ 1216.671251][T25834] ? netlink_getsockopt+0x550/0x550 [ 1216.676510][T25834] ____sys_sendmsg+0x5ed/0x9a0 [ 1216.681320][T25834] ? __sys_sendmsg_sock+0x30/0x30 [ 1216.686378][T25834] ? __import_iovec+0x306/0x510 [ 1216.691296][T25834] ? import_iovec+0x6f/0xa0 [ 1216.695843][T25834] ___sys_sendmsg+0x2a2/0x360 [ 1216.700910][T25834] ? __sys_sendmsg+0x2a0/0x2a0 [ 1216.705762][T25834] __se_sys_sendmsg+0x1c3/0x2b0 [ 1216.710664][T25834] ? __x64_sys_sendmsg+0x80/0x80 [ 1216.715654][T25834] ? lockdep_hardirqs_on+0x94/0x140 [ 1216.720894][T25834] do_syscall_64+0x4c/0xa0 [ 1216.725345][T25834] ? clear_bhb_loop+0x60/0xb0 [ 1216.730061][T25834] ? clear_bhb_loop+0x60/0xb0 [ 1216.734785][T25834] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1216.740719][T25834] RIP: 0033:0x7ffbcfb9fb19 [ 1216.745168][T25834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1216.764807][T25834] RSP: 002b:00007ffbd0a1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1216.773262][T25834] RAX: ffffffffffffffda RBX: 00007ffbcfe26180 RCX: 00007ffbcfb9fb19 [ 1216.781267][T25834] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 1216.789263][T25834] RBP: 00007ffbcfc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1216.797264][T25834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1216.805537][T25834] R13: 00007ffbcfe26218 R14: 00007ffbcfe26180 R15: 00007ffef3b721a8 [ 1216.813578][T25834] [ 1217.527682][T25840] rxe_eth0 speed is unknown, defaulting to 1000 [ 1218.625739][T25867] netlink: 'syz.5.4924': attribute type 10 has an invalid length. [ 1219.942675][T25903] netlink: 131088 bytes leftover after parsing attributes in process `syz.4.4931'. [ 1220.215090][T25876] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4927'. [ 1220.344795][T25876] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.507204][T25903] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1220.546095][T25903] CPU: 0 PID: 25903 Comm: syz.4.4931 Not tainted syzkaller #0 [ 1220.553670][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1220.563821][T25903] Call Trace: [ 1220.567147][T25903] [ 1220.570120][T25903] dump_stack_lvl+0x188/0x24e [ 1220.574894][T25903] ? show_regs_print_info+0x12/0x12 [ 1220.580217][T25903] ? load_image+0x410/0x410 [ 1220.584795][T25903] sysfs_warn_dup+0x8a/0xa0 [ 1220.589363][T25903] sysfs_do_create_link_sd+0xc0/0x110 [ 1220.594798][T25903] device_add+0x83b/0x1050 [ 1220.599287][T25903] wiphy_register+0x1f16/0x2c50 [ 1220.604247][T25903] ? cfg80211_event_work+0x40/0x40 [ 1220.609449][T25903] ? minstrel_ht_alloc+0x894/0xa20 [ 1220.614632][T25903] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1220.620764][T25903] ieee80211_register_hw+0x2e33/0x3b00 [ 1220.626297][T25903] ? ieee80211_register_hw+0xec1/0x3b00 [ 1220.631896][T25903] ? ieee80211_register_hw+0xec1/0x3b00 [ 1220.637539][T25903] ? ieee80211_tasklet_handler+0x20/0x20 [ 1220.643226][T25903] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1220.649182][T25903] ? __debug_object_init+0xed/0x440 [ 1220.654447][T25903] ? memset+0x1e/0x40 [ 1220.658477][T25903] ? __hrtimer_init+0x189/0x270 [ 1220.663390][T25903] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1220.669183][T25903] ? memcpy+0x3c/0x60 [ 1220.673224][T25903] hwsim_new_radio_nl+0xab7/0xc90 [ 1220.678332][T25903] genl_family_rcv_msg_doit+0x22f/0x350 [ 1220.683969][T25903] ? end_current_label_crit_section+0x170/0x170 [ 1220.690285][T25903] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1220.696250][T25903] ? bpf_lsm_capable+0x5/0x10 [ 1220.700982][T25903] ? security_capable+0x85/0xb0 [ 1220.705909][T25903] genl_rcv_msg+0x601/0x790 [ 1220.710486][T25903] ? genl_bind+0x360/0x360 [ 1220.714962][T25903] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1220.721379][T25903] netlink_rcv_skb+0x1ef/0x440 [ 1220.726204][T25903] ? genl_bind+0x360/0x360 [ 1220.730687][T25903] ? netlink_ack+0x1160/0x1160 [ 1220.735522][T25903] ? down_read+0x1a8/0x2d0 [ 1220.739996][T25903] genl_rcv+0x24/0x40 [ 1220.744056][T25903] netlink_unicast+0x7ad/0x920 [ 1220.748896][T25903] netlink_sendmsg+0x8ad/0xbd0 [ 1220.753733][T25903] ? netlink_getsockopt+0x550/0x550 [ 1220.759013][T25903] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1220.764630][T25903] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1220.769982][T25903] ? security_socket_sendmsg+0x7c/0xa0 [ 1220.775504][T25903] ? netlink_getsockopt+0x550/0x550 [ 1220.780796][T25903] ____sys_sendmsg+0x5ed/0x9a0 [ 1220.785637][T25903] ? __sys_sendmsg_sock+0x30/0x30 [ 1220.790718][T25903] ? __import_iovec+0x306/0x510 [ 1220.795642][T25903] ? import_iovec+0x6f/0xa0 [ 1220.800205][T25903] ___sys_sendmsg+0x2a2/0x360 [ 1220.804948][T25903] ? __sys_sendmsg+0x2a0/0x2a0 [ 1220.809808][T25903] ? trace_call_bpf+0xbf/0x6b0 [ 1220.814706][T25903] __se_sys_sendmsg+0x1c3/0x2b0 [ 1220.819622][T25903] ? ct_nmi_exit+0x145/0x1c0 [ 1220.824274][T25903] ? __x64_sys_sendmsg+0x80/0x80 [ 1220.829293][T25903] ? lockdep_hardirqs_on+0x94/0x140 [ 1220.834557][T25903] do_syscall_64+0x4c/0xa0 [ 1220.839043][T25903] ? clear_bhb_loop+0x60/0xb0 [ 1220.843786][T25903] ? clear_bhb_loop+0x60/0xb0 [ 1220.848526][T25903] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1220.854480][T25903] RIP: 0033:0x7f14a459fb19 [ 1220.858972][T25903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.878669][T25903] RSP: 002b:00007f14a54c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1220.887150][T25903] RAX: ffffffffffffffda RBX: 00007f14a4826090 RCX: 00007f14a459fb19 [ 1220.895177][T25903] RDX: 0000000000000000 RSI: 0000200000001580 RDI: 0000000000000006 [ 1220.903212][T25903] RBP: 00007f14a4637b70 R08: 0000000000000000 R09: 0000000000000000 [ 1220.911239][T25903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1220.919259][T25903] R13: 00007f14a4826128 R14: 00007f14a4826090 R15: 00007ffd88133388 [ 1220.927350][T25903] [ 1221.889508][T25906] netlink: 'syz.5.4932': attribute type 10 has an invalid length. [ 1222.135995][T25906] device macvlan0 entered promiscuous mode [ 1222.242460][T25906] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1222.650485][T25917] netlink: 'syz.5.4935': attribute type 4 has an invalid length. [ 1222.706232][T25917] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4935'. [ 1223.013702][T25918] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4935'. [ 1223.681637][T25950] netlink: 'syz.0.4943': attribute type 2 has an invalid length. [ 1223.699911][T25950] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4943'. [ 1224.551969][T25953] netlink: 'syz.4.4944': attribute type 25 has an invalid length. [ 1224.580257][T25953] netlink: 'syz.4.4944': attribute type 9 has an invalid length. [ 1224.619377][T25953] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1224.807496][T25954] netlink: 'syz.4.4944': attribute type 10 has an invalid length. [ 1224.849779][T25954] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4944'. [ 1226.732960][T25967] netlink: 'syz.4.4949': attribute type 10 has an invalid length. [ 1226.879709][T25967] device vxcan1 entered promiscuous mode [ 1226.907182][T25967] team0: Device vxcan1 is of different type [ 1227.099081][T25969] netlink: 'syz.5.4950': attribute type 2 has an invalid length. [ 1227.140442][T25969] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4950'. [ 1227.933632][T25991] netlink: 'syz.4.4956': attribute type 29 has an invalid length. [ 1227.967758][T25991] netlink: 'syz.4.4956': attribute type 29 has an invalid length. [ 1228.064820][T25992] netlink: 'syz.4.4956': attribute type 29 has an invalid length. [ 1228.240431][T25991] netlink: 'syz.4.4956': attribute type 29 has an invalid length. [ 1228.477165][T26004] netlink: 'syz.5.4960': attribute type 21 has an invalid length. [ 1228.513401][T26004] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4960'. [ 1228.550573][T26004] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4960'. [ 1229.128350][T26029] device syzkaller0 entered promiscuous mode [ 1231.749600][T26082] netlink: 'syz.2.4974': attribute type 2 has an invalid length. [ 1231.987979][T26069] rxe_eth0 speed is unknown, defaulting to 1000 [ 1232.038350][T26082] device .*! entered promiscuous mode [ 1232.142220][T26089] device sit0 entered promiscuous mode [ 1232.616543][T26092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1232.623923][T26092] IPv6: NLM_F_CREATE should be set when creating new route [ 1232.631321][T26092] IPv6: NLM_F_CREATE should be set when creating new route [ 1232.638610][T26092] IPv6: NLM_F_CREATE should be set when creating new route [ 1233.933842][T26113] netlink: 'syz.4.4982': attribute type 10 has an invalid length. [ 1234.062791][T26113] device hsr_slave_0 entered promiscuous mode [ 1234.101170][T26113] team0: Port device hsr_slave_0 added [ 1234.345037][T26107] rxe_eth0 speed is unknown, defaulting to 1000 [ 1236.056802][T26137] delete_channel: no stack [ 1237.593620][T26139] netlink: 'syz.2.4987': attribute type 13 has an invalid length. [ 1237.610143][T26139] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.4987'. [ 1237.957478][T26144] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.4989'. [ 1238.128027][T26154] netlink: 'syz.6.4991': attribute type 10 has an invalid length. [ 1238.144120][T26154] netlink: 2 bytes leftover after parsing attributes in process `syz.6.4991'. [ 1238.848490][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.855405][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.880183][T26154] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1238.909305][T26166] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1238.930524][T21122] syzkaller0: tun_net_xmit 76 [ 1239.813037][T26196] netlink: 'syz.4.5002': attribute type 21 has an invalid length. [ 1239.851488][T26196] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5002'. [ 1240.664776][T26218] netlink: 'syz.0.5009': attribute type 3 has an invalid length. [ 1240.710595][T26218] netlink: 'syz.0.5009': attribute type 1 has an invalid length. [ 1240.749055][T26218] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.5009'. [ 1241.640217][T26242] netlink: 'syz.6.5015': attribute type 2 has an invalid length. [ 1241.726704][T26232] device syzkaller0 entered promiscuous mode [ 1243.534904][T26262] netlink: 134056 bytes leftover after parsing attributes in process `syz.6.5019'. [ 1246.005858][ T50] Bluetooth: hci6: command 0x0406 tx timeout [ 1246.637702][T26259] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5018'. [ 1246.651266][T26262] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1246.662693][T26262] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1246.709541][T26262] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1247.117737][T26287] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5025'. [ 1247.179810][T26286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.247997][T26280] tipc: Started in network mode [ 1247.269842][T26280] tipc: Node identity 9215a268, cluster identity 4711 [ 1247.279544][T26280] tipc: Node number set to 2450891368 [ 1250.279439][T26295] netlink: 'syz.6.5027': attribute type 39 has an invalid length. [ 1250.423324][T26296] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1250.477863][T26296] openvswitch: netlink: Message has 48126 unknown bytes. [ 1250.792201][T26307] netlink: 'syz.2.5029': attribute type 3 has an invalid length. [ 1250.819410][T26307] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5029'. [ 1251.234000][T26319] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5032'. [ 1251.429243][T26307] rxe_eth0 speed is unknown, defaulting to 1000 [ 1251.447025][T26321] netlink: 'syz.6.5033': attribute type 21 has an invalid length. [ 1251.542369][T26321] netlink: 'syz.6.5033': attribute type 1 has an invalid length. [ 1251.594038][T26321] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5033'. [ 1252.028703][T26336] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5037'. [ 1252.050967][T26336] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5037'. [ 1252.104407][T26342] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5037'. [ 1256.326099][T26397] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5050'. [ 1256.575099][T26398] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1256.730338][T26388] can: request_module (can-proto-0) failed. [ 1256.776169][T26398] device  left promiscuous mode [ 1256.782770][T26398] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 1258.556490][T26437] device syzkaller0 left promiscuous mode [ 1258.649360][T26433] rxe_eth0 speed is unknown, defaulting to 1000 [ 1258.896432][T26449] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1258.925212][T26450] netlink: 'syz.5.5062': attribute type 10 has an invalid length. [ 1259.016617][T26449] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1259.040495][T26450] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5062'. [ 1259.327778][T26451] netlink: 14 bytes leftover after parsing attributes in process `syz.5.5062'. [ 1260.151367][T26451] team0: Port device team_slave_0 removed [ 1260.251885][T26461] device syzkaller0 entered promiscuous mode [ 1260.775899][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1260.829817][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1260.863980][T26488] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1260.903706][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1260.935709][T26488] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5074'. [ 1261.435723][T26504] __nla_validate_parse: 2 callbacks suppressed [ 1261.435742][T26504] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.5076'. [ 1261.470226][T26504] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1261.509023][T26503] netlink: 'syz.2.5078': attribute type 3 has an invalid length. [ 1261.528382][T26503] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5078'. [ 1261.734726][T26507] netlink: 'syz.6.5080': attribute type 13 has an invalid length. [ 1261.758439][T26507] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5080'. [ 1261.878604][T26507] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1262.494009][T26535] netlink: 'syz.0.5086': attribute type 27 has an invalid length. [ 1262.530421][T26535] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5086'. [ 1262.596020][T26537] netlink: 'syz.2.5087': attribute type 29 has an invalid length. [ 1262.618216][T26537] netlink: 'syz.2.5087': attribute type 29 has an invalid length. [ 1263.142133][T26550] tun0: tun_chr_ioctl cmd 2148553947 [ 1263.208568][T26546] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5091'. [ 1266.734990][T26613] netlink: 'syz.6.5109': attribute type 21 has an invalid length. [ 1266.743994][T26613] IPv6: NLM_F_CREATE should be specified when creating new route [ 1267.245191][T26620] netlink: 'syz.4.5111': attribute type 11 has an invalid length. [ 1267.276205][T26620] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5111'. [ 1267.638328][T26627] netlink: 'syz.5.5110': attribute type 10 has an invalid length. [ 1268.017547][T26627] team0: Device wg1 is of different type [ 1268.072088][T26640] netlink: 'syz.6.5113': attribute type 21 has an invalid length. [ 1268.109259][T26640] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5113'. [ 1268.139444][T26640] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5113'. [ 1269.788467][T26674] netlink: 'syz.6.5122': attribute type 1 has an invalid length. [ 1270.044776][T26683] rxe_eth0 speed is unknown, defaulting to 1000 [ 1270.110969][T26694] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5128'. [ 1272.669250][T26725] netlink: 'syz.4.5133': attribute type 10 has an invalid length. [ 1273.168944][T26729] netlink: 'syz.4.5137': attribute type 7 has an invalid length. [ 1273.266279][T26734] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.5140'. [ 1273.338067][T26737] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1273.361264][T26734] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 1273.435375][T26733] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1273.470360][T26733] device syzkaller0 entered promiscuous mode [ 1273.575311][T26735] : port 1(dummy0) entered blocking state [ 1273.596483][T26735] : port 1(dummy0) entered disabled state [ 1274.413184][T26756] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1274.678010][T26761] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5144'. [ 1274.745047][T26762] netlink: 'syz.5.5144': attribute type 10 has an invalid length. [ 1274.820692][T26762] device veth0_vlan left promiscuous mode [ 1274.888435][T26762] device veth0_vlan entered promiscuous mode [ 1274.946960][T26762] team0: Device veth0_vlan failed to register rx_handler [ 1275.114553][T26768] netlink: 'syz.4.5146': attribute type 16 has an invalid length. [ 1275.145396][T26768] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5146'. [ 1275.351944][T26771] netlink: 'syz.4.5146': attribute type 10 has an invalid length. [ 1275.639610][T26751] rxe_eth0 speed is unknown, defaulting to 1000 [ 1275.772876][T26778] netlink: 'syz.4.5148': attribute type 2 has an invalid length. [ 1275.850695][T26778] netlink: 'syz.4.5148': attribute type 8 has an invalid length. [ 1275.941085][T26778] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5148'. [ 1276.362982][T26791] netlink: 'syz.5.5152': attribute type 21 has an invalid length. [ 1276.411681][T26791] netlink: 'syz.5.5152': attribute type 1 has an invalid length. [ 1276.470033][T26791] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5152'. [ 1276.601641][T26800] tipc: Started in network mode [ 1276.637942][T26800] tipc: Node identity 9215a268, cluster identity 4711 [ 1276.710363][T26800] tipc: Node number set to 2450891368 [ 1276.826254][T26804] netlink: 'syz.2.5153': attribute type 10 has an invalid length. [ 1276.885976][T26804] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5153'. [ 1278.359543][T26836] netlink: 'syz.4.5157': attribute type 4 has an invalid length. [ 1278.380192][T26836] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.5157'. [ 1278.803751][T26836] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1280.470485][T26871] rxe_eth0 speed is unknown, defaulting to 1000 [ 1280.786511][T26883] delete_channel: no stack [ 1281.311635][T26901] netlink: 'syz.5.5173': attribute type 10 has an invalid length. [ 1281.851681][T26901] team0 (unregistering): Port device team_slave_1 removed [ 1282.035901][T26901] team0 (unregistering): Port device geneve1 removed [ 1282.183828][T26912] rxe_eth0 speed is unknown, defaulting to 1000 [ 1282.869109][T26938] device syzkaller0 entered promiscuous mode [ 1282.894178][T26933] netlink: 'syz.5.5180': attribute type 21 has an invalid length. [ 1282.914297][T26933] netlink: 'syz.5.5180': attribute type 6 has an invalid length. [ 1282.943104][T26933] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5180'. [ 1286.699283][T26951] netlink: 'syz.5.5184': attribute type 10 has an invalid length. [ 1286.707368][T26951] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5184'. [ 1286.717478][T26953] device syzkaller0 left promiscuous mode [ 1286.952255][T26960] netlink: 'syz.0.5185': attribute type 27 has an invalid length. [ 1286.984116][T26960] netlink: 'syz.0.5185': attribute type 3 has an invalid length. [ 1287.004477][T26960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5185'. [ 1287.375611][T26960] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.5185'. [ 1287.618897][T26973] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1287.825478][T26973] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1287.898300][T26960] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1287.921868][T26960] CPU: 1 PID: 26960 Comm: syz.0.5185 Not tainted syzkaller #0 [ 1287.929446][T26960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1287.939602][T26960] Call Trace: [ 1287.942934][T26960] [ 1287.945911][T26960] dump_stack_lvl+0x188/0x24e [ 1287.950667][T26960] ? show_regs_print_info+0x12/0x12 [ 1287.955983][T26960] ? load_image+0x410/0x410 [ 1287.960575][T26960] sysfs_warn_dup+0x8a/0xa0 [ 1287.965150][T26960] sysfs_do_create_link_sd+0xc0/0x110 [ 1287.970600][T26960] device_add+0x83b/0x1050 [ 1287.975092][T26960] wiphy_register+0x1f16/0x2c50 [ 1287.980035][T26960] ? cfg80211_event_work+0x40/0x40 [ 1287.985196][T26960] ? minstrel_ht_alloc+0x894/0xa20 [ 1287.990364][T26960] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1287.996479][T26960] ieee80211_register_hw+0x2e33/0x3b00 [ 1288.001995][T26960] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1288.008209][T26960] ? ieee80211_register_hw+0xec1/0x3b00 [ 1288.013800][T26960] ? ieee80211_register_hw+0xec1/0x3b00 [ 1288.019402][T26960] ? ieee80211_tasklet_handler+0x20/0x20 [ 1288.025077][T26960] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1288.031026][T26960] ? __debug_object_init+0xed/0x440 [ 1288.036324][T26960] ? memset+0x1e/0x40 [ 1288.040342][T26960] ? __hrtimer_init+0x189/0x270 [ 1288.045232][T26960] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1288.051008][T26960] ? memcpy+0x3c/0x60 [ 1288.055032][T26960] hwsim_new_radio_nl+0xab7/0xc90 [ 1288.060119][T26960] genl_family_rcv_msg_doit+0x22f/0x350 [ 1288.065711][T26960] ? rcu_is_watching+0x11/0xa0 [ 1288.070525][T26960] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1288.076552][T26960] ? lockdep_hardirqs_on+0x94/0x140 [ 1288.081798][T26960] ? genl_rcv_msg+0x550/0x790 [ 1288.086527][T26960] genl_rcv_msg+0x601/0x790 [ 1288.091071][T26960] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1288.097284][T26960] ? genl_bind+0x360/0x360 [ 1288.101741][T26960] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1288.108133][T26960] ? lock_acquire+0x226/0x4a0 [ 1288.112867][T26960] netlink_rcv_skb+0x1ef/0x440 [ 1288.117678][T26960] ? genl_bind+0x360/0x360 [ 1288.122142][T26960] ? netlink_ack+0x1160/0x1160 [ 1288.126961][T26960] ? down_read+0x1a8/0x2d0 [ 1288.131415][T26960] genl_rcv+0x24/0x40 [ 1288.135448][T26960] netlink_unicast+0x7ad/0x920 [ 1288.140300][T26960] netlink_sendmsg+0x8ad/0xbd0 [ 1288.145141][T26960] ? audit_tree_destroy_watch+0x20/0x20 [ 1288.150728][T26960] ? netlink_getsockopt+0x550/0x550 [ 1288.156000][T26960] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1288.161589][T26960] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1288.166908][T26960] ? security_socket_sendmsg+0x7c/0xa0 [ 1288.172399][T26960] ? netlink_getsockopt+0x550/0x550 [ 1288.177680][T26960] ____sys_sendmsg+0x5ed/0x9a0 [ 1288.182524][T26960] ? rcu_is_watching+0x11/0xa0 [ 1288.187334][T26960] ? lockdep_hardirqs_on+0x94/0x140 [ 1288.192568][T26960] ? __sys_sendmsg_sock+0x30/0x30 [ 1288.197641][T26960] ? ___sys_sendmsg+0x287/0x360 [ 1288.202552][T26960] ___sys_sendmsg+0x2a2/0x360 [ 1288.207280][T26960] ? __sys_sendmsg+0x2a0/0x2a0 [ 1288.212091][T26960] ? irqentry_enter+0x33/0x50 [ 1288.216890][T26960] __se_sys_sendmsg+0x1c3/0x2b0 [ 1288.221789][T26960] ? __x64_sys_sendmsg+0x80/0x80 [ 1288.226794][T26960] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1288.232754][T26960] do_syscall_64+0x4c/0xa0 [ 1288.237239][T26960] ? clear_bhb_loop+0x60/0xb0 [ 1288.241956][T26960] ? clear_bhb_loop+0x60/0xb0 [ 1288.246673][T26960] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1288.252609][T26960] RIP: 0033:0x7f8731b9fb19 [ 1288.257056][T26960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.276708][T26960] RSP: 002b:00007f87329cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1288.285170][T26960] RAX: ffffffffffffffda RBX: 00007f8731e25fa0 RCX: 00007f8731b9fb19 [ 1288.293205][T26960] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000010 [ 1288.301238][T26960] RBP: 00007f8731c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1288.309249][T26960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.317258][T26960] R13: 00007f8731e26038 R14: 00007f8731e25fa0 R15: 00007ffde642dc08 [ 1288.325338][T26960] [ 1288.352229][T26978] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5188'. [ 1290.020540][T27011] netlink: 'syz.6.5197': attribute type 13 has an invalid length. [ 1290.594205][T27026] netlink: 1010 bytes leftover after parsing attributes in process `syz.6.5201'. [ 1290.646920][T27026] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1290.838553][T27032] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.5202'. [ 1291.742926][T27055] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5207'. [ 1291.760047][ T50] Bluetooth: hci5: unexpected event 0x07 length: 15 < 255 [ 1294.188909][T27075] netlink: 'syz.0.5212': attribute type 7 has an invalid length. [ 1294.256166][T27078] netlink: 'syz.4.5214': attribute type 10 has an invalid length. [ 1294.311620][T27078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5214'. [ 1294.759231][T27095] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1294.913790][T27095] netlink: 'syz.4.5217': attribute type 21 has an invalid length. [ 1295.018499][T27098] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5217'. [ 1295.047687][T27094] netlink: 'syz.6.5218': attribute type 9 has an invalid length. [ 1295.066432][T27098] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1295.076566][T27094] netlink: 463 bytes leftover after parsing attributes in process `syz.6.5218'. [ 1295.117367][T27098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1295.403728][T27109] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.5223'. [ 1295.450133][T27109] openvswitch: netlink: Message has 48126 unknown bytes. [ 1295.597829][T27116] netlink: 'syz.6.5224': attribute type 2 has an invalid length. [ 1295.742155][T27116] netlink: 199848 bytes leftover after parsing attributes in process `syz.6.5224'. [ 1295.876055][T27121] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.5225'. [ 1296.069086][T27121] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 1296.194640][T27121] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 1296.241448][T27115] netlink: 'syz.2.5223': attribute type 10 has an invalid length. [ 1296.251401][T27115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5223'. [ 1296.851782][T27144] netlink: 'syz.2.5229': attribute type 3 has an invalid length. [ 1296.897076][T27144] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5229'. [ 1297.150329][T27155] rxe_eth0 speed is unknown, defaulting to 1000 [ 1297.878208][T27164] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1297.983230][T27164] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1298.000305][T27164] CPU: 1 PID: 27164 Comm: syz.0.5235 Not tainted syzkaller #0 [ 1298.007893][T27164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1298.018060][T27164] Call Trace: [ 1298.021396][T27164] [ 1298.024380][T27164] dump_stack_lvl+0x188/0x24e [ 1298.029153][T27164] ? show_regs_print_info+0x12/0x12 [ 1298.034442][T27164] ? load_image+0x410/0x410 [ 1298.039032][T27164] sysfs_warn_dup+0x8a/0xa0 [ 1298.043655][T27164] sysfs_do_create_link_sd+0xc0/0x110 [ 1298.049107][T27164] device_add+0x83b/0x1050 [ 1298.053603][T27164] wiphy_register+0x1f16/0x2c50 [ 1298.058551][T27164] ? cfg80211_event_work+0x40/0x40 [ 1298.063723][T27164] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1298.069985][T27164] ieee80211_register_hw+0x2e33/0x3b00 [ 1298.075533][T27164] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1298.081774][T27164] ? ieee80211_register_hw+0xec1/0x3b00 [ 1298.087395][T27164] ? ieee80211_register_hw+0xec1/0x3b00 [ 1298.093025][T27164] ? ieee80211_tasklet_handler+0x20/0x20 [ 1298.098735][T27164] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1298.104702][T27164] ? __debug_object_init+0xed/0x440 [ 1298.109995][T27164] ? memset+0x1e/0x40 [ 1298.114040][T27164] ? __hrtimer_init+0x189/0x270 [ 1298.118965][T27164] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1298.124771][T27164] ? memcpy+0x3c/0x60 [ 1298.128888][T27164] hwsim_new_radio_nl+0xab7/0xc90 [ 1298.134015][T27164] genl_family_rcv_msg_doit+0x22f/0x350 [ 1298.139637][T27164] ? end_current_label_crit_section+0x170/0x170 [ 1298.145978][T27164] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1298.152222][T27164] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1298.158207][T27164] ? bpf_lsm_capable+0x5/0x10 [ 1298.162947][T27164] ? security_capable+0x85/0xb0 [ 1298.167878][T27164] genl_rcv_msg+0x601/0x790 [ 1298.172510][T27164] ? genl_bind+0x360/0x360 [ 1298.177027][T27164] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1298.183442][T27164] netlink_rcv_skb+0x1ef/0x440 [ 1298.188274][T27164] ? genl_bind+0x360/0x360 [ 1298.192794][T27164] ? netlink_ack+0x1160/0x1160 [ 1298.197636][T27164] ? down_read+0x1a8/0x2d0 [ 1298.202115][T27164] genl_rcv+0x24/0x40 [ 1298.206218][T27164] netlink_unicast+0x7ad/0x920 [ 1298.211061][T27164] netlink_sendmsg+0x8ad/0xbd0 [ 1298.215901][T27164] ? netlink_getsockopt+0x550/0x550 [ 1298.221217][T27164] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1298.226832][T27164] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1298.232173][T27164] ? security_socket_sendmsg+0x7c/0xa0 [ 1298.237705][T27164] ? netlink_getsockopt+0x550/0x550 [ 1298.242983][T27164] ____sys_sendmsg+0x5ed/0x9a0 [ 1298.247824][T27164] ? __sys_sendmsg_sock+0x30/0x30 [ 1298.252909][T27164] ? __import_iovec+0x306/0x510 [ 1298.257844][T27164] ? import_iovec+0x6f/0xa0 [ 1298.262414][T27164] ___sys_sendmsg+0x2a2/0x360 [ 1298.267192][T27164] ? __sys_sendmsg+0x2a0/0x2a0 [ 1298.272089][T27164] __se_sys_sendmsg+0x1c3/0x2b0 [ 1298.277008][T27164] ? __x64_sys_sendmsg+0x80/0x80 [ 1298.282034][T27164] ? lockdep_hardirqs_on+0x94/0x140 [ 1298.287315][T27164] do_syscall_64+0x4c/0xa0 [ 1298.291804][T27164] ? clear_bhb_loop+0x60/0xb0 [ 1298.296547][T27164] ? clear_bhb_loop+0x60/0xb0 [ 1298.301299][T27164] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1298.307256][T27164] RIP: 0033:0x7f8731b9fb19 [ 1298.311730][T27164] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.331409][T27164] RSP: 002b:00007f87329cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1298.339881][T27164] RAX: ffffffffffffffda RBX: 00007f8731e25fa0 RCX: 00007f8731b9fb19 [ 1298.347982][T27164] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000007 [ 1298.356022][T27164] RBP: 00007f8731c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1298.364054][T27164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.372089][T27164] R13: 00007f8731e26038 R14: 00007f8731e25fa0 R15: 00007ffde642dc08 [ 1298.380146][T27164] [ 1298.629301][T27167] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5235'. [ 1298.741074][T27167] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1298.794572][T27167] CPU: 1 PID: 27167 Comm: syz.0.5235 Not tainted syzkaller #0 [ 1298.802164][T27167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1298.812292][T27167] Call Trace: [ 1298.815675][T27167] [ 1298.818697][T27167] dump_stack_lvl+0x188/0x24e [ 1298.823464][T27167] ? show_regs_print_info+0x12/0x12 [ 1298.828748][T27167] ? load_image+0x410/0x410 [ 1298.833335][T27167] sysfs_warn_dup+0x8a/0xa0 [ 1298.837926][T27167] sysfs_do_create_link_sd+0xc0/0x110 [ 1298.843376][T27167] device_add+0x83b/0x1050 [ 1298.847879][T27167] wiphy_register+0x1f16/0x2c50 [ 1298.852827][T27167] ? cfg80211_event_work+0x40/0x40 [ 1298.858008][T27167] ? minstrel_ht_alloc+0x894/0xa20 [ 1298.863200][T27167] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1298.869343][T27167] ieee80211_register_hw+0x2e33/0x3b00 [ 1298.874902][T27167] ? ieee80211_register_hw+0xec1/0x3b00 [ 1298.880516][T27167] ? ieee80211_register_hw+0xec1/0x3b00 [ 1298.886175][T27167] ? ieee80211_tasklet_handler+0x20/0x20 [ 1298.891891][T27167] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1298.897912][T27167] ? __debug_object_init+0xed/0x440 [ 1298.903192][T27167] ? memset+0x1e/0x40 [ 1298.907237][T27167] ? __hrtimer_init+0x189/0x270 [ 1298.912200][T27167] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1298.918045][T27167] ? memcpy+0x3c/0x60 [ 1298.922161][T27167] hwsim_new_radio_nl+0xab7/0xc90 [ 1298.927322][T27167] genl_family_rcv_msg_doit+0x22f/0x350 [ 1298.932965][T27167] ? end_current_label_crit_section+0x170/0x170 [ 1298.939337][T27167] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1298.945335][T27167] ? bpf_lsm_capable+0x5/0x10 [ 1298.950184][T27167] ? security_capable+0x85/0xb0 [ 1298.955127][T27167] genl_rcv_msg+0x601/0x790 [ 1298.959719][T27167] ? genl_bind+0x360/0x360 [ 1298.964205][T27167] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1298.970628][T27167] netlink_rcv_skb+0x1ef/0x440 [ 1298.975466][T27167] ? genl_bind+0x360/0x360 [ 1298.979962][T27167] ? netlink_ack+0x1160/0x1160 [ 1298.984811][T27167] ? down_read+0x1a8/0x2d0 [ 1298.989296][T27167] genl_rcv+0x24/0x40 [ 1298.993343][T27167] netlink_unicast+0x7ad/0x920 [ 1298.998190][T27167] netlink_sendmsg+0x8ad/0xbd0 [ 1299.003043][T27167] ? netlink_getsockopt+0x550/0x550 [ 1299.008321][T27167] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1299.013941][T27167] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1299.019286][T27167] ? security_socket_sendmsg+0x7c/0xa0 [ 1299.024810][T27167] ? netlink_getsockopt+0x550/0x550 [ 1299.030090][T27167] ____sys_sendmsg+0x5ed/0x9a0 [ 1299.034947][T27167] ? __sys_sendmsg_sock+0x30/0x30 [ 1299.040041][T27167] ? __import_iovec+0x306/0x510 [ 1299.045014][T27167] ? import_iovec+0x6f/0xa0 [ 1299.049589][T27167] ___sys_sendmsg+0x2a2/0x360 [ 1299.054347][T27167] ? __sys_sendmsg+0x2a0/0x2a0 [ 1299.059243][T27167] __se_sys_sendmsg+0x1c3/0x2b0 [ 1299.064170][T27167] ? __x64_sys_sendmsg+0x80/0x80 [ 1299.069205][T27167] ? lockdep_hardirqs_on+0x94/0x140 [ 1299.074476][T27167] do_syscall_64+0x4c/0xa0 [ 1299.078962][T27167] ? clear_bhb_loop+0x60/0xb0 [ 1299.083711][T27167] ? clear_bhb_loop+0x60/0xb0 [ 1299.088490][T27167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1299.094502][T27167] RIP: 0033:0x7f8731b9fb19 [ 1299.098975][T27167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1299.118645][T27167] RSP: 002b:00007f87329ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1299.127134][T27167] RAX: ffffffffffffffda RBX: 00007f8731e26090 RCX: 00007f8731b9fb19 [ 1299.135177][T27167] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1299.143210][T27167] RBP: 00007f8731c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 1299.151245][T27167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.159280][T27167] R13: 00007f8731e26128 R14: 00007f8731e26090 R15: 00007ffde642dc08 [ 1299.167339][T27167] [ 1299.596159][T27201] netlink: 'syz.6.5246': attribute type 10 has an invalid length. [ 1299.982826][T27201] team0: Device wg1 is of different type [ 1300.253210][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.259715][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.937615][T27223] syzkaller0: tun_chr_ioctl cmd 35111 [ 1303.772818][T27258] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5260'. [ 1303.789022][T27258] netlink: 'syz.6.5260': attribute type 10 has an invalid length. [ 1303.875626][T27258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1303.936934][T27258] team0: Port device bond0 added [ 1304.720326][ T27] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 1304.740383][ T27] Not tainted syzkaller #0 [ 1304.745661][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1304.762930][ T27] task:rcu_tasks_kthre state:D stack:27408 pid:12 ppid:2 flags:0x00004000 [ 1304.777204][ T27] Call Trace: [ 1304.786513][ T27] [ 1304.789782][ T27] __schedule+0x1089/0x4140 [ 1304.798625][ T27] ? trace_event_raw_event_lock+0x230/0x230 [ 1304.808819][ T27] ? release_firmware_map_entry+0x187/0x187 [ 1304.825488][ T27] schedule+0xb9/0x180 [ 1304.832359][ T27] schedule_timeout+0xbd/0x2d0 [ 1304.837715][ T27] ? console_conditional_schedule+0x40/0x40 [ 1304.849474][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1304.858212][ T27] ? __lock_acquire+0x7ea0/0x7ea0 [ 1304.873260][ T27] ? lock_chain_count+0x20/0x20 [ 1304.878785][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1304.888362][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1304.899313][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1304.909898][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1304.919638][ T27] ? wait_for_completion+0x26f/0x590 [ 1304.929937][ T27] wait_for_completion+0x2c2/0x590 [ 1304.944928][ T27] ? io_schedule+0xd0/0xd0 [ 1304.949679][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1304.959599][ T27] ? debug_object_active_state+0x6b/0x380 [ 1304.974435][ T27] __synchronize_srcu+0x2b3/0x350 [ 1304.984431][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1304.994312][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 1305.005663][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 1305.014931][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 1305.024349][ T27] ? synchronize_srcu+0x18f/0x1b0 [ 1305.029720][ T27] rcu_tasks_wait_gp+0x49d/0xb00 [ 1305.052058][ T27] ? rcu_tasks_wait_gp+0x21a/0xb00 [ 1305.061055][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1305.076399][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1305.086188][ T27] ? rcu_tasks_invoke_cbs+0x790/0x790 [ 1305.092373][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1305.098525][ T27] ? _raw_spin_unlock+0x40/0x40 [ 1305.103850][ T27] rcu_tasks_one_gp+0xb1c/0xce0 [ 1305.109097][ T27] ? rcu_tasks_one_gp+0xe5/0xce0 [ 1305.114587][ T27] rcu_tasks_kthread+0x6e/0x90 [ 1305.119681][ T27] kthread+0x29d/0x330 [ 1305.123872][ T27] ? rcu_tasks_postgp+0x10/0x10 [ 1305.128934][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1305.133758][ T27] ret_from_fork+0x1f/0x30 [ 1305.138278][ T27] [ 1305.141759][ T27] [ 1305.141759][ T27] Showing all locks held in the system: [ 1305.183607][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1305.199220][ T27] #0: ffffffff8db2e3f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 1305.220489][ T27] 1 lock held by rcu_tasks_trace/13: [ 1305.225887][ T27] #0: ffffffff8db2ec30 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xce0 [ 1305.239069][ T27] 1 lock held by khungtaskd/27: [ 1305.244097][ T27] #0: ffffffff8db2daa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1305.274638][ T27] 2 locks held by kworker/0:2/956: [ 1305.279870][ T27] #0: ffff888018472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1305.312728][ T27] #1: ffffc90004ecfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1305.324429][ T27] 2 locks held by getty/4031: [ 1305.329206][ T27] #0: ffff88814cc2b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1305.339376][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x430/0x1400 [ 1305.352250][ T27] 1 lock held by syz.3.4196/22400: [ 1305.357528][ T27] #0: ffffffff8db337b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 1305.370533][ T27] 1 lock held by syz.0.5263/27262: [ 1305.375804][ T27] #0: ffffffff8db33680 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5e0 [ 1305.389264][ T27] [ 1305.392267][ T27] ============================================= [ 1305.392267][ T27] [ 1305.402878][ T27] NMI backtrace for cpu 0 [ 1305.407276][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1305.414554][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1305.424666][ T27] Call Trace: [ 1305.427993][ T27] [ 1305.430994][ T27] dump_stack_lvl+0x188/0x24e [ 1305.435863][ T27] ? irq_work_queue+0xb8/0x140 [ 1305.440678][ T27] ? show_regs_print_info+0x12/0x12 [ 1305.445969][ T27] ? load_image+0x410/0x410 [ 1305.450532][ T27] ? vprintk_emit+0x59f/0x6a0 [ 1305.455311][ T27] ? printk_sprint+0x460/0x460 [ 1305.460169][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 1305.465225][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1305.471487][ T27] ? _printk+0xda/0x130 [ 1305.475730][ T27] ? load_image+0x410/0x410 [ 1305.480324][ T27] ? load_image+0x410/0x410 [ 1305.484890][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1305.491027][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1305.497190][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1305.503235][ T27] watchdog+0xf0e/0xf50 [ 1305.507433][ T27] ? watchdog+0x1ed/0xf50 [ 1305.511801][ T27] kthread+0x29d/0x330 [ 1305.515903][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1305.520980][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1305.525602][ T27] ret_from_fork+0x1f/0x30 [ 1305.530117][ T27] [ 1305.533732][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1305.539003][ C1] NMI backtrace for cpu 1 [ 1305.539015][ C1] CPU: 1 PID: 3631 Comm: klogd Not tainted syzkaller #0 [ 1305.539033][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1305.539044][ C1] RIP: 0010:lockdep_hardirqs_on_prepare+0x2f3/0x7c0 [ 1305.539077][ C1] Code: 07 80 c1 03 38 c1 7c 88 48 8d bb d8 0a 00 00 e8 23 ec 6f 00 48 8d b3 d8 0a 00 00 48 ba 00 00 00 00 00 fc ff df e9 66 ff ff ff <4c> 8d bb c0 0a 00 00 4c 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 [ 1305.539092][ C1] RSP: 0018:ffffc90003297e40 EFLAGS: 00000046 [ 1305.539107][ C1] RAX: 0000000000000000 RBX: ffff88807d0f9e00 RCX: 15766424b1f24b00 [ 1305.539120][ C1] RDX: dffffc0000000000 RSI: ffff88807d0fa8d8 RDI: ffffffff8afe72a0 [ 1305.539133][ C1] RBP: ffffc90003297f00 R08: ffffffff8f22416f R09: 1ffffffff1e4482d [ 1305.539146][ C1] R10: dffffc0000000000 R11: fffffbfff1e4482e R12: 0000000000000000 [ 1305.539158][ C1] R13: 0000000000000000 R14: 1ffff1100fa1f51b R15: 000000000000002c [ 1305.539170][ C1] FS: 00007f09413a0c80(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1305.539185][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.539197][ C1] CR2: 00007ffbcfdf5158 CR3: 000000007f9ca000 CR4: 00000000003506e0 [ 1305.539213][ C1] DR0: 0000000000000000 DR1: 00002000000000c0 DR2: 0000000000000000 [ 1305.539224][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1305.539234][ C1] Call Trace: [ 1305.539240][ C1] [ 1305.539249][ C1] ? lock_chain_count+0x20/0x20 [ 1305.539275][ C1] ? rcu_is_watching+0x11/0xa0 [ 1305.539303][ C1] syscall_exit_to_user_mode+0x20/0x40 [ 1305.539324][ C1] do_syscall_64+0x58/0xa0 [ 1305.539349][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1305.539373][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1305.539398][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1305.539421][ C1] RIP: 0033:0x7f09414f0407 [ 1305.539434][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1305.539448][ C1] RSP: 002b:00007ffed78fb4c0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1305.539464][ C1] RAX: 0000000000000051 RBX: 00007f09413a0c80 RCX: 00007f09414f0407 [ 1305.539476][ C1] RDX: 0000000000000051 RSI: 00007ffed78fb600 RDI: 0000000000000003 [ 1305.539487][ C1] RBP: 00007ffed78fba30 R08: 0000000000000000 R09: 0000000000000000 [ 1305.539498][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffed78fba48 [ 1305.539509][ C1] R13: 00007ffed78fb600 R14: 0000000000000036 R15: 00007ffed78fb600 [ 1305.539529][ C1] [ 1305.552633][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1305.552678][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1305.552734][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1305.552768][ T27] Call Trace: [ 1305.552790][ T27] [ 1305.552830][ T27] dump_stack_lvl+0x188/0x24e [ 1305.552967][ T27] ? memcpy+0x3c/0x60 [ 1305.553032][ T27] ? show_regs_print_info+0x12/0x12 [ 1305.553129][ T27] ? load_image+0x410/0x410 [ 1305.553232][ T27] panic+0x2d3/0x710 [ 1305.553296][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1305.553397][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1305.553463][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1305.553558][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1305.553657][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1305.553754][ T27] watchdog+0xf4d/0xf50 [ 1305.553862][ T27] ? watchdog+0x1ed/0xf50 [ 1305.553958][ T27] kthread+0x29d/0x330 [ 1305.554004][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1305.554079][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1305.554142][ T27] ret_from_fork+0x1f/0x30 [ 1305.554283][ T27] [ 1305.562075][ T27] Kernel Offset: disabled [ 1305.904618][ T27] Rebooting in 86400 seconds..