last executing test programs: 3m28.479361391s ago: executing program 3 (id=10): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffd78, 0x0, 0x4, 0x0, 0x7, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r4) recvmsg(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) recvmsg(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) 3m27.144890968s ago: executing program 3 (id=16): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x100000}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="120000000d00b4bfdcbb66d22cad00000000007c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x20046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x102c9, 0x3, 0x9, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x20, 0x9, 0x4, 0x9, 0x1ff, 0x0, 0x0, 0x0, 0x5fc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f0000000040)=r7, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) 3m26.409723482s ago: executing program 3 (id=22): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x4, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) (async) r2 = socket$kcm(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000027c0)=""/4047, 0xfcf}, {&(0x7f0000001680)=""/4080, 0xff0}], 0x2}, 0x40000100) (async, rerun: 32) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000006800)=""/4105, 0xffffff9d}, {&(0x7f00000047c0)=""/4095, 0xfff}], 0x5}, 0x10000) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046bf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe8600000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 3m25.308343399s ago: executing program 3 (id=29): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c0000002d006bcd9e3fe3dc6e48aa31086b87033c0000001f03000000000000040014000d000a8a0d0000a122bf8dd34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) gettid() r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) r2 = getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="0209000202000000e4a17c", 0xb}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x10) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x5, 0x7, 0x4, 0x3, 0x0, 0x7, 0x4044, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0xa}, 0x40, 0x7, 0x592d, 0x2, 0x7f, 0xcc2, 0x4, 0x0, 0x0, 0x0, 0x10001}, r2, 0x9, r0, 0x6) close(r5) 3m24.309080066s ago: executing program 3 (id=37): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000ffff"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={r4}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 3m24.02865386s ago: executing program 3 (id=42): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000200)=""/36, 0x24}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x161) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e1050000008847000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.990129505s ago: executing program 32 (id=42): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000200)=""/36, 0x24}], 0x5, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x161) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e1050000008847000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m29.859718318s ago: executing program 5 (id=934): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16, @ANYRES32=0x1, @ANYRES8, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000cf2eccbf515ed99d7b71b40000000007020000f8ffffffb703000008800000b7040000000000008500009bd2db86f57374f8a4ee9b99944dcc56b4e9dc93b029f4ec7cfaabacbb04c424026dd3a9dcd1a6d0c551abbd86691eb72fdf455a999c1bfb2233962a1b97130b8f9159ed"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0xfffffffffffffd9e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r1}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000b80)={'\x00', 0x8411}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x3, &(0x7f0000000a00)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x10000000}}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0xff, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8002, 0xca, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0xae04}, 0x0, 0xc, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xe) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1}, 0x1f00) close(r5) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r9, 0x20, &(0x7f00000006c0)={&(0x7f0000000540)=""/67, 0x43, 0x0, &(0x7f00000005c0)=""/244, 0xf4}}, 0x10) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0xffffffffffffffb3) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000180)={'veth0_to_hsr\x00'}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TUNSETDEBUG(r11, 0x400454c9, &(0x7f00000004c0)=0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) 1m29.407454417s ago: executing program 5 (id=941): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0xfff4}, 0x0, 0x0, r1, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffff}, 0x0, 0xfffffffffffffffd, r1, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000240)={0x2, 0x80, 0xff, 0x80, 0x5, 0x1, 0x0, 0x7, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x231, 0x3, @perf_bp={&(0x7f0000000200), 0x1}, 0x2002, 0x9, 0x4, 0x2, 0x4, 0x4, 0x349, 0x0, 0x80000000, 0x0, 0xe5f}) close(r3) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f049e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc02010088a8ffff0200258f", 0x12}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="d800000018007b7be00212ba0d0505040a8b0600000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ffffff7f00000000d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dcf01edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1m28.828243678s ago: executing program 5 (id=950): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="c7", 0x1}], 0x1}, 0x24048811) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0xb, &(0x7f0000000100), 0x4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x8}, 0x0, 0x1, 0x0, 0x6, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$sock(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000011c0)="da61cf0cfe42a11a3aa100774288d968573166249797b85e4ff3ba262648ba4cee8a70009896c2af75a6afe4a358301a8b5ad070921c7f4c45a331dd44cee1d44169071f95fe77cd823e30c63190f3cdfc88987628baa9e7c42d702c878559e9a2b6134cf657c77bd1df882ba2a2158ad05e75daff4ab06264096ab1d03250927997c3", 0x83}, {&(0x7f0000001480)="e189c9db65d1500ceda2c29bd5299d3976a1", 0x12}], 0x2, &(0x7f0000001500)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffa0}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}], 0xa8}, 0x4080014) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500150002008178a8001500020001400200000901", 0x3d}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100020000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) (async, rerun: 32) close(r7) (async, rerun: 32) recvmsg$unix(r6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[], 0xfdef) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711053000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local, 0x9}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x4001000) (async, rerun: 64) r10 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffff9, 0xfffffffffffffffd}, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x13, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"/387], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r10, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001140), 0x10000, 0x0) 1m28.151577417s ago: executing program 5 (id=951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x12, 0x0, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5c}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x2, &(0x7f00000000c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001000)=""/4096, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x168b1, r0, 0x3, &(0x7f0000000180)=[0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x2, 0x9, 0xc}, {0x3, 0x2, 0x5, 0x8}, {0x5, 0x2, 0xd, 0xa}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x1000, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) 1m26.235460585s ago: executing program 5 (id=962): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000500), 0x0, 0x0, 0x0, &(0x7f0000000640), 0x8, 0x30, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x30001, 0x8, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000080), 0x0}, 0x20) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x3ff, 0x3cf9, 0x1, 0x1000, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0xa}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', 0x0, 0x0, r2}, 0x18) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000003c22f518807c43051d3ffde137aaf653b384c8306e06a6f4eb", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_tracing={0x1a, 0x0, &(0x7f00000002c0), &(0x7f0000000300)='syzkaller\x00', 0x23b, 0x0, &(0x7f0000000340), 0x0, 0x20, '\x00', r4, 0x18, r5, 0x8, &(0x7f0000000840)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x9, 0x1}, 0x10, 0x1ebc5, r3, 0x5, &(0x7f0000000c40)=[r6, r7, r8, r9, r10, r11, r12, r13, r14], &(0x7f0000000c80)=[{0x4, 0x4, 0x3, 0xa}, {0x3, 0x2, 0x1, 0xf}, {0x3, 0x5, 0xb, 0x93ac0e260426eb15}, {0x2, 0x3, 0xf}, {0x0, 0x1, 0x6, 0x6}], 0x10, 0xa6}, 0x94) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$cgroup_ro(r15, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f00000004c0)=""/232, 0xe8, 0x0, &(0x7f0000000380)=""/99, 0x63}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xee, &(0x7f0000000280)=""/238, 0x41100, 0x3, '\x00', r4, 0x1b, r15, 0x8, &(0x7f0000000180)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0xe, 0xbd, 0x6}, 0x10, r16, 0x0, 0x0, &(0x7f00000005c0)=[r0, 0x1, r0, 0x1, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m25.262972409s ago: executing program 5 (id=969): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x50, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffc}, 0x40, 0x67, 0x8006, 0x0, 0x0, 0x3, 0xbd0, 0x0, 0x0, 0x0, 0x80008000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffffffffffce9, 0x7, 0x0, 0x10, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6531aa1a, 0x5}, 0x0, 0xc8, 0x9, 0x8, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x5, 0xfffff48d, 0x1, 0x7ff, 0x800, 0xffffffffffffffff, 0xf0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x25, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080), 0x0) 1m10.210102715s ago: executing program 33 (id=969): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x50, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x40, 0xfffffffffffffffc}, 0x40, 0x67, 0x8006, 0x0, 0x0, 0x3, 0xbd0, 0x0, 0x0, 0x0, 0x80008000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffffffffffce9, 0x7, 0x0, 0x10, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x6531aa1a, 0x5}, 0x0, 0xc8, 0x9, 0x8, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x2, 0x9, 0x0, 0x20000, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x24001100, 0x0, 0x8, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000539d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x5, 0xfffff48d, 0x1, 0x7ff, 0x800, 0xffffffffffffffff, 0xf0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) socket$kcm(0x29, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x25, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080), 0x0) 3.591216707s ago: executing program 0 (id=1550): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x0, 0x7fffffffffffffff, 0xfffffffc, 0x0, 0x3, 0xfffffffc}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1440f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffc01, 0x1}, 0x500, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x85}, 0x0, 0x0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) r3 = socket$kcm(0x11, 0xa, 0x300) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000600)=r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000340)=""/27, 0x1b}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c}}], 0x20}, 0x80) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000780)={0x5, 0x80, 0x4, 0x7, 0x7, 0xff, 0x0, 0x5, 0x1000, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x13d, 0x4, @perf_bp={&(0x7f0000000640), 0x1}, 0x8, 0x200, 0x100, 0x5, 0x7fffffff, 0x8, 0x401, 0x0, 0xffffffff, 0x0, 0x7}) 3.359052137s ago: executing program 2 (id=1553): r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000004000000040000000700000000000000", @ANYRES32=r2, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="030000008000"/28], 0x50) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f00000001c0)}, 0x20) (async) close(0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8404, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000), 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x8a, 0x83, 0x0, 0x3, 0x0, 0x3f6, 0x8e24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x9}, 0x4108, 0x3, 0x0, 0x3, 0x7, 0xffffffff, 0x401, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x12) (async) close(0xffffffffffffffff) (async) perf_event_open(0xfffffffffffffffd, 0xffffffffffffffff, 0xfefffeffffffffff, 0xffffffffffffffff, 0x1) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x20980}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3.20099853s ago: executing program 2 (id=1556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001d00)=""/4106, 0x100a}, {&(0x7f0000001c40)=""/155, 0x9b}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000001a80)=""/213, 0xd5}, {&(0x7f0000000080)=""/28, 0x1c}], 0x6}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x1, &(0x7f0000000600)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.951408782s ago: executing program 4 (id=1558): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x2, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x82, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x5) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0x3}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xb940, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x4, 0x5, 0x1, 0x3a, 0x0, 0x0, 0x80108, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x10, 0xe8}, 0x10000, 0x2, 0x3, 0x8, 0x8, 0x1, 0x5, 0x0, 0x9, 0x0, 0x8}, r7, 0xc, r6, 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0x8, 0xc2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.682342396s ago: executing program 2 (id=1560): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000085000000230000009500000000000000af419bfe"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x1, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x11000, 0xfffffffffffffffc, 0x0, 0x5, 0x43cd, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0xf7ffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x1, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x11000, 0xfffffffffffffffc, 0x0, 0x5, 0x43cd, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0xf7ffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x7f7c2739efff) (async) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x7f7c2739efff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x3, 0x3a) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x82d7) sendmsg$sock(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r7}, 0x4) (async) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r7}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000028"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000080000000000000006000000950000000000000028"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="76389e6a65585578f830e900000058c54feb682e25d3", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="76389e6a65585578f830e900000058c54feb682e25d3", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = gettid() perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x5, 0x9, 0x0, 0x0, 0x2, 0x203, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x20, 0xc8, 0x2, 0x8, 0x2, 0x67, 0x8, 0x0, 0xd, 0x0, 0x5}, r11, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x9, 0x5, 0x9, 0x0, 0x0, 0x2, 0x203, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x20, 0xc8, 0x2, 0x8, 0x2, 0x67, 0x8, 0x0, 0xd, 0x0, 0x5}, r11, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) 2.623373201s ago: executing program 0 (id=1561): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0xe, 0x0, 0x0, 0x7602, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x7602, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xe000, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000080000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d3a6823a45f28fcb1d", 0xd8}], 0x1}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYBLOB="1808000c6e8f00000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x9006, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001580)="83", 0x1}], 0x1}, 0x40f0) 2.502711482s ago: executing program 4 (id=1564): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0x1, 0x3, 0x5, 0x3, 0x0, 0xb, 0x5040, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x6f9}, 0x4200, 0x401, 0x6, 0x0, 0x2, 0x8, 0xffff, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x8, r0, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x401, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x802, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000340)={0x0, 0x80, 0x8, 0x9, 0xc, 0x8, 0x0, 0x6343, 0x30, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000400), 0x4}, 0x4000, 0x2, 0x8001, 0x8, 0xb, 0xffffffd0, 0x1, 0x0, 0x26, 0x0, 0xfffffffffffffff8}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x3000c051) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x8, 0x7, 0xc, 0xac, 0x0, 0x9e54, 0x8200, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0xd948, 0xe}, 0x104140, 0x9, 0x2106, 0x1, 0x0, 0x9, 0x5, 0x0, 0x2, 0x0, 0x10000000000a}, r6, 0x1, r1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f0000000200)={0x0, 0x80, 0x1, 0x27, 0x1, 0x4, 0x0, 0x365e9f33, 0x4a04, 0x9, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x3ff, 0x10}, 0x40, 0x0, 0x7, 0x2, 0x5, 0x200, 0xa, 0x0, 0x7, 0x0, 0xbbe}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="457cb569a5d14836c2ba24857c4c29c9b99e375a2c5b6afbe9213b6cf511a86383da"], 0x18, 0x48000}, 0x0) (async) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xf7) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300f0ff040083ead89879edd42cd893e2470de77b723bf74a82f55993adadf8faaaebac216439e926396c659549d3f0b57478ca354d6845ec04cc24669f2dc9850ce111f977"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) (async) r13 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYRES32=r11, @ANYRES16=r10, @ANYRESHEX=r13, @ANYRES32=0x0, @ANYRESHEX=r10, @ANYRES16=r11, @ANYRESOCT=r13], &(0x7f0000000380)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd45d}, 0x94) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.335509746s ago: executing program 6 (id=1565): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="720ac4ff000000007110c900000000009500000000000000be993bada524a52f6054f2fa7d7947ae09e499f386b7ab3bef3df478dd9a5a64ceadc33c0b40cb6b172feb81b0bdf0860046c42b30555d2cd1eedc562ebc992c14c204867e8b"], &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) r1 = socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xc, 0xf5, 0xc, 0x8f, 0x0, 0x100000001, 0x40010, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x1}, 0x10100, 0x7, 0x9, 0x1, 0x80, 0x0, 0x4, 0x0, 0x1, 0x0, 0x7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) mkdir(0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 2.185171189s ago: executing program 0 (id=1568): r0 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full', 0x20, 0x6, 0x20, 0x2}, 0x2f) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) (rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r1, &(0x7f00000002c0)='cpu.pressure\x00', 0x2, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0xfc, 0xff, 0x0, 0x0, 0xffffffffffffffff, 0x800, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a7, 0x4, @perf_config_ext={0x9, 0x10000000}, 0x83105, 0x379, 0x0, 0x4, 0x1ff, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x80006}, 0xffffffffffffffff, 0xffffffefffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) (async) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2d72646d61202b69ef20a1637075202b726c696d6974202b637075736574202d637075736574202d696e530070696473202d68756765746c62202d626c6b696f20"], 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2.127380404s ago: executing program 4 (id=1569): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e23, 0x97, @mcast2}, 0x80, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.06990511s ago: executing program 6 (id=1570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfd, 0x3, 0x9, 0x0, 0x0, 0x3ff, 0x20028, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x1, @perf_bp={0x0, 0x9}, 0x8400, 0xc764, 0x6, 0x1, 0x9, 0x401, 0x42, 0x0, 0x10005, 0x0, 0xfffffffffffffff3}, 0x0, 0xc, r0, 0x8) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r3, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x4, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x5a}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}]}, {0x0, [0x61, 0x61]}}, 0x0, 0x5c}, 0x28) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f0000000340)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x3bc}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r7, 0x2b, 0xfffffffffffffffd}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711824000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0xf71d0c53aa6556ca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x6, [@volatile={0x4b, 0x0, 0x0, 0x9, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x4}, {0x8}, {0xb, 0x4}, {0x2}, {0x7, 0x4}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x8, 0xfffffffa}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x0, 0x30, 0x2e]}}, &(0x7f0000000880)=""/4096, 0x9a, 0x1000, 0x1, 0x23c}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 1.991773507s ago: executing program 0 (id=1571): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) perf_event_open(&(0x7f0000000000)={0x2, 0xcf, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc70, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.795874904s ago: executing program 4 (id=1572): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000180), 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_subtree(r0, &(0x7f00000005c0), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x9}, {0x40000002, 0x0, 0xfffffffd}]}, 0x94) write$cgroup_subtree(r1, &(0x7f00000001c0)={[{0x2d, 'cpuset'}, {0x2d, 'devices'}, {0x2d, 'cpuacct'}, {0x2b, 'net'}]}, 0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x2c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c009e0101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffffffc}], &(0x7f0000000240)='GPL\x00', 0x7, 0xfa, &(0x7f0000000280)=""/250, 0x41000, 0x50, '\x00', 0x0, 0xb, r5, 0x8, &(0x7f0000000400)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x29d67, r5, 0x2, &(0x7f0000000440)=[r5, r5, r5, r5], &(0x7f0000000480)=[{0x1, 0x5, 0x0, 0xb}, {0x4, 0x3, 0x1, 0xa}], 0x10, 0xfffffff7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000580)={r4, r9}) 1.727648809s ago: executing program 6 (id=1573): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x1e, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xfffffffffffffc64, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a70000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0xad, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000280)={&(0x7f0000000300)="31be3a12407a50f4c4b6b12c3f8974f356f3e2ccb682b6b8eabb878504a2e2f87b79854789a289381ee20dcd70685b0ba7095822c987920686f28787cd0c0cfcc04ab8d5", &(0x7f0000000380)=""/108, &(0x7f0000000400)="b0819a3dd2b56d3efa6a38a4fec11dfd27622e18ee01e6696c17e7e78afc3e83e9fed1885be0143bdf7bb80bf5ac58488aeec71f4ca0290e28cc53a36c6f05e6f816b15c5670b1cb4d3712092d95e52cca48e4a0eed9d7e39b9505e74c966703e1e742305cb3ad78e70d396357cf006a9f532ddb9428", &(0x7f00000006c0)="96987b6b258eefa5f2c713523ab4581696c19326136ed982db9ad44f4fbccc96ea9c1a0dd5acea5342a64ccddfbb389ad946300cf8784c09e14d1799f6d0df641912817b3b44898d1dd7f4bf7b45c96e7e1acd977cec5a8d9095226ef171af1f165b9a0e80bddb4732d1f0de787503c794ceeb79ab19d453c09caba32160dfe324f6be4ba4ced08f1ae1b25d24e2c00ef85eb22f50933d8a5721dcfc1d32fe1123f032be5457795843f4e7acec3101c000ac9031dbc4f914ca5a56842578af144110f47ccb82ce9f3c7d339f2c41e3093bb1d15379b147713955edc669873b6b5d82afadcfaf61429da502b8641058bf780aa281", 0x6, r1, 0x4}, 0x38) 1.678364054s ago: executing program 2 (id=1574): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x1, '\x00', r2, r1, 0x5, 0x4, 0x3}, 0xfffffffffffffe13) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61129f00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6e0a001e000061114c0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6e0a001e000061114c0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 1.294084357s ago: executing program 0 (id=1575): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x2000000000000216, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x39) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x3, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7baf376a, 0x3, 0x0, 0x0, 0xfffe}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x8}, 0x200, 0x200000002, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="4e6b078bb83a40cb1b1b7fc40cb7", 0xe}, {&(0x7f0000000280)="857dbb49161662e921accacda3827f82fbf4bb1f9ef3586bcc4f69c83f316c84ce7b4b7c9b060029e413d5ffe5db769097ed963ecb9c2985854ad72bb59a97529a2096d05811515874007fa23712909434a56897d64e8a86c4909aa375c70d85e9", 0x61}, {0x0}, {&(0x7f0000000400)="9f9b7bbd9daa26", 0x7}], 0x4}, 0x20040004) perf_event_open(0x0, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r3 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000017186278d437453cca1f22007d033840", 0x14}], 0x1}, 0x8810) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000120) close(0xffffffffffffffff) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0500000071108100000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x12, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.293706877s ago: executing program 4 (id=1576): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006002100036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec", 0x5b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x9}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8932, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) syz_clone(0x0, &(0x7f0000000200)="a3a292de2845bb32087445b38f7a312452036bd93a59ab29fdc1c26ae8554dafb94cf07ed670b7ba42a9d3471cb6ac4c67983d1c4965c007b6041b90092ab4805b23ac7181833ca266d6c89866593ac31dbd97416d35ebdf686c3c9456eb621daca67da44920d0487f9e240d26621b5241a0dd82ec30ba2a3cb8a8d26acbb7081b085a0a1523e2ae82d20c6d1d258829880023f45b18c1cbf28098d49013619ebba54a3cacf0eb2b1dac9e95f8702497f2975ea9773bae1e", 0xb8, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000400)="74c602fc449445a6c7bbe5916d4e1e2839c9f65792a629713756f996863d3d6c4dcfde9aa5b2e25f37d8b6bfeac90d81104a65b67b358254fc5e0b35004a93850fc83f41845f0d0295f173312fb22ac7011a119e29f6") close(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x10481a, 0x0, 0x0, 0x7, 0x4, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) 1.014929701s ago: executing program 1 (id=1578): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000040000000f1c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r2 = socket$kcm(0xa, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r3, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x9, 0x27, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000f5000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000ffffffff00000000090000004d7602000800000085000000890000008510000002000000850000001000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000000000000086000000b7d4f8ff01000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007050000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xc, 0x6, 0xfffffe00}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='pids.current\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa1, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x4, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@exit, @alu={0x7, 0x0, 0x2, 0x8, 0x5, 0xfffffffffffffffe}, @exit, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @cb_func={0x18, 0x3}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xbb, &(0x7f0000000500)=""/187, 0x41100, 0x1, '\x00', r4, @fallback=0x2a, r7, 0x8, &(0x7f0000000700)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x4, 0x2, 0x3, 0x5}, 0x10, r8, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000b40)=[{0x5, 0x3, 0x2, 0x2}, {0x2, 0x2, 0x2, 0x1}], 0x10, 0x1}, 0x94) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x1c, &(0x7f00000000c0), 0xb9) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7, 0xdd, &(0x7f0000000600)=""/221, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x1, r1, r1], &(0x7f0000000700), 0x10, 0xd}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) write$cgroup_subtree(r9, 0x0, 0x66) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f0000000240)}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 799.59287ms ago: executing program 1 (id=1579): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) r1 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/80, 0x50}, {&(0x7f0000000080)=""/148, 0x94}, {&(0x7f0000000440)=""/168, 0xbf}, {&(0x7f0000000200)=""/180, 0xb4}], 0x4, &(0x7f0000000300)=""/251, 0xfb}, 0x2020) 746.490795ms ago: executing program 6 (id=1580): r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x12, 0x9, 0x2, 0x9, 0x0, 0x7fffffff, 0x80003, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x10002, 0x7, 0x7, 0x2, 0xd5, 0x2, 0xd84a, 0x0, 0x4, 0x0, 0x44}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfff00) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@enum={0xc, 0x2, 0x0, 0x6, 0x4, [{0x6, 0x100}, {0xb}]}, @union={0xb, 0x1, 0x0, 0x5, 0x0, 0x6, [{0x7, 0x2, 0x59}]}]}, {0x0, [0x61, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000140)=""/200, 0x53, 0xc8, 0x1, 0x9}, 0x28) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async, rerun: 64) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x56, 0x0, 0x28, 0x4}, @func={0xf, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x2e, 0x0, 0x61, 0x5f]}}, &(0x7f0000000300)=""/185, 0x3b, 0xb9, 0x1, 0x8, 0x10000, @value=r3}, 0x28) (async, rerun: 32) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4008}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0], 0x0, 0x1c, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xce, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={r4, 0x20, &(0x7f0000000d40)={&(0x7f0000000c00)=""/229, 0xe5, 0x0, &(0x7f0000000d00)=""/8, 0x8}}, 0x10) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000dc0)={0x1, 0xffffffffffffffff}, 0x4) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r4, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)='%pI4 \x00'}, 0x20) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0x9, 0xfffffff7, 0x8, 0xf0b, 0x4ca01, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x0, 0x5, 0x0, @value=r1}, 0x50) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000640)=@raw=[@map_idx_val={0x18, 0x4034cceb600ad1ed, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @exit, @alu={0x7, 0x1, 0x0, 0x0, 0x1, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x1, 0xd, 0x1, 0x3, 0xffffffffffffffc0}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}], &(0x7f0000000740)='GPL\x00', 0x4, 0xf9, &(0x7f0000000780)=""/249, 0x41000, 0x2, '\x00', r8, 0x1b, r4, 0x8, &(0x7f0000000b80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x4, 0xd, 0x7, 0x8}, 0x10, r9, 0x0, 0x4, &(0x7f0000001000)=[r10, r11, r12, r13], &(0x7f0000001040)=[{0x3, 0x4, 0xe, 0x7}, {0x0, 0x5, 0xb, 0x2}, {0x5, 0x4, 0x2, 0x8}, {0x4, 0x5, 0x3, 0x1}], 0x10, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001180)=@generic={&(0x7f0000001140)='./file0\x00', r14}, 0x18) (async) r15 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x10001, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000001200)={'veth1_to_hsr\x00', 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={r4, 0x0, 0x66, 0x1000, &(0x7f0000001240)="5c86d5f1b319e6c8faaef831bf411b2d4764ca4852909e94015dcb60fb0ae5bbb01b9c088c03e4ab34313133f97e98175c4fcb4e90ff958520062e0e18298d1c262b177c761a5617b30c3e7e29e0498a3b598108b5356d49346d9f054a5bb5404df1048c807f", &(0x7f00000012c0)=""/4096, 0x1, 0x0, 0x2d, 0x55, &(0x7f00000022c0)="f19491a2b73aaf3c62aa5170e80fab790232f4fc2ec56217e567b35f68fcd4bc1917bfc31c74921d91100a90d1", &(0x7f0000002300)="860f7ef4e8b7432dea150656e0d4f61b441e1286e259906223cd7aaf094d2d441013bd2f9beaecde4f5340b695d45a749eff7cecd2d04703aab6e3d2ccf806be454a57581863b6c8dd75ffdff15aab154e67c42ab8", 0x1, 0x0, 0xe9}, 0x50) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002400)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r16, 0x1, 0x32, &(0x7f0000002440)=r14, 0x4) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000002480)='\xb0*\x00') (rerun: 32) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000025c0)={@ifindex=r8, 0x6, 0x0, 0x7ff, &(0x7f00000024c0)=[0x0], 0x1, 0x0, &(0x7f0000002500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002600)={@cgroup=r2, r14, 0x4, 0x18, 0x0, @void, @value=r14, @void, @void, r17}, 0x20) (async) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000003800)={0x7, 0x10, &(0x7f0000002680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, [@alu={0x7, 0x0, 0x6, 0x8, 0x9, 0x0, 0xfffffffffffffff0}, @generic={0x81, 0x8, 0x0, 0x7, 0x3}, @map_fd={0x18, 0x6, 0x1, 0x0, r11}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x8}, @ldst={0x2, 0x2, 0x4, 0x8b9ccc582aaaf1fc, 0xa, 0x40, 0x8}]}, &(0x7f0000002700)='syzkaller\x00', 0x9b, 0x1000, &(0x7f0000002740)=""/4096, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, r4, 0x8, &(0x7f0000003740)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000003780)={0x1, 0x5, 0x400, 0x4}, 0x10, r9, r14, 0x0, &(0x7f00000037c0)=[r10], 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002640)={@map=r12, r14, 0xc, 0x10, 0x0, @void, @value=r18, @void, @void, r17}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000038c0)=',-[:\x00') (async, rerun: 32) setsockopt$sock_attach_bpf(r16, 0x1, 0x32, &(0x7f0000003900)=r14, 0x4) (rerun: 32) 634.324795ms ago: executing program 6 (id=1581): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, 0x0, 0x0) (async) r6 = socket$kcm(0x11, 0x2, 0x0) close(r6) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYRESHEX=r4, @ANYRES16, @ANYRES32, @ANYRES32], 0xa) (async) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a80008002000000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x100000001) 563.473961ms ago: executing program 2 (id=1582): syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @cgroup_skb}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000, &(0x7f0000000080)="332d279046795742d9553c55336edcb36ce4ccbeec5a59452576901326df58e64093f8e75e8594c99f9a79dd9570e46febea527edf31a59326ad99ca111f4a0bf0653324595f6598196d52063caccc0cdfc884f4c5be658757166a3907fa19b56bdf2ec655d9904dcc984298faf5ef2ce12aee7c88304fe33f79eda6072b", 0x7e, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="2d23184ff4faa2d26fbed5678820e8ba52a5f8147e6c92135678d417c1a902c01a6f952b7bf610fe0118bdf0e7bf8009b9bf934f68a0315f33530d2502429fe3c9ebaa2ac66314ab0e069dca7d1a8d9dbd0bfeb44d8d96") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800dac0f0003ff", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0x0, 0x1}, {0x2}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r4, 0xc) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, 0x0, 0xa4ff) 562.885861ms ago: executing program 1 (id=1583): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x8, 0x5, 0x8, 0x7f, 0x20, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) (async) close(0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f6, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) r5 = socket$kcm(0x2, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x541b, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0xed00, 0x0, 0x0, 0x0, 0x7ffffffd}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x24, 0x8, 0x0, 0x0, 0xb000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) (async, rerun: 64) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc", 0x5}], 0x1}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0x7, 0x9}, {0x40000002, 0x0, 0x80000001}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async, rerun: 64) recvmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000)=r9, 0x2c) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) (async, rerun: 64) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) 518.933195ms ago: executing program 1 (id=1584): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'bridge_slave_1\x00', 0x10}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000080000000000000000000000850000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r1, &(0x7f0000000000)="a207d9f0e798ff", &(0x7f00000000c0)=""/119, 0x4}, 0x20) 358.701219ms ago: executing program 0 (id=1585): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x18000000000002a0, 0x2a, 0x0, &(0x7f00000007c0)="b9ff03316844268cb89e14f0080047e0ffff02124000632f0100000000000000030a07080403fe800000", 0x0, 0x28, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 243.388789ms ago: executing program 1 (id=1586): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x9000, 0x0, 0x2, 0x4, 0x1000000, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000001680)=""/4081, 0xff1}], 0x2}, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)='n', 0xffb8}], 0x1}, 0x20000081) (async) sendmsg$kcm(r3, &(0x7f0000000280)={0xfffffffffffffffe, 0x0, 0x0}, 0xc0) 224.827221ms ago: executing program 6 (id=1587): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000280)="32c998a4616f0275aa8e3728cf36fa1bd53c56d79389e51f4797932f70d1f1202be6a85836b3e5d0acc13f63d08134791c7dbfeaa919a0ae0c91ae33f493ad204556c67aa4eecc8f119173cbf5b021a895ca0ff8f9bc48419e91b0f5e710d2fe9a8294f1733fd1a8f6bc42f56b54d0e2e948b4a4d8214e97948310b43082669f6c015cbd8806419a6e933f2bbf70a5c12b228e779b3591ea8e851c4cb0fafde3dc755e7ba724c67320160667da0bd3836f619c31517ac7817bbc58fb8f65e6ca08abc49918dd2945929ea9986abf8e7a1b97483f0d90c8df", &(0x7f0000000500)=""/172}, 0x20) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0x5, 0xffffffffffffffff, 0x9) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe706e228, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff7}, 0x0, 0x0, 0x0, 0x1, 0x20000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="00000500"/18], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x3b, 0x10, 0x0, 0x1800}, 0x48) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000230000009500040000000000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x10000}, 0xc) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8922, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x0, 0x81, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) 181.116024ms ago: executing program 4 (id=1588): socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61109300000481000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x8d, &(0x7f0000000240)=""/141}, 0x80) 0s ago: executing program 1 (id=1589): perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x6, 0x2, 0x5, 0x3, 0x0, 0x7, 0x11ac8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x8, 0x1, 0x9, 0x0, 0x5, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x8, &(0x7f0000000000), 0x8) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000180)='?', 0xfdef}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000180)={'veth1_to_bond\x00', @broadcast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x17, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)="bd30bc791f4874b56406f853f8f0eadad664503b45fdb7b5c366689c837fdcf97beeb608f932e7f6b1064bf8eb2988e5258f75bbfc67db851fd69e822e11ddbc831f38ec6042f83c6b19e118b1008b9773f855edfbe4992597d344434d21ef227e185ca24220383a9a7eaf89505198df0822fc282d7121e88706d9259ffbf4330b4470dfa2d3ac9bdcf39321dffa57dc9741b5a298f7389d4ff31c34309978a255aa4bcba98d1d4ea88fa4cc71fd520bc0b48b090fb639b91a2473f36851ad334f1819756321a85d8692a3e9c0eddbc6a2491a6150d7044625b37f0d6766781e8ef66b3bdabfb2e4914a80b0", 0x59}, {&(0x7f0000002740)="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", 0xfffffe99}], 0x2}, 0x80) kernel console output (not intermixed with test programs): dv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.572284][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.628799][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.636924][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.650236][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.671302][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.685180][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.695161][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.704685][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.715657][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.724700][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.752035][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.793415][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.814667][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.825481][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.836013][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.845880][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.857493][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.869211][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.879888][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.893822][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.921880][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.923276][ C1] hrtimer: interrupt took 76261 ns [ 69.947408][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.031006][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.044438][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.056552][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.067012][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.082403][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.083565][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.100661][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.112393][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.122773][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.133436][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.145192][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.185815][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.206170][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.215531][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.231225][ T4200] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.240924][ T4200] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.250412][ T4200] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.259301][ T4200] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.331567][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.351224][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.380349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.396747][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.429357][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.464175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.539430][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.548808][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.556659][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.582185][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.622470][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.653469][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.684574][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.711663][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.820131][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.129696][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 71.136294][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 71.173358][ T4290] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.8'. [ 71.209768][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 71.228927][ T4191] Bluetooth: hci2: command 0x0419 tx timeout [ 71.233230][ T4293] netlink: 'syz.3.9': attribute type 2 has an invalid length. [ 71.235066][ T4191] Bluetooth: hci3: command 0x0419 tx timeout [ 71.275354][ T4285] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 71.339966][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.346680][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.437907][ T4287] device syzkaller0 entered promiscuous mode [ 71.673315][ T4290] device syzkaller0 entered promiscuous mode [ 72.325755][ T4309] netlink: 'syz.4.11': attribute type 21 has an invalid length. [ 72.440334][ T4281] syz.2.7 (4281) used greatest stack depth: 20384 bytes left [ 73.701810][ T4356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 73.769477][ T155] wlan1: Trigger new scan to find an IBSS to join [ 73.850810][ T4341] device syzkaller0 entered promiscuous mode [ 73.911247][ T4356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 73.931381][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 73.957420][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 74.002565][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 74.013112][ T4359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 74.022453][ T4359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 74.197115][ T4378] netlink: 'syz.2.26': attribute type 21 has an invalid length. [ 74.260121][ T4377] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 74.292636][ T4374] netlink: 56 bytes leftover after parsing attributes in process `syz.0.38'. [ 74.303099][ T4377] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.27'. [ 75.423040][ T4405] IPv6: Can't replace route, no match found [ 75.589580][ T4410] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 75.633152][ T4410] netlink: 'syz.2.35': attribute type 4 has an invalid length. [ 76.150482][ T4432] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 76.189361][ T4435] __nla_validate_parse: 2 callbacks suppressed [ 76.189378][ T4435] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.45'. [ 76.277199][ T4437] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.46'. [ 76.595482][ T4441] netlink: 'syz.4.47': attribute type 21 has an invalid length. [ 76.657154][ T4441] netlink: 128 bytes leftover after parsing attributes in process `syz.4.47'. [ 76.684289][ T4441] netlink: 'syz.4.47': attribute type 4 has an invalid length. [ 76.695484][ T4441] netlink: 3 bytes leftover after parsing attributes in process `syz.4.47'. [ 78.133622][ T4263] wlan1: Trigger new scan to find an IBSS to join [ 78.746295][ T144] wlan1: Trigger new scan to find an IBSS to join [ 78.825771][ T4479] Zero length message leads to an empty skb [ 78.946154][ T4479] netlink: 'syz.2.58': attribute type 10 has an invalid length. [ 78.972280][ T4479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.009500][ T4479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.047005][ T4479] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 79.133083][ T4481] netlink: 164 bytes leftover after parsing attributes in process `syz.2.58'. [ 79.148229][ T4484] netlink: 164 bytes leftover after parsing attributes in process `syz.2.58'. [ 79.393481][ T4505] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 79.442763][ T4505] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.63'. [ 79.480096][ T4499] netlink: 'syz.1.63': attribute type 2 has an invalid length. [ 79.488126][ T4499] netlink: 'syz.1.63': attribute type 8 has an invalid length. [ 79.503453][ T4499] netlink: 132 bytes leftover after parsing attributes in process `syz.1.63'. [ 79.544954][ T4505] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.63'. [ 79.639727][ T4505] openvswitch: netlink: IP tunnel dst address not specified [ 79.682759][ T4511] netlink: 'syz.0.67': attribute type 21 has an invalid length. [ 79.702342][ T4511] netlink: 'syz.0.67': attribute type 6 has an invalid length. [ 79.712849][ T4511] netlink: 132 bytes leftover after parsing attributes in process `syz.0.67'. [ 79.744397][ T4512] netlink: 'syz.0.67': attribute type 21 has an invalid length. [ 79.775509][ T4512] netlink: 'syz.0.67': attribute type 6 has an invalid length. [ 80.730002][ T3095] wlan1: Trigger new scan to find an IBSS to join [ 80.847938][ T4263] wlan1: Creating new IBSS network, BSSID 12:de:9c:c1:24:8f [ 82.728837][ T144] wlan1: Trigger new scan to find an IBSS to join [ 83.694656][ T4541] validate_nla: 1 callbacks suppressed [ 83.694673][ T4541] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 83.795655][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.834686][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.915027][ T4541] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 84.046968][ T4531] __nla_validate_parse: 2 callbacks suppressed [ 84.046988][ T4531] netlink: 164 bytes leftover after parsing attributes in process `syz.0.82'. [ 84.086285][ T4539] netlink: 164 bytes leftover after parsing attributes in process `syz.0.82'. [ 84.248017][ T4561] netlink: 132 bytes leftover after parsing attributes in process `syz.2.78'. [ 84.552136][ T4569] netlink: 'syz.4.81': attribute type 9 has an invalid length. [ 84.566324][ T4569] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.81'. [ 84.584801][ T4567] netlink: 'syz.2.83': attribute type 21 has an invalid length. [ 84.628758][ T4567] netlink: 128 bytes leftover after parsing attributes in process `syz.2.83'. [ 84.651941][ T4567] netlink: 'syz.2.83': attribute type 4 has an invalid length. [ 84.704471][ T4567] netlink: 3 bytes leftover after parsing attributes in process `syz.2.83'. [ 84.730172][ T154] wlan1: Creating new IBSS network, BSSID ae:68:56:d2:41:41 [ 84.930157][ T4588] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.88'. [ 85.765345][ T1108] cfg80211: failed to load regulatory.db [ 85.957603][ T4607] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.93'. [ 86.013093][ T4601] device wg2 entered promiscuous mode [ 86.031871][ T4607] openvswitch: netlink: Key type 4112 is out of range max 29 [ 86.048411][ T4608] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.92'. [ 86.212719][ T4610] netlink: 'syz.0.94': attribute type 10 has an invalid length. [ 86.270281][ T4610] netlink: 2 bytes leftover after parsing attributes in process `syz.0.94'. [ 86.318654][ T4610] device bond0 entered promiscuous mode [ 86.324263][ T4610] device bond_slave_0 entered promiscuous mode [ 86.389152][ T4610] device bond_slave_1 entered promiscuous mode [ 86.395488][ T4610] device batadv_slave_0 entered promiscuous mode [ 86.459001][ T4610] bridge0: port 3(bond0) entered blocking state [ 86.491487][ T4610] bridge0: port 3(bond0) entered disabled state [ 86.550981][ T4610] bridge0: port 3(bond0) entered blocking state [ 86.557550][ T4610] bridge0: port 3(bond0) entered forwarding state [ 86.676082][ T4630] device syzkaller0 entered promiscuous mode [ 88.131799][ T4674] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 89.090009][ T4692] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 89.194528][ T4692] __nla_validate_parse: 5 callbacks suppressed [ 89.194544][ T4692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.119'. [ 89.335984][ T4692] netlink: 'syz.1.119': attribute type 10 has an invalid length. [ 89.381725][ T4692] netlink: 40 bytes leftover after parsing attributes in process `syz.1.119'. [ 89.786971][ T4703] device syzkaller0 entered promiscuous mode [ 90.589825][ T4735] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.129'. [ 90.796447][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 90.977378][ T4739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.065056][ T4744] netlink: 'syz.1.132': attribute type 6 has an invalid length. [ 91.145406][ T4744] netlink: 1034 bytes leftover after parsing attributes in process `syz.1.132'. [ 91.240624][ T4746] netlink: 'syz.1.132': attribute type 39 has an invalid length. [ 91.635661][ T4752] device syzkaller0 entered promiscuous mode [ 91.740553][ T4759] device syzkaller0 entered promiscuous mode [ 92.572747][ T4784] netlink: 'syz.0.145': attribute type 2 has an invalid length. [ 92.640171][ T4784] netlink: 'syz.0.145': attribute type 8 has an invalid length. [ 92.720882][ T4784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.145'. [ 93.780251][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 95.861601][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 96.124824][ T4757] chnl_net:caif_netlink_parms(): no params data found [ 96.545694][ T4826] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.158'. [ 96.557133][ T4830] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.159'. [ 96.575479][ T4757] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.602764][ T4757] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.637068][ T4757] device bridge_slave_0 entered promiscuous mode [ 96.655231][ T4757] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.663052][ T4757] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.674931][ T4757] device bridge_slave_1 entered promiscuous mode [ 96.687530][ T4188] syz-executor (4188) used greatest stack depth: 20280 bytes left [ 96.737122][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.763600][ T4832] netlink: 'syz.0.159': attribute type 12 has an invalid length. [ 96.771980][ T4832] netlink: 132 bytes leftover after parsing attributes in process `syz.0.159'. [ 96.806354][ T4757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.825171][ T4757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.853623][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.981742][ T4838] ref_ctr_offset mismatch. inode: 0xcc offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 97.004924][ T4757] team0: Port device team_slave_0 added [ 97.043552][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.107300][ T4757] team0: Port device team_slave_1 added [ 97.196909][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.305005][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.354669][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.395767][ T4757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.491763][ T4852] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.165'. [ 97.545793][ T4849] netlink: 180 bytes leftover after parsing attributes in process `syz.2.165'. [ 97.671959][ T4854] device syzkaller0 entered promiscuous mode [ 97.691542][ T4757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.699157][ T4757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.763603][ T4757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.774768][ T154] wlan1: Trigger new scan to find an IBSS to join [ 97.946537][ T1336] Bluetooth: hci5: command 0x040f tx timeout [ 98.181835][ T4881] device veth1_macvtap left promiscuous mode [ 98.361463][ T4757] device hsr_slave_0 entered promiscuous mode [ 98.384255][ T4757] device hsr_slave_1 entered promiscuous mode [ 98.423986][ T4757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.443586][ T4757] Cannot create hsr debugfs directory [ 98.740986][ T4887] device syzkaller0 entered promiscuous mode [ 98.780368][ T4903] netlink: 'syz.1.176': attribute type 3 has an invalid length. [ 98.804826][ T4903] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 98.817115][ T4898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.176'. [ 98.827149][ T4903] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.176'. [ 99.308337][ T4923] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.182'. [ 99.367000][ T4924] netlink: 'syz.1.181': attribute type 39 has an invalid length. [ 99.441710][ T4926] netlink: 14 bytes leftover after parsing attributes in process `syz.2.183'. [ 99.475142][ T4926] netlink: set zone limit has 4 unknown bytes [ 99.492408][ T4923] netlink: 'syz.0.182': attribute type 25 has an invalid length. [ 99.508740][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 99.721946][ T4948] netlink: 'syz.1.186': attribute type 22 has an invalid length. [ 99.746394][ T4942] device lo entered promiscuous mode [ 99.768391][ T4757] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.849519][ T4757] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.890606][ T4757] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.948149][ T4757] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.008882][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 100.323278][ T4757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.458897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.470184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.505032][ T4757] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.606573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.637200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.683539][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.690782][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.760821][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.797302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.836707][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.843921][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.001154][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.015713][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.046647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.139368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.160516][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.209473][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.271767][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.311760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.398683][ T155] device hsr_slave_0 left promiscuous mode [ 101.418098][ T155] device hsr_slave_1 left promiscuous mode [ 101.425934][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.450358][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.490711][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.505791][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.535224][ T155] device bridge_slave_1 left promiscuous mode [ 101.555232][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.615589][ T155] device bridge_slave_0 left promiscuous mode [ 101.630521][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.733811][ T155] device veth1_macvtap left promiscuous mode [ 101.753430][ T155] device veth0_macvtap left promiscuous mode [ 101.771965][ T155] device veth1_vlan left promiscuous mode [ 101.778048][ T155] device veth0_vlan left promiscuous mode [ 101.788686][ T154] wlan1: Trigger new scan to find an IBSS to join [ 102.336755][ T155] team0 (unregistering): Port device team_slave_1 removed [ 102.365912][ T155] team0 (unregistering): Port device team_slave_0 removed [ 102.394045][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.435686][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.600802][ T155] bond0 (unregistering): Released all slaves [ 102.724635][ T4757] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 102.743451][ T4757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.765741][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.777477][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.794652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.807864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.824856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.106505][ T5014] netlink: 'syz.0.201': attribute type 10 has an invalid length. [ 103.129955][ T5014] __nla_validate_parse: 2 callbacks suppressed [ 103.129986][ T5014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.201'. [ 103.161032][ T5014] device team0 entered promiscuous mode [ 103.183715][ T5014] device team_slave_0 entered promiscuous mode [ 103.194032][ T5014] device team_slave_1 entered promiscuous mode [ 103.247026][ T5014] bridge0: port 4(team0) entered blocking state [ 103.256585][ T5014] bridge0: port 4(team0) entered disabled state [ 103.323847][ T5014] bridge0: port 4(team0) entered blocking state [ 103.331811][ T5014] bridge0: port 4(team0) entered forwarding state [ 103.652007][ T5033] netlink: 14 bytes leftover after parsing attributes in process `syz.1.204'. [ 103.697679][ T5029] netlink: 132 bytes leftover after parsing attributes in process `syz.0.203'. [ 103.738948][ T5033] netlink: del zone limit has 4 unknown bytes [ 103.770991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.778462][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.787233][ T144] wlan1: Creating new IBSS network, BSSID fa:0a:b0:9c:1a:89 [ 103.868984][ T4757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.740309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.778468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.911944][ T4757] device veth0_vlan entered promiscuous mode [ 104.920473][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.932850][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.974980][ T4757] device veth1_vlan entered promiscuous mode [ 104.991307][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.024229][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.125879][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.149390][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.207623][ T4757] device veth0_macvtap entered promiscuous mode [ 105.240824][ T4757] device veth1_macvtap entered promiscuous mode [ 105.337971][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.397013][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.417976][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.448744][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.485469][ T5077] syz.0.211 uses obsolete (PF_INET,SOCK_PACKET) [ 105.500174][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.542012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.580277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.601964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.654782][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.693543][ T5078] netlink: 'syz.0.211': attribute type 4 has an invalid length. [ 105.734689][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.791696][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.865339][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.941410][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.965461][ T5078] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.211'. [ 106.014903][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.099058][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.183556][ T4757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.237972][ T4757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.325216][ T4757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.400109][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.439979][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.503607][ T4757] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.548670][ T4757] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.557419][ T4757] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.637029][ T4757] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.425542][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.488594][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.766541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.865447][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.895917][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.945640][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 109.384621][ T5119] netlink: 'syz.5.217': attribute type 21 has an invalid length. [ 109.408432][ T5119] netlink: 132 bytes leftover after parsing attributes in process `syz.5.217'. [ 109.448905][ T5119] netlink: 'syz.5.217': attribute type 1 has an invalid length. [ 109.771231][ T5132] netlink: 'syz.5.219': attribute type 10 has an invalid length. [ 109.926286][ T5132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.972484][ T5132] team0: Port device bond0 added [ 110.735629][ T5151] netlink: 'syz.2.223': attribute type 21 has an invalid length. [ 110.832673][ T5151] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 111.233879][ T5155] netlink: 144 bytes leftover after parsing attributes in process `syz.4.224'. [ 111.244742][ T5156] netlink: 144 bytes leftover after parsing attributes in process `syz.4.224'. [ 111.278445][ T5152] netlink: 'syz.2.223': attribute type 10 has an invalid length. [ 111.286417][ T5152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.223'. [ 111.352144][ T5152] batman_adv: batadv0: Adding interface: virt_wifi0 [ 111.395851][ T5152] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.545236][ T5152] batman_adv: batadv0: Interface activated: virt_wifi0 [ 111.832433][ T5177] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.229'. [ 111.979443][ T5185] netlink: 'syz.4.231': attribute type 21 has an invalid length. [ 112.017761][ T5185] netlink: 'syz.4.231': attribute type 6 has an invalid length. [ 112.042808][ T5185] netlink: 132 bytes leftover after parsing attributes in process `syz.4.231'. [ 113.144462][ T5219] netlink: 'syz.5.236': attribute type 10 has an invalid length. [ 113.412472][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.518389][ T5219] device bridge_slave_1 left promiscuous mode [ 113.538916][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.345595][ T5219] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 114.549701][ T5219] syz.5.236 (5219) used greatest stack depth: 20272 bytes left [ 116.420957][ T5328] netlink: 'syz.2.256': attribute type 39 has an invalid length. [ 117.082856][ T5354] netlink: 'syz.4.265': attribute type 10 has an invalid length. [ 117.347732][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.390208][ T5354] team0: Port device bond0 added [ 117.417406][ T5350] netlink: 14 bytes leftover after parsing attributes in process `syz.2.263'. [ 117.433223][ T5354] syz.4.265 (5354) used greatest stack depth: 19904 bytes left [ 117.591833][ T5350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.687043][ T5350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.804321][ T5350] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 117.917415][ T5350] bond0 (unregistering): Released all slaves [ 118.348143][ T5369] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 118.391826][ T5376] netlink: 132 bytes leftover after parsing attributes in process `syz.5.271'. [ 118.407269][ T5369] netlink: 'syz.2.269': attribute type 3 has an invalid length. [ 118.444125][ T5369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.269'. [ 118.634548][ T5383] netlink: 'syz.4.274': attribute type 39 has an invalid length. [ 118.916515][ T5391] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.276'. [ 120.003695][ T5414] device syzkaller0 entered promiscuous mode [ 120.451777][ T5432] netlink: 'syz.4.286': attribute type 4 has an invalid length. [ 120.463777][ T5431] netlink: 'syz.2.287': attribute type 10 has an invalid length. [ 120.479605][ T5432] netlink: 'syz.4.286': attribute type 3 has an invalid length. [ 120.499811][ T5432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.286'. [ 120.503928][ T5431] netlink: 55 bytes leftover after parsing attributes in process `syz.2.287'. [ 121.452673][ T5441] netlink: 'syz.4.289': attribute type 7 has an invalid length. [ 121.463227][ T5438] netlink: 'syz.4.289': attribute type 7 has an invalid length. [ 122.186600][ T5473] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.298'. [ 122.370127][ T5479] netlink: 105040 bytes leftover after parsing attributes in process `syz.5.298'. [ 122.625206][ T5486] netlink: 'syz.1.301': attribute type 3 has an invalid length. [ 122.648962][ T5486] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.301'. [ 122.703341][ T5486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.301'. [ 123.184361][ T5519] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 123.232661][ T5519] netlink: 156 bytes leftover after parsing attributes in process `syz.4.308'. [ 123.484317][ T5537] netlink: 'syz.0.311': attribute type 39 has an invalid length. [ 124.188041][ T5563] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.316'. [ 124.207438][ T5562] netlink: 'syz.4.318': attribute type 39 has an invalid length. [ 124.329335][ T5565] device syzkaller0 entered promiscuous mode [ 125.855293][ T5618] netlink: 60 bytes leftover after parsing attributes in process `syz.4.330'. [ 125.939441][ T5627] netlink: 132 bytes leftover after parsing attributes in process `syz.0.333'. [ 126.008186][ T5635] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.335'. [ 126.056262][ T5632] netlink: 127968 bytes leftover after parsing attributes in process `syz.1.334'. [ 126.645893][ T5671] netlink: 'syz.4.345': attribute type 8 has an invalid length. [ 126.861091][ T5678] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.349'. [ 127.822253][ T5726] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.360'. [ 127.871945][ T5698] syz.0.354 (5698) used greatest stack depth: 16664 bytes left [ 128.140005][ T5741] pimreg: tun_chr_ioctl cmd 1074025677 [ 128.152107][ T5741] pimreg: linktype set to 805 [ 128.174915][ T5741] pimreg: tun_chr_ioctl cmd 1074025681 [ 128.185730][ T5741] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 128.502067][ T5758] Â: renamed from pim6reg1 [ 128.820912][ T5770] netlink: 'syz.4.374': attribute type 12 has an invalid length. [ 128.905771][ T5770] netlink: 132 bytes leftover after parsing attributes in process `syz.4.374'. [ 129.355496][ T5796] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 129.395766][ T5796] netlink: 'syz.0.380': attribute type 11 has an invalid length. [ 129.463717][ T5796] netlink: 198172 bytes leftover after parsing attributes in process `syz.0.380'. [ 129.560867][ T5802] netlink: 'syz.4.381': attribute type 3 has an invalid length. [ 129.636752][ T5802] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.381'. [ 129.685377][ T5808] netlink: 'syz.4.381': attribute type 21 has an invalid length. [ 129.737785][ T5808] netlink: 'syz.4.381': attribute type 6 has an invalid length. [ 129.778012][ T5808] netlink: 132 bytes leftover after parsing attributes in process `syz.4.381'. [ 129.824697][ T5818] netlink: 'syz.1.385': attribute type 19 has an invalid length. [ 129.862483][ T5816] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.382'. [ 129.874843][ T5818] netlink: 172 bytes leftover after parsing attributes in process `syz.1.385'. [ 129.910913][ T5820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.385'. [ 129.955123][ T5822] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 130.256456][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.378167][ T5822] device bridge_slave_1 left promiscuous mode [ 130.503384][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.757184][ T5822] device bridge_slave_1 entered promiscuous mode [ 130.764513][ T5822] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 130.774121][ T5820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.385'. [ 130.818210][ T5839] netlink: 'syz.2.389': attribute type 10 has an invalid length. [ 130.847043][ T5839] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 130.877798][ T5839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.329713][ T5865] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 131.391679][ T5865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.935839][ T5888] device syzkaller0 entered promiscuous mode [ 132.511424][ T5907] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 132.675730][ T5899] delete_channel: no stack [ 132.743029][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749662][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.102335][ T5937] validate_nla: 1 callbacks suppressed [ 133.102352][ T5937] netlink: 'syz.0.413': attribute type 11 has an invalid length. [ 133.271375][ T5949] __nla_validate_parse: 5 callbacks suppressed [ 133.271392][ T5949] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.416'. [ 133.892544][ T5965] delete_channel: no stack [ 134.199883][ T5965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.207172][ T5965] IPv6: NLM_F_CREATE should be set when creating new route [ 134.214500][ T5965] IPv6: NLM_F_CREATE should be set when creating new route [ 134.221773][ T5965] IPv6: NLM_F_CREATE should be set when creating new route [ 134.451623][ T5974] netlink: 'syz.2.421': attribute type 3 has an invalid length. [ 134.504801][ T5974] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.421'. [ 134.852482][ T5991] netlink: 'syz.5.424': attribute type 10 has an invalid length. [ 134.949074][ T5991] device hsr0 entered promiscuous mode [ 135.070410][ T5991] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.140535][ T6015] netlink: 52 bytes leftover after parsing attributes in process `syz.2.430'. [ 135.352516][ T6019] netlink: 52 bytes leftover after parsing attributes in process `syz.4.431'. [ 135.434186][ T6029] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.432'. [ 135.448917][ T6019] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 135.604120][ T6023] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 135.649010][ T6023] bridge0: port 3(netdevsim0) entered blocking state [ 135.680657][ T6023] bridge0: port 3(netdevsim0) entered disabled state [ 135.856166][ T6023] device netdevsim0 entered promiscuous mode [ 135.928064][ T6042] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.436'. [ 135.936579][ T6023] bridge0: port 3(netdevsim0) entered blocking state [ 135.951382][ T6023] bridge0: port 3(netdevsim0) entered forwarding state [ 135.982338][ T6037] tun0: tun_chr_ioctl cmd 1074025681 [ 136.451580][ T6061] netlink: 'syz.2.439': attribute type 10 has an invalid length. [ 136.488519][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.2.439'. [ 136.497430][ T6061] device dummy0 entered promiscuous mode [ 136.596918][ T6061] bridge0: port 3(dummy0) entered blocking state [ 136.635654][ T6061] bridge0: port 3(dummy0) entered disabled state [ 136.674113][ T6061] bridge0: port 3(dummy0) entered blocking state [ 136.680573][ T6061] bridge0: port 3(dummy0) entered forwarding state [ 137.217874][ T6079] device lo entered promiscuous mode [ 137.267129][ T6083] device lo left promiscuous mode [ 137.422450][ T6086] netlink: 'syz.2.444': attribute type 3 has an invalid length. [ 137.707140][ T6088] netlink: 156 bytes leftover after parsing attributes in process `syz.2.444'. [ 137.746042][ T6086] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.444'. [ 137.954034][ T6102] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.448'. [ 138.290988][ T6108] netlink: 'syz.5.447': attribute type 10 has an invalid length. [ 138.391193][ T6108] team0: Device hsr_slave_0 failed to register rx_handler [ 138.711371][ T6136] netlink: 'syz.4.455': attribute type 3 has an invalid length. [ 138.774939][ T6136] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.455'. [ 139.053246][ T6145] netlink: 14 bytes leftover after parsing attributes in process `syz.2.457'. [ 139.217065][ T6144] netlink: 'syz.5.456': attribute type 21 has an invalid length. [ 139.438917][ T6160] delete_channel: no stack [ 139.443572][ T6160] delete_channel: no stack [ 139.491165][ T6144] netlink: 132 bytes leftover after parsing attributes in process `syz.5.456'. [ 139.804766][ T6170] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.462'. [ 140.025354][ T6179] netlink: 'syz.5.464': attribute type 3 has an invalid length. [ 140.074570][ T6179] netlink: 132 bytes leftover after parsing attributes in process `syz.5.464'. [ 140.206285][ T6193] netlink: 188 bytes leftover after parsing attributes in process `syz.2.467'. [ 140.316914][ T6197] netlink: 52 bytes leftover after parsing attributes in process `syz.5.469'. [ 140.442228][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 140.462727][ T6204] netlink: 830 bytes leftover after parsing attributes in process `syz.2.471'. [ 140.550037][ T6201] device macvlan1 entered promiscuous mode [ 141.122040][ T6225] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.475'. [ 141.642527][ T6259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.699019][ T6296] ¤: port 1(batadv0) entered blocking state [ 143.758803][ T6296] ¤: port 1(batadv0) entered disabled state [ 143.768105][ T6296] device batadv0 entered promiscuous mode [ 143.849765][ T6305] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 143.859509][ T6305] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 144.149555][ T6323] __nla_validate_parse: 2 callbacks suppressed [ 144.149571][ T6323] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.503'. [ 144.689753][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.506'. [ 144.939327][ T6336] netlink: 60 bytes leftover after parsing attributes in process `syz.4.506'. [ 145.301426][ T6339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.506'. [ 145.617777][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.5.513'. [ 145.627140][ T6362] netlink: 60 bytes leftover after parsing attributes in process `syz.5.513'. [ 145.697516][ T6365] netlink: 60 bytes leftover after parsing attributes in process `syz.5.513'. [ 145.760547][ T6368] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.515'. [ 147.405951][ T6420] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.528'. [ 147.834593][ T6423] netlink: 'syz.5.529': attribute type 8 has an invalid length. [ 147.883720][ T6435] IPv6: Can't replace route, no match found [ 147.944081][ T6423] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.529'. [ 148.058647][ T6434] netlink: 'syz.0.532': attribute type 3 has an invalid length. [ 148.202846][ T6442] netlink: 'syz.1.535': attribute type 10 has an invalid length. [ 148.919945][ T6460] tun0: tun_chr_ioctl cmd 1074025692 [ 149.315316][ T6480] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 149.622034][ T6480] device syzkaller0 entered promiscuous mode [ 149.853808][ T6490] netlink: 'syz.4.550': attribute type 3 has an invalid length. [ 149.864060][ T6490] __nla_validate_parse: 4 callbacks suppressed [ 149.864105][ T6490] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.550'. [ 149.984076][ T6494] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.552'. [ 151.165875][ T6531] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.563'. [ 151.205584][ T6532] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 151.321470][ T6532] device syzkaller0 entered promiscuous mode [ 151.957001][ T6556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.013583][ T6563] IPv6: Can't replace route, no match found [ 152.081282][ T6563] netlink: 'syz.2.573': attribute type 3 has an invalid length. [ 152.118738][ T6563] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.573'. [ 152.166360][ T6572] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.575'. [ 152.364465][ T6577] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.577'. [ 152.469913][ T6577] netlink: 194056 bytes leftover after parsing attributes in process `syz.2.577'. [ 152.604120][ T6595] netlink: 'syz.4.582': attribute type 9 has an invalid length. [ 152.622272][ T6595] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.582'. [ 152.892518][ T6616] netlink: 'syz.0.587': attribute type 46 has an invalid length. [ 152.923348][ T6621] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.589'. [ 153.004652][ T6618] IPv6: Can't replace route, no match found [ 153.096144][ T6618] netlink: 'syz.1.590': attribute type 3 has an invalid length. [ 153.128975][ T6618] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.590'. [ 153.416051][ T6631] netlink: 'syz.5.586': attribute type 1 has an invalid length. [ 153.580710][ T6631] device syzkaller0 entered promiscuous mode [ 154.485616][ T6685] device pim6reg1 entered promiscuous mode [ 154.879355][ T6709] __nla_validate_parse: 3 callbacks suppressed [ 154.879372][ T6709] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.615'. [ 155.608427][ T6711] netlink: 'syz.1.616': attribute type 7 has an invalid length. [ 155.626622][ T6713] netlink: 'syz.1.616': attribute type 7 has an invalid length. [ 155.935083][ T6751] netlink: 'syz.0.625': attribute type 5 has an invalid length. [ 156.004230][ T6754] netlink: 56847 bytes leftover after parsing attributes in process `syz.4.627'. [ 156.162574][ T6766] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.629'. [ 157.082769][ T6794] netlink: 'syz.1.636': attribute type 9 has an invalid length. [ 157.168734][ T6794] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.636'. [ 157.864149][ T6820] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.643'. [ 158.372686][ T6840] device lo entered promiscuous mode [ 158.400420][ T6844] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.647'. [ 158.604156][ T6848] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.653'. [ 158.617798][ T6848] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 158.657861][ T6848] netlink: 'syz.1.653': attribute type 39 has an invalid length. [ 158.952433][ T6859] device syzkaller0 entered promiscuous mode [ 159.254885][ T6874] netlink: 'syz.1.659': attribute type 9 has an invalid length. [ 159.299717][ T6874] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.659'. [ 159.526914][ T6881] delete_channel: no stack [ 159.775828][ T6887] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 159.790424][ T6876] netlink: 'syz.1.659': attribute type 9 has an invalid length. [ 159.806541][ T6876] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.659'. [ 159.921354][ T6887] team0: Port device geneve1 added [ 160.303680][ T6903] netlink: 'syz.1.668': attribute type 17 has an invalid length. [ 160.335051][ T6905] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.667'. [ 160.361091][ T6903] netlink: 152 bytes leftover after parsing attributes in process `syz.1.668'. [ 160.439029][ T6903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.783702][ T6924] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.674'. [ 160.794843][ T6922] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.673'. [ 160.826836][ T6924] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.674'. [ 160.849034][ T6924] netlink: 2 bytes leftover after parsing attributes in process `syz.1.674'. [ 160.979087][ T6925] netlink: 'syz.4.673': attribute type 1 has an invalid length. [ 161.003379][ T6925] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.673'. [ 161.082093][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 161.507367][ T6936] netlink: 14 bytes leftover after parsing attributes in process `syz.2.676'. [ 161.537124][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 161.830141][ T6936] device hsr_slave_1 left promiscuous mode [ 162.003208][ T6943] netlink: 28 bytes leftover after parsing attributes in process `syz.4.679'. [ 162.038614][ T6954] netlink: 'syz.0.683': attribute type 11 has an invalid length. [ 162.366780][ T6970] netlink: 'syz.4.686': attribute type 10 has an invalid length. [ 162.491303][ T6970] team0 (unregistering): Port device team_slave_0 removed [ 162.523462][ T6970] team0 (unregistering): Port device team_slave_1 removed [ 162.561408][ T6970] team0 (unregistering): Port device bond0 removed [ 163.015291][ T6989] netlink: 'syz.5.691': attribute type 3 has an invalid length. [ 164.052739][ T7026] netlink: 'syz.4.704': attribute type 10 has an invalid length. [ 164.167052][ T7026] netlink: 'syz.4.704': attribute type 29 has an invalid length. [ 164.302172][ T7016] netlink: 'syz.5.701': attribute type 3 has an invalid length. [ 164.317434][ T7033] FAULT_INJECTION: forcing a failure. [ 164.317434][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 164.361673][ T7033] CPU: 1 PID: 7033 Comm: syz.0.706 Not tainted syzkaller #0 [ 164.369024][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 164.379189][ T7033] Call Trace: [ 164.382500][ T7033] [ 164.385469][ T7033] dump_stack_lvl+0x188/0x250 [ 164.390212][ T7033] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.396408][ T7033] ? show_regs_print_info+0x20/0x20 [ 164.401646][ T7033] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 164.407852][ T7033] should_fail+0x38c/0x4c0 [ 164.412323][ T7033] _copy_from_user+0x2e/0x170 [ 164.417057][ T7033] __copy_msghdr_from_user+0xc9/0x630 [ 164.422474][ T7033] ? verify_lock_unused+0x140/0x140 [ 164.427716][ T7033] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 164.433061][ T7033] ___sys_sendmsg+0x19a/0x2e0 [ 164.437781][ T7033] ? __sys_sendmsg+0x2a0/0x2a0 [ 164.442596][ T7033] ? vfs_write+0x8b2/0xd60 [ 164.447070][ T7033] __se_sys_sendmsg+0x1af/0x290 [ 164.451959][ T7033] ? __x64_sys_sendmsg+0x80/0x80 [ 164.456930][ T7033] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 164.462968][ T7033] ? lockdep_hardirqs_on+0x94/0x140 [ 164.468206][ T7033] do_syscall_64+0x4c/0xa0 [ 164.472651][ T7033] ? clear_bhb_loop+0x30/0x80 [ 164.477357][ T7033] ? clear_bhb_loop+0x30/0x80 [ 164.482064][ T7033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 164.488003][ T7033] RIP: 0033:0x7f4e44613629 [ 164.492449][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.512082][ T7033] RSP: 002b:00007f4e4286d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.520537][ T7033] RAX: ffffffffffffffda RBX: 00007f4e4488cfa0 RCX: 00007f4e44613629 [ 164.528547][ T7033] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 164.536541][ T7033] RBP: 00007f4e4286d090 R08: 0000000000000000 R09: 0000000000000000 [ 164.544544][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.552550][ T7033] R13: 00007f4e4488d038 R14: 00007f4e4488cfa0 R15: 00007ffda33598d8 [ 164.560565][ T7033] [ 164.578701][ T7026] netlink: 'syz.4.704': attribute type 29 has an invalid length. [ 165.484262][ T7064] sctp: [Deprecated]: syz.2.719 (pid 7064) Use of int in maxseg socket option. [ 165.484262][ T7064] Use struct sctp_assoc_value instead [ 165.915850][ T7081] __nla_validate_parse: 6 callbacks suppressed [ 165.915877][ T7081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.722'. [ 166.333254][ T7088] FAULT_INJECTION: forcing a failure. [ 166.333254][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.421048][ T7090] netlink: 'syz.4.726': attribute type 10 has an invalid length. [ 166.444199][ T7088] CPU: 1 PID: 7088 Comm: syz.1.725 Not tainted syzkaller #0 [ 166.451546][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 166.461626][ T7088] Call Trace: [ 166.464927][ T7088] [ 166.467876][ T7088] dump_stack_lvl+0x188/0x250 [ 166.472592][ T7088] ? show_regs_print_info+0x20/0x20 [ 166.477826][ T7088] ? load_image+0x400/0x400 [ 166.482382][ T7088] ? __lock_acquire+0x7d10/0x7d10 [ 166.487533][ T7088] should_fail+0x38c/0x4c0 [ 166.491995][ T7088] _copy_from_user+0x2e/0x170 [ 166.496707][ T7088] iovec_from_user+0x142/0x370 [ 166.501503][ T7088] __import_iovec+0x70/0x490 [ 166.506161][ T7088] import_iovec+0x6f/0xa0 [ 166.510524][ T7088] ___sys_sendmsg+0x1fd/0x2e0 [ 166.515240][ T7088] ? __sys_sendmsg+0x2a0/0x2a0 [ 166.520049][ T7088] ? vfs_write+0x8b2/0xd60 [ 166.524516][ T7088] __se_sys_sendmsg+0x1af/0x290 [ 166.529396][ T7088] ? __x64_sys_sendmsg+0x80/0x80 [ 166.534424][ T7088] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 166.540440][ T7088] ? lockdep_hardirqs_on+0x94/0x140 [ 166.545658][ T7088] do_syscall_64+0x4c/0xa0 [ 166.550097][ T7088] ? clear_bhb_loop+0x30/0x80 [ 166.554791][ T7088] ? clear_bhb_loop+0x30/0x80 [ 166.559483][ T7088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.565395][ T7088] RIP: 0033:0x7efc74175629 [ 166.569830][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.589456][ T7088] RSP: 002b:00007efc723cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.597893][ T7088] RAX: ffffffffffffffda RBX: 00007efc743eefa0 RCX: 00007efc74175629 [ 166.605895][ T7088] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 166.613885][ T7088] RBP: 00007efc723cf090 R08: 0000000000000000 R09: 0000000000000000 [ 166.621865][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.629852][ T7088] R13: 00007efc743ef038 R14: 00007efc743eefa0 R15: 00007ffcf45a6648 [ 166.637858][ T7088] [ 166.812781][ T7095] netlink: 65027 bytes leftover after parsing attributes in process `syz.5.724'. [ 167.045172][ T7104] netlink: 199816 bytes leftover after parsing attributes in process `syz.4.729'. [ 167.300031][ T7116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.731'. [ 167.504745][ T7120] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.734'. [ 168.086562][ T7136] netlink: 'syz.4.737': attribute type 2 has an invalid length. [ 168.127291][ T7136] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.737'. [ 168.236925][ T7142] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.740'. [ 168.318701][ T7138] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 168.406321][ T7151] FAULT_INJECTION: forcing a failure. [ 168.406321][ T7151] name failslab, interval 1, probability 0, space 0, times 1 [ 168.468636][ T7151] CPU: 1 PID: 7151 Comm: syz.0.742 Not tainted syzkaller #0 [ 168.476066][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.486148][ T7151] Call Trace: [ 168.489452][ T7151] [ 168.492401][ T7151] dump_stack_lvl+0x188/0x250 [ 168.497116][ T7151] ? show_regs_print_info+0x20/0x20 [ 168.502350][ T7151] ? load_image+0x400/0x400 [ 168.506891][ T7151] ? __might_sleep+0xf0/0xf0 [ 168.511514][ T7151] ? __lock_acquire+0x7d10/0x7d10 [ 168.516577][ T7151] ? netlink_insert+0xe95/0x11f0 [ 168.521544][ T7151] should_fail+0x38c/0x4c0 [ 168.525996][ T7151] should_failslab+0x5/0x20 [ 168.530532][ T7151] slab_pre_alloc_hook+0x51/0xc0 [ 168.535499][ T7151] kmem_cache_alloc_node+0x47/0x2d0 [ 168.540731][ T7151] ? __alloc_skb+0xf4/0x750 [ 168.545266][ T7151] __alloc_skb+0xf4/0x750 [ 168.549632][ T7151] netlink_sendmsg+0x654/0xbe0 [ 168.554430][ T7151] ? netlink_getsockopt+0x570/0x570 [ 168.559660][ T7151] ? aa_sock_msg_perm+0x94/0x150 [ 168.564631][ T7151] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 168.569962][ T7151] ? security_socket_sendmsg+0x7c/0xa0 [ 168.575453][ T7151] ? netlink_getsockopt+0x570/0x570 [ 168.580675][ T7151] ____sys_sendmsg+0x5b7/0x8f0 [ 168.585499][ T7151] ? __sys_sendmsg_sock+0x30/0x30 [ 168.590560][ T7151] ? import_iovec+0x6f/0xa0 [ 168.595100][ T7151] ___sys_sendmsg+0x236/0x2e0 [ 168.599813][ T7151] ? __sys_sendmsg+0x2a0/0x2a0 [ 168.604628][ T7151] ? vfs_write+0x8b2/0xd60 [ 168.609091][ T7151] __se_sys_sendmsg+0x1af/0x290 [ 168.613995][ T7151] ? __x64_sys_sendmsg+0x80/0x80 [ 168.618966][ T7151] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 168.624990][ T7151] ? lockdep_hardirqs_on+0x94/0x140 [ 168.630219][ T7151] do_syscall_64+0x4c/0xa0 [ 168.634661][ T7151] ? clear_bhb_loop+0x30/0x80 [ 168.639367][ T7151] ? clear_bhb_loop+0x30/0x80 [ 168.644072][ T7151] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 168.649992][ T7151] RIP: 0033:0x7f4e44613629 [ 168.654432][ T7151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.674064][ T7151] RSP: 002b:00007f4e4286d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.682507][ T7151] RAX: ffffffffffffffda RBX: 00007f4e4488cfa0 RCX: 00007f4e44613629 [ 168.690512][ T7151] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 168.698512][ T7151] RBP: 00007f4e4286d090 R08: 0000000000000000 R09: 0000000000000000 [ 168.706505][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.714502][ T7151] R13: 00007f4e4488d038 R14: 00007f4e4488cfa0 R15: 00007ffda33598d8 [ 168.722514][ T7151] [ 168.984532][ T7161] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.744'. [ 169.085058][ T7161] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.744'. [ 169.155779][ T7161] openvswitch: netlink: Key type 4112 is out of range max 29 [ 169.169490][ T7166] netlink: 'syz.4.747': attribute type 3 has an invalid length. [ 169.216126][ T7165] netlink: 'syz.0.744': attribute type 49 has an invalid length. [ 169.225028][ T7166] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.747'. [ 169.890687][ T7188] netlink: 'syz.1.749': attribute type 21 has an invalid length. [ 170.181621][ T7196] FAULT_INJECTION: forcing a failure. [ 170.181621][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 170.206297][ T7194] TCP: TCP_TX_DELAY enabled [ 170.263355][ T7196] CPU: 0 PID: 7196 Comm: syz.0.754 Not tainted syzkaller #0 [ 170.270697][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.280778][ T7196] Call Trace: [ 170.284080][ T7196] [ 170.287029][ T7196] dump_stack_lvl+0x188/0x250 [ 170.291729][ T7196] ? show_regs_print_info+0x20/0x20 [ 170.296959][ T7196] ? load_image+0x400/0x400 [ 170.301479][ T7196] ? __might_sleep+0xf0/0xf0 [ 170.306088][ T7196] ? __lock_acquire+0x7d10/0x7d10 [ 170.311128][ T7196] should_fail+0x38c/0x4c0 [ 170.315563][ T7196] should_failslab+0x5/0x20 [ 170.320077][ T7196] slab_pre_alloc_hook+0x51/0xc0 [ 170.325261][ T7196] __kmalloc_node_track_caller+0x68/0x3a0 [ 170.330990][ T7196] ? netlink_sendmsg+0x654/0xbe0 [ 170.335944][ T7196] ? kmem_cache_alloc_node+0x162/0x2d0 [ 170.341421][ T7196] ? __alloc_skb+0xf4/0x750 [ 170.345964][ T7196] ? netlink_sendmsg+0x654/0xbe0 [ 170.350917][ T7196] __alloc_skb+0x22c/0x750 [ 170.355351][ T7196] netlink_sendmsg+0x654/0xbe0 [ 170.360134][ T7196] ? netlink_getsockopt+0x570/0x570 [ 170.365360][ T7196] ? aa_sock_msg_perm+0x94/0x150 [ 170.370311][ T7196] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 170.375620][ T7196] ? security_socket_sendmsg+0x7c/0xa0 [ 170.381094][ T7196] ? netlink_getsockopt+0x570/0x570 [ 170.386304][ T7196] ____sys_sendmsg+0x5b7/0x8f0 [ 170.391091][ T7196] ? __sys_sendmsg_sock+0x30/0x30 [ 170.396135][ T7196] ? import_iovec+0x6f/0xa0 [ 170.400660][ T7196] ___sys_sendmsg+0x236/0x2e0 [ 170.405366][ T7196] ? __sys_sendmsg+0x2a0/0x2a0 [ 170.410274][ T7196] __se_sys_sendmsg+0x1af/0x290 [ 170.415163][ T7196] ? __x64_sys_sendmsg+0x80/0x80 [ 170.420119][ T7196] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 170.426135][ T7196] ? lockdep_hardirqs_on+0x94/0x140 [ 170.431348][ T7196] do_syscall_64+0x4c/0xa0 [ 170.435779][ T7196] ? clear_bhb_loop+0x30/0x80 [ 170.440470][ T7196] ? clear_bhb_loop+0x30/0x80 [ 170.445169][ T7196] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 170.451072][ T7196] RIP: 0033:0x7f4e44613629 [ 170.455516][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.475134][ T7196] RSP: 002b:00007f4e4286d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.483593][ T7196] RAX: ffffffffffffffda RBX: 00007f4e4488cfa0 RCX: 00007f4e44613629 [ 170.491679][ T7196] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 170.499659][ T7196] RBP: 00007f4e4286d090 R08: 0000000000000000 R09: 0000000000000000 [ 170.507644][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.515633][ T7196] R13: 00007f4e4488d038 R14: 00007f4e4488cfa0 R15: 00007ffda33598d8 [ 170.523636][ T7196] [ 171.306957][ T7218] device syzkaller0 entered promiscuous mode [ 171.716345][ T7227] netlink: 'syz.2.765': attribute type 3 has an invalid length. [ 171.738730][ T7227] __nla_validate_parse: 3 callbacks suppressed [ 171.738762][ T7227] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.765'. [ 171.757698][ T7223] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.764'. [ 171.889714][ T7239] FAULT_INJECTION: forcing a failure. [ 171.889714][ T7239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.924375][ T7239] CPU: 0 PID: 7239 Comm: syz.4.768 Not tainted syzkaller #0 [ 171.931723][ T7239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.941821][ T7239] Call Trace: [ 171.945145][ T7239] [ 171.948101][ T7239] dump_stack_lvl+0x188/0x250 [ 171.952817][ T7239] ? show_regs_print_info+0x20/0x20 [ 171.958046][ T7239] ? load_image+0x400/0x400 [ 171.962601][ T7239] ? __lock_acquire+0x7d10/0x7d10 [ 171.967683][ T7239] should_fail+0x38c/0x4c0 [ 171.972144][ T7239] _copy_from_iter+0x22e/0x1170 [ 171.977040][ T7239] ? __lock_acquire+0x7d10/0x7d10 [ 171.982109][ T7239] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 171.987529][ T7239] ? __virt_addr_valid+0x3c6/0x470 [ 171.992683][ T7239] ? __phys_addr_symbol+0x2b/0x70 [ 171.997744][ T7239] ? __check_object_size+0x30c/0x410 [ 172.003075][ T7239] netlink_sendmsg+0x758/0xbe0 [ 172.007888][ T7239] ? netlink_getsockopt+0x570/0x570 [ 172.013123][ T7239] ? aa_sock_msg_perm+0x94/0x150 [ 172.018093][ T7239] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 172.023398][ T7239] ? security_socket_sendmsg+0x7c/0xa0 [ 172.028885][ T7239] ? netlink_getsockopt+0x570/0x570 [ 172.034117][ T7239] ____sys_sendmsg+0x5b7/0x8f0 [ 172.038920][ T7239] ? __sys_sendmsg_sock+0x30/0x30 [ 172.043985][ T7239] ? import_iovec+0x6f/0xa0 [ 172.048522][ T7239] ___sys_sendmsg+0x236/0x2e0 [ 172.053241][ T7239] ? __sys_sendmsg+0x2a0/0x2a0 [ 172.058049][ T7239] ? vfs_write+0x8b2/0xd60 [ 172.062514][ T7239] __se_sys_sendmsg+0x1af/0x290 [ 172.067419][ T7239] ? __x64_sys_sendmsg+0x80/0x80 [ 172.072388][ T7239] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 172.078415][ T7239] ? lockdep_hardirqs_on+0x94/0x140 [ 172.083649][ T7239] do_syscall_64+0x4c/0xa0 [ 172.088101][ T7239] ? clear_bhb_loop+0x30/0x80 [ 172.092809][ T7239] ? clear_bhb_loop+0x30/0x80 [ 172.097524][ T7239] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 172.103451][ T7239] RIP: 0033:0x7f2acae74629 [ 172.107899][ T7239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.127657][ T7239] RSP: 002b:00007f2ac90ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.136112][ T7239] RAX: ffffffffffffffda RBX: 00007f2acb0edfa0 RCX: 00007f2acae74629 [ 172.144115][ T7239] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.152117][ T7239] RBP: 00007f2ac90ce090 R08: 0000000000000000 R09: 0000000000000000 [ 172.160126][ T7239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.168128][ T7239] R13: 00007f2acb0ee038 R14: 00007f2acb0edfa0 R15: 00007ffcfb6b3328 [ 172.176151][ T7239] [ 172.815666][ T7274] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.777'. [ 173.103111][ T7287] FAULT_INJECTION: forcing a failure. [ 173.103111][ T7287] name failslab, interval 1, probability 0, space 0, times 0 [ 173.158543][ T7287] CPU: 0 PID: 7287 Comm: syz.2.782 Not tainted syzkaller #0 [ 173.165886][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.175968][ T7287] Call Trace: [ 173.179300][ T7287] [ 173.182250][ T7287] dump_stack_lvl+0x188/0x250 [ 173.186957][ T7287] ? show_regs_print_info+0x20/0x20 [ 173.192218][ T7287] ? load_image+0x400/0x400 [ 173.196775][ T7287] should_fail+0x38c/0x4c0 [ 173.201227][ T7287] should_failslab+0x5/0x20 [ 173.205758][ T7287] slab_pre_alloc_hook+0x51/0xc0 [ 173.210721][ T7287] ? skb_clone+0x1bd/0x350 [ 173.215171][ T7287] kmem_cache_alloc+0x3d/0x290 [ 173.219971][ T7287] skb_clone+0x1bd/0x350 [ 173.224250][ T7287] __netlink_deliver_tap+0x3cd/0x7c0 [ 173.229585][ T7287] netlink_deliver_tap+0x16c/0x180 [ 173.234728][ T7287] netlink_unicast+0x74f/0x920 [ 173.239543][ T7287] netlink_sendmsg+0x8ba/0xbe0 [ 173.244341][ T7287] ? netlink_getsockopt+0x570/0x570 [ 173.249566][ T7287] ? aa_sock_msg_perm+0x94/0x150 [ 173.254548][ T7287] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 173.259868][ T7287] ? security_socket_sendmsg+0x7c/0xa0 [ 173.265371][ T7287] ? netlink_getsockopt+0x570/0x570 [ 173.270598][ T7287] ____sys_sendmsg+0x5b7/0x8f0 [ 173.275406][ T7287] ? __sys_sendmsg_sock+0x30/0x30 [ 173.280483][ T7287] ? import_iovec+0x6f/0xa0 [ 173.285031][ T7287] ___sys_sendmsg+0x236/0x2e0 [ 173.289750][ T7287] ? __sys_sendmsg+0x2a0/0x2a0 [ 173.294555][ T7287] ? vfs_write+0x8b2/0xd60 [ 173.299022][ T7287] __se_sys_sendmsg+0x1af/0x290 [ 173.303903][ T7287] ? __x64_sys_sendmsg+0x80/0x80 [ 173.308867][ T7287] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 173.314886][ T7287] ? lockdep_hardirqs_on+0x94/0x140 [ 173.320116][ T7287] do_syscall_64+0x4c/0xa0 [ 173.324555][ T7287] ? clear_bhb_loop+0x30/0x80 [ 173.329261][ T7287] ? clear_bhb_loop+0x30/0x80 [ 173.333969][ T7287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 173.339903][ T7287] RIP: 0033:0x7f82bc79a629 [ 173.344354][ T7287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.363989][ T7287] RSP: 002b:00007f82ba9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.372461][ T7287] RAX: ffffffffffffffda RBX: 00007f82bca13fa0 RCX: 00007f82bc79a629 [ 173.380470][ T7287] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 173.388470][ T7287] RBP: 00007f82ba9f4090 R08: 0000000000000000 R09: 0000000000000000 [ 173.396460][ T7287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.404458][ T7287] R13: 00007f82bca14038 R14: 00007f82bca13fa0 R15: 00007ffffaf05a98 [ 173.412484][ T7287] [ 173.551891][ T7291] device syzkaller0 entered promiscuous mode [ 173.947744][ T7308] netlink: 'syz.2.787': attribute type 21 has an invalid length. [ 174.013647][ T7310] netlink: 'syz.1.788': attribute type 9 has an invalid length. [ 174.046172][ T7310] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.788'. [ 174.153839][ T7318] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.791'. [ 174.482419][ T7311] netlink: 'syz.1.788': attribute type 9 has an invalid length. [ 174.517766][ T7311] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.788'. [ 175.232746][ T7334] netlink: 'syz.0.796': attribute type 2 has an invalid length. [ 175.248767][ T7334] netlink: 'syz.0.796': attribute type 8 has an invalid length. [ 175.274179][ T7337] netlink: 'syz.1.797': attribute type 41 has an invalid length. [ 175.283756][ T7334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.796'. [ 175.338729][ T7338] FAULT_INJECTION: forcing a failure. [ 175.338729][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 175.347677][ T7337] netlink: 'syz.1.797': attribute type 41 has an invalid length. [ 175.359997][ T7338] CPU: 1 PID: 7338 Comm: syz.5.794 Not tainted syzkaller #0 [ 175.367318][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.377405][ T7338] Call Trace: [ 175.380707][ T7338] [ 175.383657][ T7338] dump_stack_lvl+0x188/0x250 [ 175.388379][ T7338] ? show_regs_print_info+0x20/0x20 [ 175.393612][ T7338] ? load_image+0x400/0x400 [ 175.398152][ T7338] ? __might_sleep+0xf0/0xf0 [ 175.402768][ T7338] ? __lock_acquire+0x7d10/0x7d10 [ 175.407826][ T7338] should_fail+0x38c/0x4c0 [ 175.412282][ T7338] should_failslab+0x5/0x20 [ 175.416814][ T7338] slab_pre_alloc_hook+0x51/0xc0 [ 175.421791][ T7338] kmem_cache_alloc_node+0x47/0x2d0 [ 175.427021][ T7338] ? __alloc_skb+0xf4/0x750 [ 175.431561][ T7338] __alloc_skb+0xf4/0x750 [ 175.435931][ T7338] netlink_ack+0x372/0xb50 [ 175.440384][ T7338] ? __copy_skb_header+0x3ba/0x4f0 [ 175.445536][ T7338] ? netlink_dump+0xcf0/0xcf0 [ 175.450280][ T7338] ? __skb_clone+0x480/0x790 [ 175.454914][ T7338] netlink_rcv_skb+0x27a/0x440 [ 175.459710][ T7338] ? rtnetlink_bind+0x80/0x80 [ 175.464427][ T7338] ? netlink_ack+0xb50/0xb50 [ 175.469061][ T7338] netlink_unicast+0x774/0x920 [ 175.473875][ T7338] netlink_sendmsg+0x8ba/0xbe0 [ 175.478677][ T7338] ? netlink_getsockopt+0x570/0x570 [ 175.483912][ T7338] ? aa_sock_msg_perm+0x94/0x150 [ 175.488891][ T7338] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 175.494216][ T7338] ? security_socket_sendmsg+0x7c/0xa0 [ 175.499715][ T7338] ? netlink_getsockopt+0x570/0x570 [ 175.504949][ T7338] ____sys_sendmsg+0x5b7/0x8f0 [ 175.509754][ T7338] ? __sys_sendmsg_sock+0x30/0x30 [ 175.514823][ T7338] ? import_iovec+0x6f/0xa0 [ 175.519470][ T7338] ___sys_sendmsg+0x236/0x2e0 [ 175.524191][ T7338] ? __sys_sendmsg+0x2a0/0x2a0 [ 175.529086][ T7338] ? vfs_write+0x8b2/0xd60 [ 175.533558][ T7338] __se_sys_sendmsg+0x1af/0x290 [ 175.538450][ T7338] ? __x64_sys_sendmsg+0x80/0x80 [ 175.543421][ T7338] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 175.549454][ T7338] ? lockdep_hardirqs_on+0x94/0x140 [ 175.554685][ T7338] do_syscall_64+0x4c/0xa0 [ 175.559129][ T7338] ? clear_bhb_loop+0x30/0x80 [ 175.563837][ T7338] ? clear_bhb_loop+0x30/0x80 [ 175.568544][ T7338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 175.574492][ T7338] RIP: 0033:0x7f4d5b240629 [ 175.578934][ T7338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.598565][ T7338] RSP: 002b:00007f4d5949a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.607016][ T7338] RAX: ffffffffffffffda RBX: 00007f4d5b4b9fa0 RCX: 00007f4d5b240629 [ 175.615023][ T7338] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 175.623032][ T7338] RBP: 00007f4d5949a090 R08: 0000000000000000 R09: 0000000000000000 [ 175.631050][ T7338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.639052][ T7338] R13: 00007f4d5b4ba038 R14: 00007f4d5b4b9fa0 R15: 00007ffe17df7b48 [ 175.647069][ T7338] [ 175.897617][ T7354] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.802'. [ 176.218148][ T7367] netlink: 148 bytes leftover after parsing attributes in process `syz.0.807'. [ 176.255397][ T7355] netlink: 183676 bytes leftover after parsing attributes in process `syz.2.801'. [ 176.446423][ T7379] netlink: 'syz.0.810': attribute type 4 has an invalid length. [ 176.743386][ T7387] netlink: 'syz.0.812': attribute type 1 has an invalid length. [ 176.773418][ T7387] __nla_validate_parse: 1 callbacks suppressed [ 176.773437][ T7387] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.812'. [ 176.905138][ T7395] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.815'. [ 176.991134][ T7400] FAULT_INJECTION: forcing a failure. [ 176.991134][ T7400] name failslab, interval 1, probability 0, space 0, times 0 [ 177.051003][ T7400] CPU: 1 PID: 7400 Comm: syz.0.817 Not tainted syzkaller #0 [ 177.058440][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 177.068694][ T7400] Call Trace: [ 177.072001][ T7400] [ 177.075036][ T7400] dump_stack_lvl+0x188/0x250 [ 177.079736][ T7400] ? show_regs_print_info+0x20/0x20 [ 177.084946][ T7400] ? load_image+0x400/0x400 [ 177.089463][ T7400] ? __might_sleep+0xf0/0xf0 [ 177.094067][ T7400] ? __lock_acquire+0x7d10/0x7d10 [ 177.099117][ T7400] should_fail+0x38c/0x4c0 [ 177.103557][ T7400] should_failslab+0x5/0x20 [ 177.108081][ T7400] slab_pre_alloc_hook+0x51/0xc0 [ 177.113046][ T7400] __kmalloc_node_track_caller+0x68/0x3a0 [ 177.118793][ T7400] ? netlink_ack+0x372/0xb50 [ 177.123403][ T7400] ? kmem_cache_alloc_node+0x162/0x2d0 [ 177.128873][ T7400] ? __alloc_skb+0xf4/0x750 [ 177.133388][ T7400] ? netlink_ack+0x372/0xb50 [ 177.137991][ T7400] __alloc_skb+0x22c/0x750 [ 177.142422][ T7400] netlink_ack+0x372/0xb50 [ 177.146852][ T7400] ? __copy_skb_header+0x3ba/0x4f0 [ 177.151982][ T7400] ? netlink_dump+0xcf0/0xcf0 [ 177.156672][ T7400] ? __skb_clone+0x480/0x790 [ 177.161284][ T7400] netlink_rcv_skb+0x27a/0x440 [ 177.166061][ T7400] ? rtnetlink_bind+0x80/0x80 [ 177.170754][ T7400] ? netlink_ack+0xb50/0xb50 [ 177.175359][ T7400] netlink_unicast+0x774/0x920 [ 177.180157][ T7400] netlink_sendmsg+0x8ba/0xbe0 [ 177.184941][ T7400] ? netlink_getsockopt+0x570/0x570 [ 177.190153][ T7400] ? aa_sock_msg_perm+0x94/0x150 [ 177.195108][ T7400] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 177.200419][ T7400] ? security_socket_sendmsg+0x7c/0xa0 [ 177.205901][ T7400] ? netlink_getsockopt+0x570/0x570 [ 177.211122][ T7400] ____sys_sendmsg+0x5b7/0x8f0 [ 177.215904][ T7400] ? __sys_sendmsg_sock+0x30/0x30 [ 177.220949][ T7400] ? import_iovec+0x6f/0xa0 [ 177.225483][ T7400] ___sys_sendmsg+0x236/0x2e0 [ 177.230178][ T7400] ? __sys_sendmsg+0x2a0/0x2a0 [ 177.234963][ T7400] ? vfs_write+0x8b2/0xd60 [ 177.239403][ T7400] __se_sys_sendmsg+0x1af/0x290 [ 177.244271][ T7400] ? __x64_sys_sendmsg+0x80/0x80 [ 177.249226][ T7400] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 177.255227][ T7400] ? lockdep_hardirqs_on+0x94/0x140 [ 177.260451][ T7400] do_syscall_64+0x4c/0xa0 [ 177.264895][ T7400] ? clear_bhb_loop+0x30/0x80 [ 177.269584][ T7400] ? clear_bhb_loop+0x30/0x80 [ 177.274276][ T7400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 177.280192][ T7400] RIP: 0033:0x7f4e44613629 [ 177.284627][ T7400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.304245][ T7400] RSP: 002b:00007f4e4286d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.312678][ T7400] RAX: ffffffffffffffda RBX: 00007f4e4488cfa0 RCX: 00007f4e44613629 [ 177.320663][ T7400] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 177.328644][ T7400] RBP: 00007f4e4286d090 R08: 0000000000000000 R09: 0000000000000000 [ 177.336624][ T7400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.344618][ T7400] R13: 00007f4e4488d038 R14: 00007f4e4488cfa0 R15: 00007ffda33598d8 [ 177.352632][ T7400] [ 177.613118][ T7422] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.821'. [ 177.626519][ T7411] netlink: 'syz.5.816': attribute type 10 has an invalid length. [ 177.684100][ T7411] netlink: 212412 bytes leftover after parsing attributes in process `syz.5.816'. [ 177.839351][ T7411] openvswitch: netlink: Flow key attr not present in new flow. [ 177.977250][ T7438] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.825'. [ 178.503360][ T7461] FAULT_INJECTION: forcing a failure. [ 178.503360][ T7461] name failslab, interval 1, probability 0, space 0, times 0 [ 178.596955][ T7461] CPU: 1 PID: 7461 Comm: syz.1.831 Not tainted syzkaller #0 [ 178.604398][ T7461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.614479][ T7461] Call Trace: [ 178.617779][ T7461] [ 178.620725][ T7461] dump_stack_lvl+0x188/0x250 [ 178.625426][ T7461] ? show_regs_print_info+0x20/0x20 [ 178.630638][ T7461] ? load_image+0x400/0x400 [ 178.635154][ T7461] ? perf_trace_lock_acquire+0xed/0x3e0 [ 178.640723][ T7461] ? perf_trace_lock_acquire+0xed/0x3e0 [ 178.646287][ T7461] should_fail+0x38c/0x4c0 [ 178.650731][ T7461] should_failslab+0x5/0x20 [ 178.655249][ T7461] slab_pre_alloc_hook+0x51/0xc0 [ 178.660207][ T7461] ? skb_clone+0x1bd/0x350 [ 178.664637][ T7461] kmem_cache_alloc+0x3d/0x290 [ 178.669421][ T7461] skb_clone+0x1bd/0x350 [ 178.673682][ T7461] __netlink_deliver_tap+0x3cd/0x7c0 [ 178.679007][ T7461] netlink_deliver_tap+0x16c/0x180 [ 178.684129][ T7461] netlink_sendskb+0x64/0x130 [ 178.688827][ T7461] netlink_ack+0x87d/0xb50 [ 178.693270][ T7461] ? netlink_dump+0xcf0/0xcf0 [ 178.697957][ T7461] ? __skb_clone+0x480/0x790 [ 178.702658][ T7461] netlink_rcv_skb+0x27a/0x440 [ 178.707437][ T7461] ? rtnetlink_bind+0x80/0x80 [ 178.712135][ T7461] ? netlink_ack+0xb50/0xb50 [ 178.716781][ T7461] netlink_unicast+0x774/0x920 [ 178.721585][ T7461] netlink_sendmsg+0x8ba/0xbe0 [ 178.726371][ T7461] ? netlink_getsockopt+0x570/0x570 [ 178.731579][ T7461] ? aa_sock_msg_perm+0x94/0x150 [ 178.736539][ T7461] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 178.741940][ T7461] ? security_socket_sendmsg+0x7c/0xa0 [ 178.747420][ T7461] ? netlink_getsockopt+0x570/0x570 [ 178.752632][ T7461] ____sys_sendmsg+0x5b7/0x8f0 [ 178.757419][ T7461] ? __sys_sendmsg_sock+0x30/0x30 [ 178.762470][ T7461] ? import_iovec+0x6f/0xa0 [ 178.766998][ T7461] ___sys_sendmsg+0x236/0x2e0 [ 178.771735][ T7461] ? __sys_sendmsg+0x2a0/0x2a0 [ 178.776525][ T7461] ? vfs_write+0x8b2/0xd60 [ 178.780976][ T7461] __se_sys_sendmsg+0x1af/0x290 [ 178.785874][ T7461] ? __x64_sys_sendmsg+0x80/0x80 [ 178.790829][ T7461] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 178.796845][ T7461] ? lockdep_hardirqs_on+0x94/0x140 [ 178.802064][ T7461] do_syscall_64+0x4c/0xa0 [ 178.806490][ T7461] ? clear_bhb_loop+0x30/0x80 [ 178.811178][ T7461] ? clear_bhb_loop+0x30/0x80 [ 178.815869][ T7461] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 178.821775][ T7461] RIP: 0033:0x7efc74175629 [ 178.826204][ T7461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.845819][ T7461] RSP: 002b:00007efc723cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.854255][ T7461] RAX: ffffffffffffffda RBX: 00007efc743eefa0 RCX: 00007efc74175629 [ 178.862245][ T7461] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 178.870231][ T7461] RBP: 00007efc723cf090 R08: 0000000000000000 R09: 0000000000000000 [ 178.878230][ T7461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.886210][ T7461] R13: 00007efc743ef038 R14: 00007efc743eefa0 R15: 00007ffcf45a6648 [ 178.894207][ T7461] [ 179.089623][ T7475] netlink: 14 bytes leftover after parsing attributes in process `syz.2.837'. [ 179.118769][ T7475] netlink: set zone limit has 4 unknown bytes [ 179.376683][ T7481] device syzkaller0 entered promiscuous mode [ 181.461284][ T7510] FAULT_INJECTION: forcing a failure. [ 181.461284][ T7510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.558548][ T7510] CPU: 0 PID: 7510 Comm: syz.4.846 Not tainted syzkaller #0 [ 181.565986][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 181.576106][ T7510] Call Trace: [ 181.579418][ T7510] [ 181.582372][ T7510] dump_stack_lvl+0x188/0x250 [ 181.587101][ T7510] ? show_regs_print_info+0x20/0x20 [ 181.592343][ T7510] ? load_image+0x400/0x400 [ 181.596881][ T7510] ? __lock_acquire+0x7d10/0x7d10 [ 181.601946][ T7510] should_fail+0x38c/0x4c0 [ 181.606399][ T7510] _copy_to_user+0x2e/0x130 [ 181.610943][ T7510] simple_read_from_buffer+0xe3/0x150 [ 181.616346][ T7510] proc_fail_nth_read+0x1a6/0x220 [ 181.621405][ T7510] ? proc_fault_inject_write+0x310/0x310 [ 181.627074][ T7510] ? fsnotify_perm+0x254/0x560 [ 181.631875][ T7510] ? proc_fault_inject_write+0x310/0x310 [ 181.637523][ T7510] vfs_read+0x301/0xd60 [ 181.641711][ T7510] ? kernel_read+0x1e0/0x1e0 [ 181.646322][ T7510] ? __fget_files+0x40f/0x480 [ 181.651204][ T7510] ? mutex_lock_nested+0x17/0x20 [ 181.656176][ T7510] ? __fdget_pos+0x2bf/0x370 [ 181.660778][ T7510] ? ksys_read+0x71/0x260 [ 181.665126][ T7510] ksys_read+0x152/0x260 [ 181.669388][ T7510] ? vfs_write+0xd60/0xd60 [ 181.673822][ T7510] ? lockdep_hardirqs_on+0x94/0x140 [ 181.679037][ T7510] do_syscall_64+0x4c/0xa0 [ 181.683465][ T7510] ? clear_bhb_loop+0x30/0x80 [ 181.688154][ T7510] ? clear_bhb_loop+0x30/0x80 [ 181.692838][ T7510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 181.698741][ T7510] RIP: 0033:0x7f2acae34ece [ 181.703171][ T7510] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 181.722792][ T7510] RSP: 002b:00007f2ac90cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 181.731231][ T7510] RAX: ffffffffffffffda RBX: 00007f2ac90ce6c0 RCX: 00007f2acae34ece [ 181.739217][ T7510] RDX: 000000000000000f RSI: 00007f2ac90ce0a0 RDI: 0000000000000004 [ 181.747203][ T7510] RBP: 00007f2ac90ce090 R08: 0000000000000000 R09: 0000000000000000 [ 181.755181][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.763167][ T7510] R13: 00007f2acb0ee038 R14: 00007f2acb0edfa0 R15: 00007ffcfb6b3328 [ 181.771175][ T7510] [ 181.898289][ T7526] netlink: 'syz.5.849': attribute type 2 has an invalid length. [ 181.934453][ T7526] netlink: 'syz.5.849': attribute type 8 has an invalid length. [ 181.978957][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.5.849'. [ 182.387061][ T7544] device veth1_macvtap left promiscuous mode [ 182.433152][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.854'. [ 182.578692][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.854'. [ 182.787682][ T7540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.854'. [ 183.032967][ T7570] netlink: 'syz.4.862': attribute type 9 has an invalid length. [ 183.083511][ T7570] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.862'. [ 183.574694][ T7579] sock: sock_set_timeout: `syz.1.865' (pid 7579) tries to set negative timeout [ 183.917487][ T7590] netlink: 'syz.4.866': attribute type 3 has an invalid length. [ 183.965211][ T7590] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.866'. [ 183.974629][ T7589] netlink: 'syz.0.869': attribute type 3 has an invalid length. [ 183.974677][ T7589] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.869'. [ 184.693976][ T7615] netlink: 'syz.0.877': attribute type 25 has an invalid length. [ 184.724890][ T7615] netlink: 'syz.0.877': attribute type 3 has an invalid length. [ 184.784696][ T7625] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 184.790749][ T7615] netlink: 132 bytes leftover after parsing attributes in process `syz.0.877'. [ 184.933758][ T7625] netlink: 'syz.2.878': attribute type 10 has an invalid length. [ 185.080510][ T7629] device sit0 entered promiscuous mode [ 185.197547][ T7634] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 185.238702][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.882'. [ 185.713147][ T7660] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.890'. [ 185.742814][ T7662] netlink: 'syz.0.891': attribute type 3 has an invalid length. [ 185.965363][ T7669] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.018800][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 186.024907][ T13] Bluetooth: hci4: command 0x0406 tx timeout [ 186.038362][ T5214] Bluetooth: hci0: command 0x0406 tx timeout [ 186.044781][ T5214] Bluetooth: hci1: command 0x0406 tx timeout [ 187.559666][ T7720] device wlan1 entered promiscuous mode [ 190.615949][ T7838] __nla_validate_parse: 3 callbacks suppressed [ 190.616018][ T7838] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.944'. [ 190.857080][ T7849] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.944'. [ 190.922034][ T7857] device syzkaller0 entered promiscuous mode [ 192.103214][ T7872] device syzkaller0 left promiscuous mode [ 192.157338][ T7870] netlink: 132 bytes leftover after parsing attributes in process `syz.5.951'. [ 192.466205][ T7870] validate_nla: 3 callbacks suppressed [ 192.466223][ T7870] netlink: 'syz.5.951': attribute type 3 has an invalid length. [ 192.718886][ T7870] netlink: 'syz.5.951': attribute type 4 has an invalid length. [ 193.019525][ T7870] netlink: 9067 bytes leftover after parsing attributes in process `syz.5.951'. [ 193.837004][ T7910] netlink: 'syz.1.961': attribute type 16 has an invalid length. [ 193.888726][ T7910] netlink: 152 bytes leftover after parsing attributes in process `syz.1.961'. [ 194.180747][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.187156][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.918288][ T7950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.973'. [ 195.161171][ T7958] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.976'. [ 195.498981][ T7971] netlink: 'syz.2.978': attribute type 21 has an invalid length. [ 195.506838][ T7971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.978'. [ 197.083274][ T8000] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.985'. [ 197.636762][ T8002] device syzkaller0 entered promiscuous mode [ 197.799909][ T8013] netlink: 'syz.0.989': attribute type 29 has an invalid length. [ 197.987446][ T8013] netlink: 'syz.0.989': attribute type 29 has an invalid length. [ 198.025546][ T8014] netlink: 'syz.0.989': attribute type 29 has an invalid length. [ 198.036839][ T8017] netlink: 'syz.1.991': attribute type 1 has an invalid length. [ 198.079209][ T8017] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.991'. [ 198.266478][ T8026] netlink: 'syz.0.994': attribute type 12 has an invalid length. [ 198.286915][ T8026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.994'. [ 198.337066][ T8025] netlink: 'syz.1.993': attribute type 10 has an invalid length. [ 198.380858][ T8025] netlink: 'syz.1.993': attribute type 16 has an invalid length. [ 198.470628][ T8025] netlink: 156 bytes leftover after parsing attributes in process `syz.1.993'. [ 198.544075][ T8037] netlink: set zone limit has 8 unknown bytes [ 200.972782][ T8050] netlink: 'syz.4.1000': attribute type 3 has an invalid length. [ 200.997183][ T8050] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1000'. [ 201.021700][ T8048] netlink: 'syz.1.1001': attribute type 21 has an invalid length. [ 201.038873][ T8048] netlink: 'syz.1.1001': attribute type 1 has an invalid length. [ 201.278993][ T8056] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1002'. [ 201.420318][ T8058] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.427238][ T8058] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.782093][ T8070] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1006'. [ 202.377262][ T8084] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1010'. [ 203.648122][ T8122] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1020'. [ 203.738824][ T8122] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 204.260653][ T8129] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1023'. [ 204.965696][ T8152] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1028'. [ 205.418311][ T8164] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1034'. [ 205.745000][ T8179] validate_nla: 2 callbacks suppressed [ 205.745018][ T8179] netlink: 'syz.0.1037': attribute type 3 has an invalid length. [ 205.849248][ T8179] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.1037'. [ 206.291784][ T8193] Â: renamed from pim6reg1 [ 209.122118][ T8215] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1046'. [ 209.276065][ T8217] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1058'. [ 210.075427][ T8249] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 210.100513][ T8249] netlink: 'syz.1.1057': attribute type 3 has an invalid length. [ 210.125780][ T8249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1057'. [ 211.124337][ T8256] chnl_net:caif_netlink_parms(): no params data found [ 211.532897][ T8303] netlink: 'syz.4.1072': attribute type 1 has an invalid length. [ 211.607177][ T8303] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1072'. [ 211.715096][ T8256] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.742756][ T8256] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.763257][ T8256] device bridge_slave_0 entered promiscuous mode [ 211.775836][ T8256] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.783471][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.792183][ T8256] device bridge_slave_1 entered promiscuous mode [ 211.801572][ T8316] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1076'. [ 211.907913][ T8314] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 212.251790][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 212.268946][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.480542][ T8314] device bridge_slave_1 left promiscuous mode [ 212.496261][ T8314] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.511129][ T8314] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 212.545226][ T8319] netlink: 'syz.4.1077': attribute type 2 has an invalid length. [ 212.575572][ T8319] netlink: 'syz.4.1077': attribute type 8 has an invalid length. [ 212.612899][ T8319] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1077'. [ 212.766358][ T8326] netlink: 'syz.2.1079': attribute type 21 has an invalid length. [ 212.813867][ T8256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.839517][ T8328] device wlan0 entered promiscuous mode [ 212.856147][ T8256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.041481][ T8256] team0: Port device team_slave_0 added [ 213.047798][ T8341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1082'. [ 213.083194][ T8256] team0: Port device team_slave_1 added [ 213.156457][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.183866][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.261001][ T8256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.419785][ T8256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.426797][ T8256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.475805][ T8256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.757541][ T8362] netlink: 'syz.0.1088': attribute type 2 has an invalid length. [ 213.777113][ T8359] netlink: 'syz.0.1088': attribute type 3 has an invalid length. [ 213.839756][ T8359] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1088'. [ 213.868786][ T8362] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1088'. [ 213.967591][ T8256] device hsr_slave_0 entered promiscuous mode [ 214.013639][ T8256] device hsr_slave_1 entered promiscuous mode [ 214.328681][ T5209] Bluetooth: hci2: command 0x041b tx timeout [ 214.759600][ T8256] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 214.878774][ T8256] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 214.955639][ T8256] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 215.017462][ T8256] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 215.219484][ T8392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1096'. [ 215.622525][ T8411] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1100'. [ 215.869762][ T8418] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 215.908622][ T8256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.947643][ T8418] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 216.012225][ T8256] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.059247][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.068605][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.099618][ T8420] netlink: 'syz.0.1103': attribute type 29 has an invalid length. [ 216.296269][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.312118][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.337891][ T4263] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.345065][ T4263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.390240][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.408686][ T5209] Bluetooth: hci2: command 0x040f tx timeout [ 216.417314][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.439275][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.446399][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.494405][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.622177][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.647720][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.714353][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.771069][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.847084][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.880610][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.988087][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.030236][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.056795][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.076176][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.093690][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.122649][ T8256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.389163][ T8468] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1113'. [ 217.670456][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.678048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.734704][ T8256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.877761][ T8491] validate_nla: 1 callbacks suppressed [ 217.877777][ T8491] netlink: 'syz.0.1122': attribute type 13 has an invalid length. [ 217.927388][ T8491] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1122'. [ 218.494520][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 218.733084][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 218.742762][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 218.832241][ T8524] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1131'. [ 218.933315][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 218.963292][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 218.986378][ T8256] device veth0_vlan entered promiscuous mode [ 219.028881][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.059731][ T6305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.125592][ T8256] device veth1_vlan entered promiscuous mode [ 219.171423][ T8530] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1133'. [ 219.235576][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.268097][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.319648][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.373690][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.445463][ T8256] device veth0_macvtap entered promiscuous mode [ 219.502137][ T8256] device veth1_macvtap entered promiscuous mode [ 219.731569][ T8542] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.1136'. [ 219.866754][ T8545] netlink: 'syz.1.1145': attribute type 3 has an invalid length. [ 219.992149][ T8540] netlink: 'syz.1.1145': attribute type 21 has an invalid length. [ 220.016813][ T8540] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1145'. [ 220.071813][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.087367][ T8545] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1145'. [ 220.118830][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 220.130141][ T8544] netlink: 'syz.2.1136': attribute type 10 has an invalid length. [ 220.160634][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.205925][ T8544] device bridge_slave_1 left promiscuous mode [ 220.278973][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.436278][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.458773][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.491911][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.526084][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.543747][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.572079][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.651580][ T8256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.681630][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.760910][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.785993][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.815092][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.841020][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.888563][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.898420][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.975052][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.987951][ T8256] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.004129][ T8256] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.114737][ T8256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.159108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 221.197795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 221.234205][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.276466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.340986][ T8256] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.380846][ T8256] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.411261][ T8256] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.432289][ T8256] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.564294][ T8575] netlink: 'syz.0.1144': attribute type 9 has an invalid length. [ 221.598683][ T8575] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1144'. [ 221.655421][ T8578] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1146'. [ 221.933451][ T144] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.416151][ T144] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.446422][ T8577] netlink: 'syz.0.1144': attribute type 9 has an invalid length. [ 222.471054][ T8577] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1144'. [ 222.821345][ T144] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.973761][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.996088][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.124418][ T144] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.148911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.281515][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.318902][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.443478][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.719796][ T8610] netlink: 'syz.6.1054': attribute type 21 has an invalid length. [ 223.754022][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1054'. [ 224.135372][ T8622] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1156'. [ 225.427377][ T8664] netlink: 'syz.6.1164': attribute type 10 has an invalid length. [ 225.780256][ T8666] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1165'. [ 225.936097][ T8666] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 226.287784][ T8664] team0 (unregistering): Port device team_slave_0 removed [ 226.332512][ T8673] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1167'. [ 226.372490][ T8664] team0 (unregistering): Port device team_slave_1 removed [ 226.882133][ T8686] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 226.944895][ T8686] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1170'. [ 227.668257][ T8715] netlink: 'syz.4.1176': attribute type 41 has an invalid length. [ 227.870749][ T8723] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1178'. [ 229.001834][ T144] device batadv0 left promiscuous mode [ 229.007558][ T144] ¤: port 1(batadv0) entered disabled state [ 229.296499][ T144] device hsr_slave_0 left promiscuous mode [ 230.448620][ T144] device hsr_slave_1 left promiscuous mode [ 230.757498][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.765316][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.780484][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.788150][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.796806][ T144] device bridge_slave_0 left promiscuous mode [ 230.803508][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.824129][ T144] device veth1_macvtap left promiscuous mode [ 230.835780][ T144] device veth0_macvtap left promiscuous mode [ 230.842286][ T144] device veth1_vlan left promiscuous mode [ 230.848275][ T144] device veth0_vlan left promiscuous mode [ 231.142025][ T144] team0 (unregistering): Port device team_slave_1 removed [ 231.157119][ T144] team0 (unregistering): Port device team_slave_0 removed [ 231.171441][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.187054][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.203035][ T144] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 231.261275][ T144] team0 (unregistering): Port device bond0 removed [ 231.281212][ T144] bond0 (unregistering): Released all slaves [ 231.341802][ T8764] netlink: 'syz.1.1188': attribute type 17 has an invalid length. [ 231.353098][ T8764] netlink: 'syz.1.1188': attribute type 16 has an invalid length. [ 231.361395][ T8764] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1188'. [ 231.378619][ T8771] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1187'. [ 231.398693][ T8771] bridge_slave_1: default FDB implementation only supports local addresses [ 231.505384][ T8792] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1191'. [ 231.815838][ T8800] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 231.893390][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 232.582643][ T8829] netlink: 'syz.6.1200': attribute type 9 has an invalid length. [ 232.638104][ T8829] netlink: 61951 bytes leftover after parsing attributes in process `syz.6.1200'. [ 232.670524][ T8839] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1204'. [ 233.024992][ T8866] sctp: [Deprecated]: syz.2.1209 (pid 8866) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.024992][ T8866] Use struct sctp_sack_info instead [ 233.121742][ T8862] netlink: 'syz.2.1209': attribute type 10 has an invalid length. [ 234.167618][ T8883] raw_sendmsg: syz.4.1214 forgot to set AF_INET. Fix it! [ 234.432637][ T8893] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1217'. [ 234.584277][ T8898] netlink: 'syz.0.1216': attribute type 10 has an invalid length. [ 234.858027][ T8908] netlink: 'syz.1.1221': attribute type 21 has an invalid length. [ 234.929278][ T8908] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1221'. [ 234.938699][ T8913] netlink: 'syz.1.1221': attribute type 21 has an invalid length. [ 235.059982][ T8913] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1221'. [ 235.147670][ T8884] delete_channel: no stack [ 235.283377][ T8923] netlink: 'syz.0.1223': attribute type 10 has an invalid length. [ 235.418628][ T8923] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1223'. [ 235.488330][ T8940] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 235.495407][ T8940] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.569083][ T8945] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1226'. [ 237.146750][ T8979] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1235'. [ 237.210014][ T8979] netlink: 'syz.6.1235': attribute type 6 has an invalid length. [ 238.049866][ T9016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 238.066882][ T9018] netlink: 'syz.4.1241': attribute type 3 has an invalid length. [ 238.188701][ T9018] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.1241'. [ 238.212973][ T9016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.326022][ T9018] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1241'. [ 238.439241][ T9030] device wlan0 entered promiscuous mode [ 238.496088][ T9030] netlink: 'syz.2.1245': attribute type 9 has an invalid length. [ 238.531879][ T9030] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1245'. [ 239.595120][ T9060] device syzkaller0 entered promiscuous mode [ 239.597072][ T9065] netlink: 'syz.6.1252': attribute type 3 has an invalid length. [ 239.678944][ T9065] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.1252'. [ 239.709496][ T9081] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1256'. [ 240.338770][ T9109] sctp: [Deprecated]: syz.4.1260 (pid 9109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.338770][ T9109] Use struct sctp_sack_info instead [ 240.567117][ T9109] netlink: 'syz.4.1260': attribute type 10 has an invalid length. [ 241.568288][ T9134] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1266'. [ 241.607247][ T9146] netlink: 'syz.0.1269': attribute type 16 has an invalid length. [ 241.616596][ T9139] netlink: 'syz.4.1268': attribute type 27 has an invalid length. [ 241.635110][ T9139] C: renamed from team_slave_0 [ 241.653229][ T9146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1269'. [ 241.664765][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1270'. [ 241.782239][ T9150] netlink: 'syz.1.1271': attribute type 12 has an invalid length. [ 241.847385][ T9150] netlink: 'syz.1.1271': attribute type 11 has an invalid length. [ 241.928612][ T9150] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.1271'. [ 242.193051][ T9166] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 242.217777][ T9166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1275'. [ 242.255543][ T9166] device team0 entered promiscuous mode [ 242.287319][ T9166] device team_slave_0 entered promiscuous mode [ 242.317263][ T9166] device team_slave_1 entered promiscuous mode [ 242.335911][ T9166] device geneve1 entered promiscuous mode [ 242.518459][ T9166] bridge0: port 2(team0) entered blocking state [ 242.537953][ T9166] bridge0: port 2(team0) entered disabled state [ 242.891015][ T9166] bridge0: port 2(team0) entered blocking state [ 242.897464][ T9166] bridge0: port 2(team0) entered forwarding state [ 242.916429][ T9177] netlink: 'syz.6.1279': attribute type 21 has an invalid length. [ 243.028222][ T9190] netlink: 'syz.4.1281': attribute type 6 has an invalid length. [ 244.273230][ T9229] netlink: 'syz.0.1290': attribute type 29 has an invalid length. [ 244.309384][ T9229] netlink: 'syz.0.1290': attribute type 29 has an invalid length. [ 244.383182][ T9229] netlink: 'syz.0.1290': attribute type 29 has an invalid length. [ 244.712488][ T9241] netlink: 'syz.0.1293': attribute type 3 has an invalid length. [ 244.777047][ T9241] __nla_validate_parse: 1 callbacks suppressed [ 244.777064][ T9241] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.1293'. [ 244.891630][ T9243] delete_channel: no stack [ 245.699668][ T9278] netlink: 'syz.6.1305': attribute type 6 has an invalid length. [ 245.724241][ T9279] netlink: 'syz.4.1304': attribute type 3 has an invalid length. [ 245.764034][ T9280] netlink: 'syz.4.1304': attribute type 3 has an invalid length. [ 245.806287][ T9279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1304'. [ 245.829246][ T9280] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1304'. [ 246.725847][ T9305] netlink: 'syz.6.1312': attribute type 17 has an invalid length. [ 246.799243][ T9305] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1312'. [ 247.710542][ T9326] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.1318'. [ 247.767924][ T9326] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1318'. [ 248.335041][ T9343] validate_nla: 3 callbacks suppressed [ 248.335060][ T9343] netlink: 'syz.4.1323': attribute type 6 has an invalid length. [ 248.407542][ T9343] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1323'. [ 249.725293][ T9410] netlink: 'syz.2.1341': attribute type 19 has an invalid length. [ 249.794722][ T9410] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1341'. [ 249.980337][ T9410] netlink: 611 bytes leftover after parsing attributes in process `syz.2.1341'. [ 250.126096][ T9424] netlink: 'syz.1.1344': attribute type 10 has an invalid length. [ 250.181056][ T9424] team0: Port device geneve1 added [ 250.711093][ T9453] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1351'. [ 251.135156][ T9477] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 252.433078][ T9509] netlink: 208644 bytes leftover after parsing attributes in process `syz.4.1364'. [ 252.485577][ T9509] netlink: 'syz.4.1364': attribute type 1 has an invalid length. [ 252.638538][ T9503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1362'. [ 254.563259][ T9559] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1371'. [ 254.959400][ T9553] delete_channel: no stack [ 255.136209][ T9555] netlink: 611 bytes leftover after parsing attributes in process `syz.1.1370'. [ 255.182464][ T9569] netlink: 'syz.2.1372': attribute type 21 has an invalid length. [ 255.262841][ T9569] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1372'. [ 255.380780][ T9559] netlink: 21192 bytes leftover after parsing attributes in process `syz.0.1371'. [ 255.418531][ T9559] tipc: Started in network mode [ 255.423442][ T9559] tipc: Node identity 1a, cluster identity 106 [ 255.468525][ T9559] tipc: Node number set to 26 [ 255.611300][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.617737][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.914234][ T9604] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1380'. [ 255.956822][ T9604] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1380'. [ 256.138992][ T9604] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1380'. [ 256.648470][ T9634] IPv6: Can't replace route, no match found [ 256.674815][ T9635] netlink: 'syz.0.1387': attribute type 2 has an invalid length. [ 256.952415][ T9649] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1391'. [ 257.144358][ T9647] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1390'. [ 257.264802][ T9647] netlink: 21192 bytes leftover after parsing attributes in process `syz.1.1390'. [ 257.327575][ T9647] tipc: Started in network mode [ 257.391684][ T9647] tipc: Node identity 1a, cluster identity 106 [ 257.444461][ T9647] tipc: Node number set to 26 [ 257.551141][ T9679] tap0: tun_chr_ioctl cmd 2147767511 [ 257.563566][ T9642] delete_channel: no stack [ 257.613165][ T9674] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1396'. [ 260.478931][ T9759] __nla_validate_parse: 1 callbacks suppressed [ 260.478952][ T9759] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1409'. [ 261.025314][ T9779] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1414'. [ 261.098277][ T9779] netlink: 21192 bytes leftover after parsing attributes in process `syz.4.1414'. [ 261.120166][ T9779] tipc: Started in network mode [ 261.141872][ T9779] tipc: Node identity 1a, cluster identity 106 [ 261.168779][ T9779] tipc: Node number set to 26 [ 261.219699][ T9777] delete_channel: no stack [ 261.434243][ T9785] netlink: 'syz.2.1415': attribute type 12 has an invalid length. [ 261.538933][ T9785] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.1415'. [ 262.064619][ T9803] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1421'. [ 262.138374][ T9821] netlink: 'syz.1.1424': attribute type 1 has an invalid length. [ 262.204585][ T9821] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 262.247103][ T9821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1424'. [ 262.529920][ T9841] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1431'. [ 263.077321][ T9867] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1434'. [ 264.267057][ T9924] netlink: 'syz.4.1448': attribute type 11 has an invalid length. [ 264.564406][ T9949] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1451'. [ 266.045718][ T9996] tun0: tun_chr_ioctl cmd 1074025677 [ 266.065210][ T9996] tun0: linktype set to 768 [ 266.105457][ T9993] netlink: 'syz.2.1462': attribute type 10 has an invalid length. [ 266.523252][T10004] netlink: 'syz.1.1467': attribute type 21 has an invalid length. [ 266.538564][T10004] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1467'. [ 266.657829][T10009] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1468'. [ 266.817371][T10018] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.1470'. [ 266.853544][T10018] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.1470'. [ 267.707162][T10062] netlink: 'syz.1.1483': attribute type 10 has an invalid length. [ 267.718754][T10062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1483'. [ 267.734484][T10062] batman_adv: batadv0: Adding interface: vlan1 [ 267.743749][T10062] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.771234][T10062] batman_adv: batadv0: Interface activated: vlan1 [ 267.793972][T10064] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1482'. [ 268.111348][T10082] delete_channel: no stack [ 268.628718][T10116] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1495'. [ 268.964877][T10129] netlink: 'syz.1.1500': attribute type 6 has an invalid length. [ 269.038967][T10129] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1500'. [ 270.283129][T10158] netlink: 'syz.0.1509': attribute type 10 has an invalid length. [ 270.312536][T10161] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 270.332019][T10158] device wlan1 entered promiscuous mode [ 270.351072][T10161] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1511'. [ 270.429470][T10158] team0: Port device wlan1 added [ 270.454274][T10167] device syzkaller0 entered promiscuous mode [ 271.045109][T10186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 271.069636][T10165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.179727][T10185] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.410294][T10201] netlink: 63503 bytes leftover after parsing attributes in process `syz.6.1522'. [ 271.697745][T10210] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.1525'. [ 271.714064][T10210] netlink: 6324 bytes leftover after parsing attributes in process `syz.6.1525'. [ 271.725471][T10210] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1525'. [ 272.304393][T10228] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1528'. [ 272.439742][T10249] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.1535'. [ 272.446000][T10228] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 272.517901][T10228] CPU: 1 PID: 10228 Comm: syz.2.1528 Not tainted syzkaller #0 [ 272.525436][T10228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.535530][T10228] Call Trace: [ 272.538847][T10228] [ 272.541827][T10228] dump_stack_lvl+0x188/0x250 [ 272.546573][T10228] ? show_regs_print_info+0x20/0x20 [ 272.551833][T10228] ? load_image+0x400/0x400 [ 272.556428][T10228] sysfs_warn_dup+0x8a/0xa0 [ 272.560976][T10228] sysfs_do_create_link_sd+0xc0/0x110 [ 272.566399][T10228] device_add+0x7ed/0xfb0 [ 272.570800][T10228] wiphy_register+0x1e81/0x2c30 [ 272.575749][T10228] ? cfg80211_event_work+0x40/0x40 [ 272.581034][T10228] ? minstrel_ht_alloc+0x808/0x980 [ 272.586208][T10228] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 272.592352][T10228] ieee80211_register_hw+0x2aa1/0x3af0 [ 272.597904][T10228] ? ieee80211_tasklet_handler+0x20/0x20 [ 272.603614][T10228] ? rcu_is_watching+0x11/0xa0 [ 272.608442][T10228] ? memset+0x1e/0x40 [ 272.612469][T10228] ? hrtimer_init+0x10c/0x220 [ 272.617200][T10228] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 272.623007][T10228] hwsim_new_radio_nl+0xa6f/0xc40 [ 272.628089][T10228] genl_rcv_msg+0xcea/0xf90 [ 272.632641][T10228] ? genl_bind+0x380/0x380 [ 272.637096][T10228] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 272.642844][T10228] ? verify_lock_unused+0x140/0x140 [ 272.648069][T10228] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 272.653816][T10228] ? perf_trace_lock+0x301/0x390 [ 272.658783][T10228] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 272.665334][T10228] netlink_rcv_skb+0x1f5/0x440 [ 272.670127][T10228] ? genl_bind+0x380/0x380 [ 272.674576][T10228] ? netlink_ack+0xb50/0xb50 [ 272.679188][T10228] ? __lock_acquire+0x7d10/0x7d10 [ 272.684258][T10228] ? down_read+0x1aa/0x2e0 [ 272.688702][T10228] genl_rcv+0x24/0x40 [ 272.692712][T10228] netlink_unicast+0x774/0x920 [ 272.697946][T10228] netlink_sendmsg+0x8ba/0xbe0 [ 272.702739][T10228] ? netlink_getsockopt+0x570/0x570 [ 272.707962][T10228] ? aa_sock_msg_perm+0x94/0x150 [ 272.712930][T10228] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 272.718231][T10228] ? security_socket_sendmsg+0x7c/0xa0 [ 272.723709][T10228] ? netlink_getsockopt+0x570/0x570 [ 272.728926][T10228] ____sys_sendmsg+0x5b7/0x8f0 [ 272.733726][T10228] ? __sys_sendmsg_sock+0x30/0x30 [ 272.738794][T10228] ? import_iovec+0x6f/0xa0 [ 272.743339][T10228] ___sys_sendmsg+0x236/0x2e0 [ 272.748054][T10228] ? __sys_sendmsg+0x2a0/0x2a0 [ 272.752861][T10228] ? trace_event_raw_event_lock+0x270/0x270 [ 272.758820][T10228] __se_sys_sendmsg+0x1af/0x290 [ 272.763696][T10228] ? __x64_sys_sendmsg+0x80/0x80 [ 272.768652][T10228] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 272.774686][T10228] ? lockdep_hardirqs_on+0x94/0x140 [ 272.779915][T10228] do_syscall_64+0x4c/0xa0 [ 272.784350][T10228] ? clear_bhb_loop+0x30/0x80 [ 272.789041][T10228] ? clear_bhb_loop+0x30/0x80 [ 272.793741][T10228] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.799672][T10228] RIP: 0033:0x7f82bc79a629 [ 272.804109][T10228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.823733][T10228] RSP: 002b:00007f82ba9f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.832173][T10228] RAX: ffffffffffffffda RBX: 00007f82bca13fa0 RCX: 00007f82bc79a629 [ 272.840167][T10228] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 272.848155][T10228] RBP: 00007f82bc830b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.856327][T10228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.864332][T10228] R13: 00007f82bca14038 R14: 00007f82bca13fa0 R15: 00007ffffaf05a98 [ 272.872356][T10228] [ 273.194622][T10267] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.1541'. [ 273.208302][T10268] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 273.229045][T10268] syzkaller1: linktype set to 769 [ 276.100670][T10283] netlink: 'syz.6.1545': attribute type 6 has an invalid length. [ 276.880235][T10331] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1557'. [ 276.919026][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1557'. [ 276.980522][T10331] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1557'. [ 276.998374][T10334] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1557'. [ 277.379899][T10351] netlink: 'syz.0.1561': attribute type 6 has an invalid length. [ 277.428371][T10342] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1561'. [ 277.737059][T10368] netlink: 'syz.1.1567': attribute type 21 has an invalid length. [ 277.831317][T10368] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1567'. [ 278.900515][T10400] netlink: 45651 bytes leftover after parsing attributes in process `syz.4.1576'. [ 279.033732][T10414] netlink: 'syz.1.1579': attribute type 10 has an invalid length. [ 279.113138][T10414] team0: Device hsr_slave_0 failed to register rx_handler [ 279.804205][T10449] [ 279.806601][T10449] ============================================ [ 279.812770][T10449] WARNING: possible recursive locking detected [ 279.818950][T10449] syzkaller #0 Not tainted [ 279.823403][T10449] -------------------------------------------- [ 279.829570][T10449] syz.4.1588/10449 is trying to acquire lock: [ 279.835684][T10449] ffff888022102c98 (_xmit_ETHER#2){+.-.}-{2:2}, at: __dev_queue_xmit+0x14b5/0x2fd0 [ 279.845046][T10449] [ 279.845046][T10449] but task is already holding lock: [ 279.852429][T10449] ffff888024a2b098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x162/0x4b0 [ 279.861523][T10449] [ 279.861523][T10449] other info that might help us debug this: [ 279.869600][T10449] Possible unsafe locking scenario: [ 279.869600][T10449] [ 279.877071][T10449] CPU0 [ 279.880373][T10449] ---- [ 279.883670][T10449] lock(_xmit_ETHER#2); [ 279.887953][T10449] lock(_xmit_ETHER#2); [ 279.892235][T10449] [ 279.892235][T10449] *** DEADLOCK *** [ 279.892235][T10449] [ 279.900415][T10449] May be due to missing lock nesting notation [ 279.900415][T10449] [ 279.908765][T10449] 10 locks held by syz.4.1588/10449: [ 279.914080][T10449] #0: ffff88805eceaa60 (sk_lock-AF_INET){+.+.}-{0:0}, at: sctp_sendmsg+0xa70/0x2900 [ 279.923713][T10449] #1: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 279.933077][T10449] #2: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 279.942689][T10449] #3: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 279.952496][T10449] #4: ffff88801f588258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+...}-{2:2}, at: __dev_queue_xmit+0x1120/0x2fd0 [ 279.964993][T10449] #5: ffff888024a2b098 (_xmit_ETHER#2){+.-.}-{2:2}, at: sch_direct_xmit+0x162/0x4b0 [ 279.974528][T10449] #6: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 279.984135][T10449] #7: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 279.994048][T10449] #8: ffffffff8c31eaa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 280.003404][T10449] #9: ffffffff8c31eb00 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 280.013012][T10449] [ 280.013012][T10449] stack backtrace: [ 280.018917][T10449] CPU: 0 PID: 10449 Comm: syz.4.1588 Not tainted syzkaller #0 [ 280.026390][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 280.036463][T10449] Call Trace: [ 280.039753][T10449] [ 280.042700][T10449] dump_stack_lvl+0x188/0x250 [ 280.047402][T10449] ? show_regs_print_info+0x20/0x20 [ 280.052617][T10449] ? load_image+0x400/0x400 [ 280.057139][T10449] __lock_acquire+0x1236/0x7d10 [ 280.062011][T10449] ? unwind_get_return_address+0x49/0x80 [ 280.067704][T10449] ? check_noncircular+0x189/0x330 [ 280.072834][T10449] ? verify_lock_unused+0x140/0x140 [ 280.078053][T10449] ? skb_network_protocol+0x51d/0x770 [ 280.083450][T10449] ? validate_xmit_xfrm+0xb2/0x1010 [ 280.088762][T10449] ? mark_lock+0x94/0x320 [ 280.093110][T10449] ? rcu_lock_release+0x20/0x20 [ 280.098119][T10449] lock_acquire+0x19e/0x400 [ 280.102649][T10449] ? __dev_queue_xmit+0x14b5/0x2fd0 [ 280.107977][T10449] ? validate_xmit_skb+0x7b3/0xe40 [ 280.113133][T10449] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 280.119302][T10449] ? lockdep_hardirqs_on+0x94/0x140 [ 280.124542][T10449] ? read_lock_is_recursive+0x10/0x10 [ 280.129936][T10449] ? validate_xmit_skb_list+0x120/0x120 [ 280.135499][T10449] ? __dev_queue_xmit+0x7d9/0x2fd0 [ 280.140625][T10449] _raw_spin_lock+0x2a/0x40 [ 280.145249][T10449] ? __dev_queue_xmit+0x14b5/0x2fd0 [ 280.150565][T10449] __dev_queue_xmit+0x14b5/0x2fd0 [ 280.155615][T10449] ? _local_bh_enable+0xa0/0xa0 [ 280.160485][T10449] ? dev_queue_xmit+0x20/0x20 [ 280.165189][T10449] ? trace_event_raw_event_lock+0x270/0x270 [ 280.171210][T10449] br_dev_queue_push_xmit+0x692/0x850 [ 280.176631][T10449] ? __lock_acquire+0x7d10/0x7d10 [ 280.181669][T10449] ? nla_nest_cancel+0x90/0x90 [ 280.186445][T10449] ? nf_hook_slow+0x1b0/0x200 [ 280.191138][T10449] ? nla_nest_cancel+0x90/0x90 [ 280.195918][T10449] NF_HOOK+0x2f9/0x380 [ 280.200007][T10449] ? br_forward_finish+0x80/0x80 [ 280.204992][T10449] ? nla_nest_cancel+0x90/0x90 [ 280.209799][T10449] ? __lock_acquire+0x7d10/0x7d10 [ 280.215014][T10449] br_forward_finish+0x74/0x80 [ 280.219882][T10449] ? nla_nest_cancel+0x90/0x90 [ 280.224754][T10449] ? br_dev_queue_push_xmit+0x850/0x850 [ 280.230398][T10449] NF_HOOK+0x2f9/0x380 [ 280.234508][T10449] ? br_forward_finish+0x80/0x80 [ 280.239546][T10449] ? br_dev_queue_push_xmit+0x850/0x850 [ 280.245131][T10449] ? br_handle_vlan+0x5d/0x5e0 [ 280.250008][T10449] __br_forward+0x433/0x610 [ 280.254528][T10449] ? br_dev_queue_push_xmit+0x850/0x850 [ 280.260096][T10449] ? __copy_skb_header+0x3ba/0x4f0 [ 280.265230][T10449] ? should_deliver+0x2c0/0x2c0 [ 280.270103][T10449] ? skb_clone+0x1f1/0x350 [ 280.274536][T10449] maybe_deliver+0xb5/0x150 [ 280.279195][T10449] br_flood+0x2fc/0x450 [ 280.283370][T10449] br_dev_xmit+0x922/0x14b0 [ 280.287884][T10449] ? br_net_exit+0x1c0/0x1c0 [ 280.292483][T10449] ? lockdep_hardirqs_on+0x94/0x140 [ 280.297783][T10449] ? rcu_lock_release+0x20/0x20 [ 280.302658][T10449] dev_hard_start_xmit+0x2a5/0x7e0 [ 280.307795][T10449] __dev_queue_xmit+0x1a78/0x2fd0 [ 280.312844][T10449] ? lockdep_hardirqs_on+0x94/0x140 [ 280.318086][T10449] ? dev_queue_xmit+0x20/0x20 [ 280.322779][T10449] ? eth_header+0x117/0x200 [ 280.327325][T10449] ? llc_sysctl_exit+0x60/0x60 [ 280.332121][T10449] ? neigh_resolve_output+0x5d7/0x6a0 [ 280.337518][T10449] ip_finish_output2+0xcbf/0x10a0 [ 280.342555][T10449] ? ip_mc_finish_output+0x250/0x250 [ 280.347853][T10449] ? rcu_is_watching+0x11/0xa0 [ 280.352630][T10449] ? ip_fragment+0x210/0x210 [ 280.357229][T10449] ? dev_loopback_xmit+0x255/0x330 [ 280.362349][T10449] ? ip_skb_dst_mtu+0x584/0x9b0 [ 280.367211][T10449] ? ip_finish_output+0x3e8/0x4b0 [ 280.372244][T10449] iptunnel_xmit+0x4d6/0x8e0 [ 280.376848][T10449] ip_tunnel_xmit+0x1905/0x2280 [ 280.381758][T10449] ? ip4_dst_hoplimit+0x2a0/0x2a0 [ 280.386800][T10449] ? gre_build_header+0x25b/0x8c0 [ 280.391845][T10449] erspan_xmit+0x9d5/0x15a0 [ 280.396370][T10449] dev_hard_start_xmit+0x2a5/0x7e0 [ 280.401505][T10449] sch_direct_xmit+0x25a/0x4b0 [ 280.406281][T10449] ? mrp_pdu_append_vecattr_event+0x1590/0x1590 [ 280.412537][T10449] ? __dev_queue_xmit+0x1294/0x2fd0 [ 280.417781][T10449] __dev_queue_xmit+0x179f/0x2fd0 [ 280.422828][T10449] ? dev_queue_xmit+0x20/0x20 [ 280.427518][T10449] ? eth_header+0x117/0x200 [ 280.432037][T10449] ? llc_sysctl_exit+0x60/0x60 [ 280.436811][T10449] ? neigh_resolve_output+0x5d7/0x6a0 [ 280.442205][T10449] ip_finish_output2+0xcbf/0x10a0 [ 280.447241][T10449] ? ip_skb_dst_mtu+0x311/0x9b0 [ 280.452103][T10449] ? ip_fragment+0x210/0x210 [ 280.456715][T10449] ? ip_skb_dst_mtu+0x584/0x9b0 [ 280.461601][T10449] ? ip_finish_output+0x3e8/0x4b0 [ 280.466641][T10449] __ip_queue_xmit+0x11c1/0x1c00 [ 280.471603][T10449] ? sctp_v4_xmit+0x373/0xdf0 [ 280.476298][T10449] sctp_packet_transmit+0x239c/0x2910 [ 280.481806][T10449] sctp_packet_singleton+0x231/0x330 [ 280.487203][T10449] ? sctp_outq_select_transport+0x570/0x570 [ 280.493123][T10449] ? sctp_outq_select_transport+0x45d/0x570 [ 280.499139][T10449] ? sctp_transport_burst_limited+0x193/0x280 [ 280.505235][T10449] sctp_outq_flush+0x4ac/0x3100 [ 280.510106][T10449] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 280.516017][T10449] ? rcu_is_watching+0x11/0xa0 [ 280.520917][T10449] ? sctp_outq_tail+0x8a0/0x8a0 [ 280.525784][T10449] ? sctp_outq_tail+0x600/0x8a0 [ 280.530645][T10449] ? sctp_outq_uncork+0x49/0xa0 [ 280.535520][T10449] sctp_do_sm+0x4ee2/0x55f0 [ 280.540048][T10449] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 280.545953][T10449] ? sctp_stream_init_ext+0x53/0x160 [ 280.551270][T10449] ? ____sys_sendmsg+0x5b7/0x8f0 [ 280.556216][T10449] ? ___sys_sendmsg+0x236/0x2e0 [ 280.561169][T10449] ? __sk_mem_raise_allocated+0x6d7/0x1140 [ 280.566991][T10449] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 280.572395][T10449] sctp_sendmsg_to_asoc+0x14a7/0x1d90 [ 280.577876][T10449] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.583983][T10449] ? sctp_assoc_add_peer+0xe2c/0x15a0 [ 280.589379][T10449] ? lock_chain_count+0x20/0x20 [ 280.594252][T10449] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 280.600124][T10449] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 280.606303][T10449] ? sctp_sendmsg+0xb50/0x2900 [ 280.611093][T10449] sctp_sendmsg+0x196a/0x2900 [ 280.615784][T10449] ? lock_chain_count+0x20/0x20 [ 280.620739][T10449] ? aa_sk_perm+0x7dc/0x910 [ 280.625254][T10449] ? sctp_getsockopt+0x8a0/0x8a0 [ 280.630202][T10449] ? aa_af_perm+0x340/0x340 [ 280.634721][T10449] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 280.640196][T10449] ? sock_rps_record_flow+0x17/0x3b0 [ 280.645495][T10449] ? inet_sendmsg+0xe5/0x2f0 [ 280.650106][T10449] ? inet_send_prepare+0x260/0x260 [ 280.655237][T10449] ____sys_sendmsg+0x5b7/0x8f0 [ 280.660020][T10449] ? __sys_sendmsg_sock+0x30/0x30 [ 280.665092][T10449] ? import_iovec+0x6f/0xa0 [ 280.669635][T10449] ___sys_sendmsg+0x236/0x2e0 [ 280.674333][T10449] ? __sys_sendmsg+0x2a0/0x2a0 [ 280.679134][T10449] __se_sys_sendmsg+0x1af/0x290 [ 280.684006][T10449] ? __x64_sys_sendmsg+0x80/0x80 [ 280.688960][T10449] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.694961][T10449] ? lockdep_hardirqs_on+0x94/0x140 [ 280.700545][T10449] do_syscall_64+0x4c/0xa0 [ 280.704977][T10449] ? clear_bhb_loop+0x30/0x80 [ 280.709662][T10449] ? clear_bhb_loop+0x30/0x80 [ 280.714350][T10449] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 280.720257][T10449] RIP: 0033:0x7f2acae74629 [ 280.724683][T10449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.744308][T10449] RSP: 002b:00007f2ac90ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.752738][T10449] RAX: ffffffffffffffda RBX: 00007f2acb0edfa0 RCX: 00007f2acae74629 [ 280.760728][T10449] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000006 [ 280.768713][T10449] RBP: 00007f2acaf0ab39 R08: 0000000000000000 R09: 0000000000000000 [ 280.776696][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.784691][T10449] R13: 00007f2acb0ee038 R14: 00007f2acb0edfa0 R15: 00007ffcfb6b3328 [ 280.792691][T10449] [ 280.858638][T10438] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1582'. [ 280.941155][T10438] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht'